xb3d8, 0x0, 0x4000, 0xffffffe1, 0x3, 0x2, 0x2954, 0x8, 0x6045, 0xffffff4f, 0x8, 0x1, 0x4, 0x80000000, 0x1, 0xffffe16d, 0x2, 0xa8f, 0x2, 0x101, 0x4, 0x8, 0x1, 0x7, 0x100, 0x5, 0x6, 0x8000, 0x7, 0x8, 0x8001, 0x5fa3, 0x7, 0x5e], [0x6, 0x9, 0xfffffffd, 0x26bc, 0x800, 0xffff7fff, 0x80, 0x7f, 0x892, 0x0, 0x0, 0x2, 0x9, 0x1ff, 0x4, 0x9, 0x6, 0x8, 0x10001, 0x4, 0x3, 0x8aeb, 0xffffffff, 0x7, 0x80000000, 0x20, 0x1000, 0x23, 0x7, 0x101, 0x1, 0x10001, 0x8, 0xff, 0x4, 0x80000001, 0xc8, 0xfffff536, 0x736fd575, 0x1, 0x5, 0x7fff, 0x1, 0x0, 0x0, 0x1, 0x4, 0xa170, 0xe5, 0x27d4ff6c, 0x0, 0x3ff, 0xb2, 0x8, 0x8a, 0xb, 0x78, 0x1, 0x1d, 0x7f, 0x6, 0x7fc8a33f, 0x910, 0x1f], [0x5c, 0x7f, 0x7ff, 0x92, 0x7fff, 0x7, 0x8, 0x81, 0x0, 0xfffffc00, 0x6, 0x5, 0x3, 0x0, 0x7, 0x0, 0x10000, 0xd1d, 0x80, 0x7fff, 0x800, 0x5e58, 0xffff019b, 0x8, 0x7, 0x4, 0x0, 0x0, 0x1, 0x2, 0x5, 0x80, 0xfff, 0x10001, 0x9, 0x0, 0x9, 0x401, 0x20ede8, 0x5, 0x10f, 0x1f, 0xffffffff, 0x2, 0x1f, 0x2, 0x9, 0x2, 0x3, 0x0, 0x1008, 0x1, 0x6, 0x1, 0xfffffff8, 0x1, 0x8, 0xffff, 0x6, 0x1ffc00, 0x8, 0x0, 0x0, 0x6]}, 0x45c) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x22140}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) 15:45:03 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{0x0}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:03 executing program 2: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) writev(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)="ee", 0xc}], 0x1) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x559302, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f00000000c0)=r3) write$eventfd(0xffffffffffffffff, &(0x7f0000000280)=0x7, 0x8) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in6, @in6=@initdev}}, {{@in6=@ipv4}, 0x0, @in=@dev}}, &(0x7f0000000440)=0xe8) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x40002, 0x0) 15:45:03 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r4, 0x8010500c, &(0x7f0000000080)) 15:45:03 executing program 0: futex(&(0x7f000000cffc), 0x180, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x20, r4}) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") futex(&(0x7f000000cffc), 0x85, 0x0, 0x0, &(0x7f0000048000), 0x5000000) [ 1482.642081] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1482.651068] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1482.659368] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1482.668396] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1482.677280] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1482.694587] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1482.702444] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1482.720347] Interruptibility = 00000000 ActivityState = 00000000 [ 1482.736531] *** Host State *** [ 1482.740454] RIP = 0xffffffff8117a4e0 RSP = 0xffff8880869ff998 [ 1482.747320] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 15:45:03 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:03 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{0x0}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 1482.802874] FSBase=00007fc3fc826700 GSBase=ffff8880aec00000 TRBase=fffffe0000003000 15:45:03 executing program 2: r0 = socket$kcm(0xa, 0x2, 0x73) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x42aa83, 0x0) ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f0000000280)={0x10, 0x4, 0x1}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) writev(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)="ee", 0xc}], 0x1) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x559302, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f00000000c0)=r4) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r7}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in6, @in6=@initdev}}, {{@in6=@ipv4}, 0x0, @in=@dev}}, &(0x7f0000000440)=0xe8) [ 1482.844997] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 1482.867747] CR0=0000000080050033 CR3=00000000a11f2000 CR4=00000000001426f0 [ 1482.878860] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff868018e0 [ 1482.903745] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1482.929525] *** Control State *** [ 1482.944620] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000e2 15:45:03 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f00000012c0)=0x3) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r4, 0x0, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000002600)={0xc, 0x8, 0xfa00, {&(0x7f0000002480)}}, 0x10) connect$llc(r5, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r5, 0x0, 0x0) r6 = fcntl$dupfd(r3, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) sendmsg$kcm(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="fe79758ed361a490bab762ffb60c79390ff73e0f6737ba1445b5ee84b439f2cc8e186456f5f93463e91d74e7f3ae7130b9629b2c46a8159080df627bab8e2b6720d689dcf74f07e3b8fa60718d411ec63ae29cbcb2cbe3b9521aaa828a3842c79accfba8e5667c262a7abb2c236514e26d1652855be828344590a6d12457", 0x7e}, {&(0x7f00000002c0)="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", 0x1000}], 0x2, &(0x7f0000004980)=[{0x60, 0x10c, 0x1, "68d01a4d881a6ec2617dcb9d732344c5208a6c0418c92a6e9d2c3bbbe9a4d234417ecd0283b6e1fdf100cd9e140933cf5ebb5904a061a265fa4d0344a33e394a9b215308c546d9f30728c02491dca1b7"}, {0x38, 0x108, 0x3, "ed2b18026472ac4fee84edcf33e84cf716dc6dddd942e76d6b5a248b6e13f439978d1634e7edb0"}, {0x50, 0x111, 0x1, "0f93af407538b0273546a5af376aea8008983b9e691a6ff7e545aab31845146098e7a8abf333f564a4674f3ef2cfd7fd37a058c35bd12a12034d0a50f093b4e7"}, {0x38, 0x11, 0xffff8469, "b02561e75a2c9980e9f9b78ef877406617b46e451897bd17a7dfa9366b17dff15732abc1f2deb0"}, {0x50, 0x10a, 0x1d09, "473799c7b9a6bc55b77a700926ea683b6209cc07acb70d4b1c2318a4f670cec1ff46fb4a3f27ea6d3000497c28fc146cf0e26123b5ccb0274540f1dbe2"}, {0x1010, 0x117, 0x1, "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"}, {0x10, 0x103}], 0x1190}, 0x4044000) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r8, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r8, 0x0, 0x0) r9 = dup3(r8, r3, 0x0) fchdir(r9) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 1482.973702] EntryControls=0000d1ff ExitControls=002fefff [ 1482.994653] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1483.009087] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1483.017907] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1483.036229] reason=80000021 qualification=0000000000000000 [ 1483.045118] IDTVectoring: info=00000000 errcode=00000000 [ 1483.053853] TSC Offset = 0xfffffce3322432c5 [ 1483.059443] EPT pointer = 0x00000000507b201e [ 1483.074587] Virtual processor ID = 0x0002 15:45:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x3, 0x0, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x22140}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 15:45:03 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:03 executing program 2: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) writev(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)="ee", 0xc}], 0x1) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x559302, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f00000000c0)=r3) socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in6, @in6=@initdev}}, {{@in6=@ipv4}, 0x0, @in=@dev}}, &(0x7f0000000440)=0xe8) [ 1483.187127] selinux_nlmsg_perm: 470 callbacks suppressed [ 1483.187140] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=43264 sclass=netlink_tcpdiag_socket pig=24849 comm=syz-executor.1 [ 1483.232561] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=24849 comm=syz-executor.1 [ 1483.252531] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=24849 comm=syz-executor.1 [ 1483.297622] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=24849 comm=syz-executor.1 [ 1483.324469] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=24849 comm=syz-executor.1 [ 1483.329289] *** Guest State *** [ 1483.341308] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=24849 comm=syz-executor.1 [ 1483.349557] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1483.369533] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1483.372882] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=24849 comm=syz-executor.1 [ 1483.384750] CR3 = 0x00000000fffbc000 [ 1483.396610] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 1483.407259] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=24849 comm=syz-executor.1 [ 1483.408543] RFLAGS=0x00022142 DR7 = 0x0000000000000400 [ 1483.422328] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=24849 comm=syz-executor.1 [ 1483.433930] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1483.445854] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=24849 comm=syz-executor.1 [ 1483.453885] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1483.477792] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1483.488384] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1483.503310] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1483.513632] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1483.526798] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1483.538258] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1483.553353] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1483.563560] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1483.577146] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1483.587755] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1483.589497] *** Guest State *** [ 1483.598350] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1483.599471] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1483.608509] Interruptibility = 00000000 ActivityState = 00000000 [ 1483.617642] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1483.624678] *** Host State *** [ 1483.633077] CR3 = 0x00000000fffbc000 [ 1483.639949] RSP = 0x00000000000004cb RIP = 0x0000000000000000 [ 1483.640481] RIP = 0xffffffff8117a4e0 RSP = 0xffff88805c2cf998 [ 1483.646526] RFLAGS=0x00022142 DR7 = 0x0000000000000400 [ 1483.656643] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1483.658703] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1483.666760] FSBase=00007fc3fc826700 GSBase=ffff8880aed00000 TRBase=fffffe0000034000 [ 1483.672309] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1483.688802] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 1483.690076] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1483.698651] CR0=0000000080050033 CR3=000000008430a000 CR4=00000000001426e0 [ 1483.710824] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1483.715282] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff868018e0 [ 1483.722561] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1483.729574] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1483.742468] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1483.744683] *** Control State *** [ 1483.756192] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000e2 [ 1483.756585] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1483.763996] EntryControls=0000d1ff ExitControls=002fefff [ 1483.775843] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1483.777007] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1483.786563] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1483.796770] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1483.801086] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1483.801100] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1483.808031] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1483.817655] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1483.829358] reason=80000021 qualification=0000000000000000 [ 1483.833122] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1483.838571] IDTVectoring: info=00000000 errcode=00000000 [ 1483.845401] Interruptibility = 00000000 ActivityState = 00000000 [ 1483.845406] *** Host State *** [ 1483.845416] RIP = 0xffffffff8117a4e0 RSP = 0xffff8880556df998 [ 1483.845433] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1483.845441] FSBase=00007f8194ae5700 GSBase=ffff8880aec00000 TRBase=fffffe0000003000 [ 1483.845481] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 1483.845491] CR0=0000000080050033 CR3=00000000555d2000 CR4=00000000001426f0 [ 1483.845500] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff868018e0 [ 1483.845509] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1483.845511] *** Control State *** [ 1483.845517] PinBased=0000003f CPUBased=b6a1edfa SecondaryExec=000000e3 [ 1483.845522] EntryControls=0000d1ff ExitControls=002fefff [ 1483.845531] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1483.845537] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 15:45:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000001340)={{0x1, 0x0, 0x80, {0x100000, 0xf000, 0x4}}, "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", "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"}) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, 0x0) write$uinput_user_dev(r3, &(0x7f00000003c0)={'syz0\x00', {0x7, 0x5, 0x4, 0x248}, 0x55, [0x0, 0xc00, 0x7b, 0x7fffffff, 0xda8, 0x8001, 0x8001, 0x6, 0x3, 0x5, 0x80, 0x5, 0x1, 0x0, 0x7ff, 0x9, 0x0, 0x5, 0x5496, 0x81, 0x3, 0x0, 0x4, 0x8, 0x0, 0x0, 0x5, 0x1f, 0x4, 0x7, 0x5, 0x0, 0x9, 0x20, 0x0, 0x22a7, 0x0, 0x2, 0x0, 0x4, 0x80000001, 0x9, 0x306e, 0x0, 0x7, 0x4, 0xfffffffe, 0xe8ef, 0x5, 0x6, 0x81, 0x401, 0x9, 0x9, 0x9, 0x114, 0x5, 0x0, 0x0, 0x9, 0x0, 0xffffff4c, 0x401], [0x0, 0x0, 0x7, 0x1, 0x8, 0xfe0c, 0x1, 0x7fff, 0x1faa7c2c, 0x2, 0x200, 0x40, 0x5, 0x5, 0x0, 0x3, 0x6, 0x7, 0xffffffff, 0x3, 0x1, 0xfffffffd, 0x4, 0x6b88, 0x8, 0x20, 0x8, 0x3, 0x10001, 0x10000, 0xb3d8, 0x0, 0x4000, 0xffffffe1, 0x3, 0x2, 0x2954, 0x8, 0x6045, 0xffffff4f, 0x8, 0x1, 0x4, 0x80000000, 0x1, 0xffffe16d, 0x2, 0xa8f, 0x2, 0x101, 0x4, 0x8, 0x1, 0x7, 0x100, 0x5, 0x6, 0x8000, 0x7, 0x8, 0x8001, 0x5fa3, 0x7, 0x5e], [0xffffffff, 0x9, 0xfffffffd, 0x26bc, 0x800, 0xffff7fff, 0x80, 0x7f, 0x892, 0x0, 0x0, 0x2, 0x9, 0x1ff, 0x10001, 0x9, 0x6, 0x8, 0x10001, 0x4, 0x3, 0x8aeb, 0xffffffff, 0x7, 0x80000000, 0x20, 0x1000, 0x23, 0x7, 0x101, 0x1, 0x10001, 0x8, 0x0, 0x4, 0x80000001, 0xc8, 0xfffff536, 0x736fd575, 0x1, 0x5, 0x7fff, 0x1, 0x0, 0x0, 0x1, 0x4, 0xa170, 0xe5, 0x27d4ff6c, 0x0, 0x3ff, 0xb2, 0x1ff, 0x8a, 0x3, 0x78, 0x1, 0x1d, 0x7f, 0x6, 0x7fc8a33f, 0x910, 0x1f], [0x5c, 0x7f, 0x7ff, 0xc4, 0x7fff, 0x7, 0x8, 0x81, 0x0, 0xfffffc00, 0x6, 0x5, 0x3, 0x0, 0x7, 0x0, 0x10000, 0xd1d, 0x80, 0x7fff, 0x800, 0x5e58, 0xffff019b, 0x8, 0x7, 0x4, 0x0, 0x0, 0x1, 0x2, 0x5, 0x80, 0xfff, 0x10001, 0x9, 0x0, 0x9, 0x401, 0xede8, 0x5, 0x10f, 0x1f, 0xffffffff, 0x2, 0x1f, 0x2, 0x9, 0x2, 0x3, 0x0, 0x8, 0x1, 0x6, 0x1, 0xfffffff8, 0x1, 0x8, 0xffff, 0x6, 0x1ffc00, 0x8, 0x0, 0x0, 0x6]}, 0x45c) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x22140}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) 15:45:04 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0x0) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:04 executing program 2: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) writev(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)="ee", 0xc}], 0x1) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x559302, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f00000000c0)=r3) socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r6, 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f00000002c0)={0x980000, 0x8000, 0xffffffff, r6, 0x0, &(0x7f0000000280)={0x980920, 0x8001, [], @string=&(0x7f0000000240)=0x1f}}) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="28000000100025008010000a0000000000003a00a3c09b4c1949dc2eb403f07f011b562199c2c8a2211be6395a94c3ff7d9f1d755a51a135a1fd66d224dfe7c49a28b33e611163a7d98a1034279a874ea49fa7aad2d50e5ffecec1e39cabdb0e1c8b1c460d69e65ca3d47525a39efd5b4b33e6005a5ec4c5f701155cd4", @ANYRES32=r5, @ANYBLOB="000000000000000008000a000f000000"], 0x3}, 0x1, 0x0, 0x0, 0x20008010}, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in6, @in6=@initdev}}, {{@in6=@ipv4}, 0x0, @in=@dev}}, &(0x7f0000000440)=0xe8) 15:45:04 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:04 executing program 0: futex(&(0x7f000000cffc), 0x180, 0x1, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") futex(&(0x7f000000cffc), 0x85, 0x0, 0x0, &(0x7f0000048000), 0x5000000) [ 1483.845543] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1483.845549] reason=80000021 qualification=0000000000000000 [ 1483.845553] IDTVectoring: info=00000000 errcode=00000000 [ 1483.845557] TSC Offset = 0xfffffce2a1aaf231 [ 1483.845562] TPR Threshold = 0x00 [ 1483.845569] EPT pointer = 0x000000009402801e [ 1483.845577] Virtual processor ID = 0x0003 [ 1483.992428] TSC Offset = 0xfffffce2c72eb7fd 15:45:04 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 1484.003823] EPT pointer = 0x00000000914b501e [ 1484.014251] Virtual processor ID = 0x0002 15:45:04 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f00000001c0)={0xf000000, 0x9, 0x401, r0, 0x0, &(0x7f0000000180)={0xef8c31, 0x22, [], @string=&(0x7f0000000080)}}) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) sync_file_range(r3, 0x1, 0x1, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r3, 0xc1105518, &(0x7f0000000340)={{0x6, 0x4, 0x1, 0x0, 'syz0\x00', 0x8}, 0x2, 0x10, 0x7, r4, 0x3, 0x6, 'syz0\x00', &(0x7f00000002c0)=['vmnet0\\securityvboxnet0\':)wlan1vboxnet0-]vmnet0\\\x00', 'cpuset^/bdev$-&Hevboxnet0\x00', '#\x00'], 0x4d, [], [0x40, 0x9, 0x7, 0x1]}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:04 executing program 2: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/checkreqprot\x00', 0x800, 0x0) getsockopt$netlink(r0, 0x10e, 0x7, &(0x7f0000000480)=""/254, &(0x7f0000000280)=0xfe) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r1, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) writev(r1, &(0x7f0000000580)=[{&(0x7f00000000c0)="ee", 0xc}], 0x1) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x559302, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f00000000c0)=r4) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r7, @ANYBLOB="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"/314], 0x28}}, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in6, @in6=@initdev}}, {{@in6=@ipv4}, 0x0, @in=@dev}}, &(0x7f0000000440)=0xe8) 15:45:05 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X\x00\x00\x00', 0x4}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 1484.193294] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1484.264254] *** Guest State *** [ 1484.271999] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1484.281718] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1484.294605] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1484.311598] CR3 = 0x00000000fffbc000 [ 1484.333329] RSP = 0x00000000000004cb RIP = 0x0000000000000000 [ 1484.368720] RFLAGS=0x00022142 DR7 = 0x0000000000000400 [ 1484.379382] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1484.388399] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1484.399886] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1484.410009] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1484.433983] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1484.443570] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1484.454511] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1484.457847] *** Guest State *** [ 1484.464864] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1484.473945] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1484.478909] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1484.488413] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1484.494666] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1484.507484] CR3 = 0x00000000fffbc000 [ 1484.513405] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1484.516163] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 1484.516172] RFLAGS=0x00022142 DR7 = 0x0000000000000400 [ 1484.516184] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1484.516191] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1484.516212] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1484.525648] EFER = 0x0000000000000000 PAT = 0x0007040600070406 15:45:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x608080, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x20, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x22140}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) clock_getres(0x7, &(0x7f0000000080)) 15:45:05 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0002a927b18901"], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000080)={{}, 0x7, 0x400, 0x3}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:05 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X\x00\x00\x00', 0x4}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 1484.535297] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1484.538162] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1484.544942] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1484.544957] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1484.544970] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1484.544980] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1484.544994] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1484.545004] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1484.545018] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1484.545026] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1484.545036] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1484.545043] Interruptibility = 00000000 ActivityState = 00000000 [ 1484.545046] *** Host State *** [ 1484.545056] RIP = 0xffffffff8117a4e0 RSP = 0xffff88805c2cf998 [ 1484.545072] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1484.545081] FSBase=00007fc3fc826700 GSBase=ffff8880aed00000 TRBase=fffffe0000034000 [ 1484.545090] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 1484.545102] CR0=0000000080050033 CR3=000000008430a000 CR4=00000000001426e0 [ 1484.545115] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff868018e0 [ 1484.545124] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1484.545128] *** Control State *** [ 1484.545134] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000e2 [ 1484.545140] EntryControls=0000d1ff ExitControls=002fefff [ 1484.545150] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1484.545156] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1484.545162] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1484.545168] reason=80000021 qualification=0000000000000000 [ 1484.545173] IDTVectoring: info=00000000 errcode=00000000 [ 1484.545178] TSC Offset = 0xfffffce231a4f513 [ 1484.545184] EPT pointer = 0x000000009310e01e [ 1484.545192] Virtual processor ID = 0x0002 [ 1484.823975] Interruptibility = 00000000 ActivityState = 00000000 [ 1484.830561] *** Host State *** [ 1484.833776] RIP = 0xffffffff8117a4e0 RSP = 0xffff88804daaf998 [ 1484.840280] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1484.847361] FSBase=00007f8194ae5700 GSBase=ffff8880aec00000 TRBase=fffffe0000003000 [ 1484.855574] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 1484.861799] CR0=0000000080050033 CR3=000000003f716000 CR4=00000000001426f0 [ 1484.868917] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff868018e0 [ 1484.877758] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1484.884084] *** Control State *** [ 1484.887621] PinBased=0000003f CPUBased=b6a1edfa SecondaryExec=000000e3 [ 1484.894443] EntryControls=0000d1ff ExitControls=002fefff [ 1484.900265] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1484.907322] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1484.914181] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 15:45:05 executing program 0: futex(&(0x7f000000cffc), 0x180, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") futex(&(0x7f0000000000), 0x80, 0x0, 0x0, &(0x7f0000048000)=0x2, 0x0) 15:45:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) sched_setattr(r1, &(0x7f0000000080)={0x38, 0x6, 0x1, 0x4, 0x0, 0x0, 0x1, 0x6, 0x4, 0xee}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, 0x0) write$uinput_user_dev(r3, &(0x7f00000003c0)={'syz0\x00', {0x7, 0x5, 0x4, 0x248}, 0x55, [0x0, 0xc00, 0x7b, 0x7fffffff, 0xda8, 0x8001, 0x8001, 0x6, 0x3, 0x5, 0x80, 0x5, 0x1, 0x0, 0x7ff, 0x9, 0x0, 0x5, 0x5496, 0x81, 0x3, 0x0, 0x4, 0x8, 0x0, 0x0, 0x5, 0x1f, 0x4, 0x7, 0x5, 0x0, 0x9, 0x20, 0x0, 0x22a7, 0x0, 0x2, 0x0, 0x4, 0x80000001, 0x9, 0x306e, 0x0, 0x7, 0x4, 0xfffffffe, 0xe8ef, 0x5, 0x6, 0x81, 0x401, 0x9, 0x9, 0x9, 0x114, 0x5, 0x0, 0x0, 0x9, 0x0, 0xffffff4c, 0x401], [0x0, 0x0, 0x7, 0x1, 0x8, 0xfe0c, 0x1, 0x7fff, 0x1faa7c2c, 0x2, 0x200, 0x40, 0x5, 0x5, 0x0, 0x3, 0x6, 0x7, 0xffffffff, 0x3, 0x1, 0xfffffffd, 0x4, 0x6b88, 0x8, 0x20, 0x8, 0x3, 0x10001, 0x10000, 0xb3d8, 0x0, 0x4000, 0xffffffe1, 0x3, 0x2, 0x2954, 0x8, 0x6045, 0xffffff4f, 0x8, 0x1, 0x4, 0x80000000, 0x1, 0xffffe16d, 0x2, 0xa8f, 0x2, 0x101, 0x4, 0x8, 0x1, 0x7, 0x100, 0x5, 0x6, 0x8000, 0x7, 0x8, 0x8001, 0x5fa3, 0x7, 0x5e], [0xffffffff, 0x9, 0xfffffffd, 0x26bc, 0x800, 0xffff7fff, 0x80, 0x7f, 0x892, 0x0, 0x0, 0x2, 0x9, 0x1ff, 0x10001, 0x9, 0x6, 0x8, 0x10001, 0x4, 0x3, 0x8aeb, 0xffffffff, 0x7, 0x80000000, 0x20, 0x1000, 0x23, 0x7, 0x101, 0x1, 0x10001, 0x8, 0x0, 0x4, 0x80000001, 0xc8, 0xfffff536, 0x736fd575, 0x1, 0x5, 0x7fff, 0x1, 0x0, 0x0, 0x1, 0x4, 0xa170, 0xe5, 0x27d4ff6c, 0x0, 0x3ff, 0xb2, 0x1ff, 0x8a, 0x3, 0x78, 0x1, 0x1d, 0x7f, 0x6, 0x7fc8a33f, 0x910, 0x1f], [0x5c, 0x7f, 0x7ff, 0xc4, 0x7fff, 0x7, 0x8, 0x81, 0x0, 0xfffffc00, 0x6, 0x5, 0x3, 0x0, 0x7, 0x0, 0x10000, 0xd1d, 0x80, 0x7fff, 0x800, 0x5e58, 0xffff019b, 0x8, 0x7, 0x4, 0x0, 0x0, 0x1, 0x2, 0x5, 0x80, 0xfff, 0x10001, 0x9, 0x0, 0x9, 0x401, 0xede8, 0x5, 0x10f, 0x1f, 0xffffffff, 0x2, 0x1f, 0x2, 0x9, 0x2, 0x3, 0x0, 0x8, 0x1, 0x6, 0x1, 0xfffffff8, 0x1, 0x8, 0xffff, 0x6, 0x1ffc00, 0x8, 0x0, 0x0, 0x6]}, 0x45c) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x22140}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000040), 0x4) r5 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, &(0x7f0000000540)=ANY=[], &(0x7f0000000400)) ioctl$KVM_RUN(r5, 0xae80, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) 15:45:05 executing program 2: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) writev(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)="ee", 0xc}], 0x1) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x559302, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f00000000c0)=r3) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) socket(0xf, 0x803, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000002d80)={@multicast2, @local}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r7 = getpid() sched_setattr(r7, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r8, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r10, 0x407, 0x0) write(r10, &(0x7f0000000340), 0x41395527) vmsplice(r9, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) 15:45:05 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X\x00\x00\x00', 0x4}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r2, &(0x7f0000000180)='.//ile0\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00') r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r3, 0x0, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x9c0000, 0x2, 0xdf75, r3, 0x0, &(0x7f0000000080)={0x990a92, 0x8, [], @p_u32}}) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000000180), &(0x7f0000000280)=0x4) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x22140}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 15:45:05 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x7fffffff, 0x5) [ 1484.921079] reason=80000021 qualification=0000000000000000 [ 1484.927467] IDTVectoring: info=00000000 errcode=00000000 [ 1484.933932] TSC Offset = 0xfffffce24d4af682 [ 1484.938398] TPR Threshold = 0x00 [ 1484.941990] EPT pointer = 0x00000000a1a0901e [ 1484.946502] Virtual processor ID = 0x0003 15:45:05 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400", 0x6}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:05 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000180)={0x1, "b6454c9de667102cddffe7722da793111290976dce38e2039f86b9c6b28d2bdc", 0x3, 0x40, 0x7bc, 0x80000001, 0x8, 0x3, 0x3, 0x80000000}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:06 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400", 0x6}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:06 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400", 0x6}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 1485.497791] *** Guest State *** [ 1485.502574] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1485.513793] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1485.524076] CR3 = 0x00000000fffbc000 [ 1485.528700] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 1485.539017] RFLAGS=0x00022142 DR7 = 0x0000000000000400 15:45:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, 0x0) write$uinput_user_dev(r3, &(0x7f00000003c0)={'syz0\x00', {0x7, 0x5, 0x4, 0x248}, 0x55, [0x0, 0xc00, 0x7b, 0x7fffffff, 0xda8, 0x8001, 0x8001, 0x6, 0x3, 0x5, 0x80, 0x5, 0x1, 0x0, 0x7ff, 0x9, 0x0, 0x5, 0x5496, 0x81, 0x3, 0x0, 0x4, 0x8, 0x0, 0x0, 0x5, 0x1f, 0x4, 0x7, 0x5, 0x0, 0x9, 0x20, 0x0, 0x22a7, 0x0, 0x2, 0x0, 0x4, 0x80000001, 0x9, 0x306e, 0x0, 0x7, 0x4, 0xfffffffe, 0xe8ef, 0x5, 0x6, 0x81, 0x401, 0x9, 0x9, 0x9, 0x114, 0x5, 0x0, 0x0, 0x9, 0x0, 0xffffff4c, 0x401], [0x0, 0x0, 0x7, 0x1, 0x8, 0xfe0c, 0x1, 0x7fff, 0x1faa7c2c, 0x2, 0x200, 0x40, 0x5, 0x5, 0x0, 0x3, 0x6, 0x7, 0xffffffff, 0x3, 0x1, 0xfffffffd, 0x4, 0x6b88, 0x8, 0x20, 0x8, 0x3, 0x10001, 0x10000, 0xb3d8, 0x0, 0x4000, 0xffffffe1, 0x3, 0x2, 0x2954, 0x8, 0x6045, 0xffffff4f, 0x8, 0x1, 0x4, 0x80000000, 0x1, 0xffffe16d, 0x2, 0xa8f, 0x2, 0x101, 0x4, 0x8, 0x1, 0x7, 0x100, 0x5, 0x6, 0x8000, 0x7, 0x8, 0x8001, 0x5fa3, 0x7, 0x5e], [0xffffffff, 0x9, 0xfffffffd, 0x26bc, 0x800, 0xffff7fff, 0x80, 0x7f, 0x892, 0x0, 0x0, 0x2, 0x9, 0x1ff, 0x10001, 0x9, 0x6, 0x8, 0x10001, 0x4, 0x3, 0x8aeb, 0xffffffff, 0x7, 0x80000000, 0x20, 0x1000, 0x23, 0x7, 0x101, 0x1, 0x10001, 0x8, 0x0, 0x4, 0x80000001, 0xc8, 0xfffff536, 0x736fd575, 0x1, 0x5, 0x7fff, 0x1, 0x0, 0x0, 0x1, 0x4, 0xa170, 0xe5, 0x27d4ff6c, 0x0, 0x3ff, 0xb2, 0x1ff, 0x8a, 0x3, 0x78, 0x1, 0x1d, 0x7f, 0x6, 0x7fc8a33f, 0x910, 0x1f], [0x5c, 0x7f, 0x7ff, 0xc4, 0x7fff, 0x7, 0x8, 0x81, 0x0, 0xfffffc00, 0x6, 0x5, 0x3, 0x0, 0x7, 0x0, 0x10000, 0xd1d, 0x80, 0x7fff, 0x800, 0x5e58, 0xffff019b, 0x8, 0x7, 0x4, 0x0, 0x0, 0x1, 0x2, 0x5, 0x80, 0xfff, 0x10001, 0x9, 0x0, 0x9, 0x401, 0xede8, 0x5, 0x10f, 0x1f, 0xffffffff, 0x2, 0x1f, 0x2, 0x9, 0x2, 0x3, 0x0, 0x8, 0x1, 0x6, 0x1, 0xfffffff8, 0x1, 0x8, 0xffff, 0x6, 0x1ffc00, 0x8, 0x0, 0x0, 0x6]}, 0x45c) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x22140}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) [ 1485.546350] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1485.554860] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1485.568366] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1485.582473] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 15:45:06 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 1485.592770] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1485.603801] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1485.616610] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1485.626515] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1485.637264] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1485.646756] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1485.656157] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1485.666700] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1485.675364] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1485.685824] Interruptibility = 00000000 ActivityState = 00000000 [ 1485.693611] *** Host State *** [ 1485.704664] RIP = 0xffffffff8117a4e0 RSP = 0xffff888045f3f998 [ 1485.712607] *** Guest State *** [ 1485.716100] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1485.726546] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1485.729562] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1485.737500] CR3 = 0x00000000fffbc000 [ 1485.747042] RSP = 0x00000000000004cb RIP = 0x0000000000000000 15:45:06 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 1485.754186] RFLAGS=0x00022142 DR7 = 0x0000000000000400 [ 1485.760826] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1485.767953] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1485.772250] FSBase=00007fc3fc826700 GSBase=ffff8880aed00000 TRBase=fffffe0000034000 [ 1485.777600] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1485.787879] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 1485.793351] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1485.804463] CR0=0000000080050033 CR3=0000000056de7000 CR4=00000000001426e0 [ 1485.808308] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1485.815250] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff868018e0 [ 1485.823070] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1485.823085] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1485.823095] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1485.823109] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1485.823118] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1485.823132] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1485.823140] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1485.823149] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1485.823156] Interruptibility = 00000000 ActivityState = 00000000 [ 1485.823160] *** Host State *** [ 1485.823169] RIP = 0xffffffff8117a4e0 RSP = 0xffff8880958cf998 [ 1485.823186] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1485.823194] FSBase=00007f8194ae5700 GSBase=ffff8880aec00000 TRBase=fffffe0000003000 [ 1485.823203] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 1485.823214] CR0=0000000080050033 CR3=000000009126f000 CR4=00000000001426f0 [ 1485.823226] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff868018e0 [ 1485.823235] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1485.823238] *** Control State *** [ 1485.823244] PinBased=0000003f CPUBased=b6a1edfa SecondaryExec=000000e3 [ 1485.823250] EntryControls=0000d1ff ExitControls=002fefff [ 1485.823260] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1485.823266] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1485.823272] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1485.823277] reason=80000021 qualification=0000000000000000 [ 1485.823282] IDTVectoring: info=00000000 errcode=00000000 [ 1485.823287] TSC Offset = 0xfffffce17d895ff0 [ 1485.823291] TPR Threshold = 0x00 [ 1485.823298] EPT pointer = 0x000000004cba501e [ 1485.823305] Virtual processor ID = 0x0003 [ 1485.868581] *** Guest State *** [ 1485.875637] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1485.885590] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1485.901672] *** Control State *** [ 1485.904736] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1485.909140] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000e2 [ 1485.928610] CR3 = 0x00000000fffbc000 [ 1485.941634] EntryControls=0000d1ff ExitControls=002fefff [ 1485.956935] RSP = 0x00000000000004cb RIP = 0x0000000000000000 [ 1485.956947] RFLAGS=0x00022142 DR7 = 0x0000000000000400 [ 1485.956958] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1485.956967] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1485.956982] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1485.956995] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1485.957009] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1485.957022] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1485.957036] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1485.957046] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1485.957059] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1485.957069] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1485.957082] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1485.957090] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1485.957099] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1485.957106] Interruptibility = 00000000 ActivityState = 00000000 [ 1485.957109] *** Host State *** [ 1485.957118] RIP = 0xffffffff8117a4e0 RSP = 0xffff8880958cf998 [ 1485.957135] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1485.957144] FSBase=00007f8194ae5700 GSBase=ffff8880aec00000 TRBase=fffffe0000003000 [ 1485.957153] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 1485.957164] CR0=0000000080050033 CR3=000000009126f000 CR4=00000000001426f0 [ 1485.957175] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff868018e0 [ 1485.957184] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1485.957188] *** Control State *** [ 1485.957193] PinBased=0000003f CPUBased=b6a1edfa SecondaryExec=000000e3 [ 1485.957199] EntryControls=0000d1ff ExitControls=002fefff [ 1485.957209] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1485.957215] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1485.957221] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1485.957226] reason=80000021 qualification=0000000000000000 [ 1485.957231] IDTVectoring: info=00000000 errcode=00000000 [ 1485.957236] TSC Offset = 0xfffffce167ede7c6 [ 1485.957240] TPR Threshold = 0x00 [ 1485.957481] EPT pointer = 0x000000003aa6c01e 15:45:07 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 1485.957489] Virtual processor ID = 0x0003 [ 1486.321745] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1486.328714] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1486.335536] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 15:45:07 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm_plock\x00', 0x101000, 0x0) ioctl$USBDEVFS_RESET(r0, 0x5514) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r1, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) writev(r1, &(0x7f0000000580)=[{&(0x7f00000000c0)="ee", 0xc}], 0x1) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x559302, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f00000000c0)=r4) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r7}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in6, @in6=@initdev}}, {{@in6=@ipv4}, 0x0, @in=@dev}}, &(0x7f0000000440)=0xe8) [ 1486.360905] reason=80000021 qualification=0000000000000000 [ 1486.367518] IDTVectoring: info=00000000 errcode=00000000 [ 1486.378681] TSC Offset = 0xfffffce19d2fa9c0 [ 1486.384247] EPT pointer = 0x000000008bdd101e [ 1486.405286] Virtual processor ID = 0x0002 15:45:07 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000080)="58000087b8ec89114a4c3f671feb3bbe001400ad", 0x14}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f0000000540)=ANY=[], &(0x7f0000000400)) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, &(0x7f0000000180)={0x5, 0x8, 0x0, 0x0, 0x1}) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000080), &(0x7f0000000100)=0x6) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, 0x0) write$uinput_user_dev(r4, &(0x7f00000003c0)={'syz0\x00', {0x7, 0x5, 0x4, 0x248}, 0x55, [0x0, 0xc00, 0x7b, 0x7fffffff, 0xda8, 0x8001, 0x8001, 0x6, 0x3, 0x5, 0x80, 0x5, 0x1, 0x0, 0x7ff, 0x9, 0x0, 0x5, 0x5496, 0x81, 0x3, 0x0, 0x4, 0x8, 0x0, 0x0, 0x5, 0x1f, 0x4, 0x7, 0x5, 0x0, 0x9, 0x20, 0x0, 0x22a7, 0x0, 0x2, 0x0, 0x4, 0x80000001, 0x9, 0x306e, 0x0, 0x7, 0x4, 0xfffffffe, 0xe8ef, 0x5, 0x6, 0x81, 0x401, 0x9, 0x9, 0x9, 0x114, 0x5, 0x0, 0x0, 0x9, 0x0, 0xffffff4c, 0x401], [0x0, 0x0, 0x7, 0x1, 0x8, 0xfe0c, 0x1, 0x7fff, 0x1faa7c2c, 0x2, 0x200, 0x40, 0x5, 0x5, 0x0, 0x3, 0x6, 0x7, 0xffffffff, 0x3, 0x1, 0xfffffffd, 0x4, 0x6b88, 0x8, 0x20, 0x8, 0x3, 0x10001, 0x10000, 0xb3d8, 0x0, 0x4000, 0xffffffe1, 0x3, 0x2, 0x2954, 0x8, 0x6045, 0xffffff4f, 0x8, 0x1, 0x4, 0x80000000, 0x1, 0xffffe16d, 0x2, 0xa8f, 0x2, 0x101, 0x4, 0x8, 0x1, 0x7, 0x100, 0x5, 0x6, 0x8000, 0x7, 0x8, 0x8001, 0x5fa3, 0x7, 0x5e], [0xffffffff, 0x9, 0xfffffffd, 0x26bc, 0x800, 0xffff7fff, 0x80, 0x7f, 0x892, 0x0, 0x0, 0x2, 0x9, 0x1ff, 0x10001, 0x9, 0x6, 0x8, 0x10001, 0x4, 0x3, 0x8aeb, 0xffffffff, 0x7, 0x80000000, 0x20, 0x1000, 0x23, 0x7, 0x101, 0x1, 0x10001, 0x8, 0x0, 0x4, 0x80000001, 0xc8, 0xfffff536, 0x736fd575, 0x1, 0x5, 0x7fff, 0x1, 0x0, 0x0, 0x1, 0x4, 0xa170, 0xe5, 0x27d4ff6c, 0x0, 0x3ff, 0xb2, 0x1ff, 0x8a, 0x3, 0x78, 0x1, 0x1d, 0x7f, 0x6, 0x7fc8a33f, 0x910, 0x1f], [0x5c, 0x7f, 0x7ff, 0xc4, 0x7fff, 0x7, 0x8, 0x81, 0x0, 0xfffffc00, 0x6, 0x5, 0x3, 0x0, 0x7, 0x0, 0x10000, 0xd1d, 0x80, 0x7fff, 0x800, 0x5e58, 0xffff019b, 0x8, 0x7, 0x4, 0x0, 0x0, 0x1, 0x2, 0x5, 0x80, 0xfff, 0x10001, 0x9, 0x0, 0x9, 0x401, 0xede8, 0x5, 0x10f, 0x1f, 0xffffffff, 0x2, 0x1f, 0x2, 0x9, 0x2, 0x3, 0x0, 0x8, 0x1, 0x6, 0x1, 0xfffffff8, 0x1, 0x8, 0xffff, 0x6, 0x1ffc00, 0x8, 0x0, 0x0, 0x6]}, 0x45c) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x22140}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$KVM_RUN(r5, 0xae80, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) 15:45:07 executing program 0: futex(&(0x7f000000cffc), 0x180, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x80002, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x10000, 0x0) r2 = getuid() r3 = socket$kcm(0x29, 0x2, 0x0) close(r3) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x1}) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000440)=0x284) setuid(r5) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0xffffff0f00000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x318, 0x0, 0x0, 0x0, 0x1b0, 0x1b0, 0x280, 0x280, 0x280, 0x280, 0x280, 0x3, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0x190, 0x1b0, 0x0, {}, [@common=@inet=@recent0={{0xf8, 'recent\x00'}, {0x0, 0x0, 0x2, 0x0, 'syz1\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x378) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) r9 = msgget$private(0x0, 0x0) msgsnd(r9, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x0) msgrcv(r9, &(0x7f00000000c0)={0x0, ""/147}, 0x9b, 0xd6d0c418f59fe7d3, 0x0) r10 = msgget$private(0x0, 0x0) msgsnd(r10, 0x0, 0x0, 0x0) msgrcv(r10, &(0x7f00000000c0)={0x0, ""/147}, 0x9b, 0xd6d0c418f59fe7d3, 0x0) fsetxattr$system_posix_acl(r3, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000900)=ANY=[@ANYBLOB="0200000001000c00000000000200", @ANYRES32, @ANYBLOB="8cb5037124333ca70efcc21f9e50e48d8db26b81aa63b10a64527b77c1d953", @ANYRES32=r5, @ANYRESHEX, @ANYRES32, @ANYBLOB="bc75dcf8", @ANYRES32, @ANYPTR=0xfffffffffffffffd, @ANYRES32, @ANYBLOB="040003000000000008000000", @ANYRES32, @ANYBLOB="002200eeef8d73d06444ca074bc976ab2461b8d1a9658004af09cd557592c20138caa1b9f86d06461ea1e5b37e97d358b705381b45ce3ab4bb91a4996d8ebcdb31d86aa1f28a39ed2c368f4a0fd123fd1d948f5b2de69da993164aff581b90e5356eac82d3ae30f425c9d9747f476d390e55aa42c756de87d3850717a49f107ea5216ab50d6e805e1a33ac03b32025bba65e81", @ANYRES32=r7, @ANYBLOB="08000601", @ANYBLOB="080004", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYBLOB="9e146c82399e3e53c06e319c5feea15a7bd01ea19b40955de5b5de3f8800e4f7f4c0e91976e20fda20818053502903632b8a1c072695e150a72530258e239ec7b20ebde0cf91623ef4a3ceac", @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYPTR64=&(0x7f0000000b40)=ANY=[@ANYRESDEC=r6], @ANYPTR64=&(0x7f0000000480)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYRESOCT=r9, @ANYRES32=r10, @ANYPTR, @ANYPTR], @ANYPTR], @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="02000000", @ANYRES32, @ANYBLOB], 0x19, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000200)={{{@in=@broadcast, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuseblk\x00', 0x10800, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r8}, 0x2c, {[{@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@allow_other='allow_other'}], [{@smackfshat={'smackfshat'}}, {@seclabel='seclabel'}, {@uid_eq={'uid', 0x3d, r11}}]}}) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") futex(&(0x7f000000cffc), 0x85, 0x0, 0x0, &(0x7f0000048000), 0x5000000) 15:45:07 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, 0x0, 0x0) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000003c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x1000, 0x1f, 0x0, 0x101, 0x3, 0x0, 0x80, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2000000000, 0x2], 0x4, 0x22140}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r3, 0xc0285628, &(0x7f0000000280)={0x0, 0x8, 0x800, [], &(0x7f0000000180)=0x7f}) r5 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x7) getpeername$netrom(0xffffffffffffffff, &(0x7f0000000440)={{}, [@bcast, @rose, @rose, @remote, @rose, @default, @rose, @default]}, &(0x7f00000005c0)=0x48) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r6, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f00) sendmsg$IPCTNL_MSG_EXP_DELETE(r6, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="f402010200000000000000000300000464000a800800014000000003500002800c000280050001000100000006000340000200000c00028005000100880000002c0001801400030000b1b91aac21700acc75f4a4af66d9fd000000000000000000ffffac1e00011400040000000000000000000000ffff00000001080001400000000000000740000400007400018006000340000400000c00028005000100940000001400018008000100ac1e01010800020000000000060003400003000006000340000300002c00018014000300fe80000000000000000000000011774200092d00000d14000400fe8000"/249], 0xf4}, 0x1, 0x0, 0x0, 0x110}, 0x800) ioctl$KVM_RUN(r4, 0xae80, 0x0) 15:45:07 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[@ANYRESDEC], 0x14) close(r2) socket(0x10, 0x3, 0x4) r3 = syz_open_dev$media(&(0x7f0000000440)='/dev/media#\x00', 0x2, 0x12100) ioctl$MON_IOCT_RING_SIZE(r3, 0x9204, 0xcb2b2) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x200000, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_WIPHY(r6, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x64, r7, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0xff}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x6}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0xd20}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0xfffffff8}, @NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x9c4e}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0x1}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4008080}, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0x80984120, &(0x7f00000002c0)) 15:45:07 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, 0x0, 0x0) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:07 executing program 2: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) writev(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)="ee", 0xc}], 0x1) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x559302, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ocfs2_control\x00', 0x10000, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000540)=ANY=[], &(0x7f0000000400)) ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f00000000c0)=r2) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in6, @in6=@initdev}}, {{@in6=@ipv4}, 0x0, @in=@dev}}, &(0x7f0000000440)=0xe8) 15:45:07 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, 0x0, 0x0) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:07 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r4, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f00) bind$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x1, @loopback, 0x2, 0x1}, 0x20) close(r3) setsockopt$inet6_dccp_buf(r4, 0x21, 0xc0, &(0x7f00000002c0)="15c666de90ce24e59a4aa333e9c6d70ff491f2112189e1818bff3ce8e7f93ab02b111bdbd2c4b48d206a13079ef52de2aed7729deb60f50384f3cfb4d1818d05a90601c1ed5ebe65e40ff5317b7d8fbf0800622f34b2b627b615bff46dd040555a1049e160d1a44af97bb7b4b3df46a42ab684805f0d8cf7dfc10ea310e6833595d4ecfcc7f3d27b98bfc17131611221d611fd1c70ce31042a23c3aa44ddec614cd84c75beb8228d19cc0b9f9329e6e0a55b41de9664427cf1078f98f3cc702055a735066cd5198c3302e4f8df3a711f29af6a1a0d36a0d4f8db2a37ad22109f73f0f1ef5ab51ba7326da5a0e0b86c2e28", 0xf1) r5 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:07 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0x0) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:07 executing program 2: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) writev(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)="ee", 0xc}], 0x1) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x559302, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f00000000c0)=r3) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r6, @ANYBLOB="dfffffff000000000855c00abd0000009eed0786c1b9d8579b0b8a2db679ffe4391bebca9377b08f4b42fdb18ab697cebdb9ce9dda5282c9607e764dac8db7411a271168619f88c8829769649151edc95db8f57804c51b4c36ecefeff46fe0c7bdee96b27f13a288fc4a6b492e07"], 0x28}}, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in6, @in6=@initdev}}, {{@in6=@ipv4}, 0x0, @in=@dev}}, &(0x7f0000000440)=0xe8) 15:45:07 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0x0) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 1486.858778] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 1486.903460] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1486.933945] *** Guest State *** [ 1486.937296] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1486.947468] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1486.956938] CR3 = 0x00000000fffbc000 [ 1486.962359] RSP = 0x00000000000004cb RIP = 0x0000000000000000 [ 1486.969193] RFLAGS=0x00022142 DR7 = 0x0000000000000400 [ 1486.975803] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1486.985331] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1486.994659] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1487.003367] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1487.012871] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1487.021562] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1487.029730] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1487.045976] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1487.055701] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1487.064167] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1487.073337] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1487.082068] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1487.092839] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1487.099487] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1487.107830] Interruptibility = 00000000 ActivityState = 00000000 [ 1487.115771] *** Host State *** [ 1487.119656] RIP = 0xffffffff8117a4e0 RSP = 0xffff88803f4d7998 [ 1487.126562] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1487.135478] FSBase=00007f8194ae5700 GSBase=ffff8880aed00000 TRBase=fffffe0000003000 [ 1487.144238] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 1487.156011] CR0=0000000080050033 CR3=000000008ced8000 CR4=00000000001426e0 [ 1487.163599] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff868018e0 [ 1487.170871] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1487.177007] *** Control State *** [ 1487.181478] PinBased=0000003f CPUBased=b6a1edfa SecondaryExec=000000e3 [ 1487.188188] EntryControls=0000d1ff ExitControls=002fefff [ 1487.197405] NOHZ: local_softirq_pending 08 [ 1487.204689] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1487.213018] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1487.219848] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1487.227028] reason=80000021 qualification=0000000000000000 [ 1487.234944] IDTVectoring: info=00000000 errcode=00000000 [ 1487.240977] TSC Offset = 0xfffffce0dee443a0 [ 1487.245438] TPR Threshold = 0x00 [ 1487.248938] EPT pointer = 0x00000000499be01e 15:45:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, 0x0) write$uinput_user_dev(r3, &(0x7f00000003c0)={'syz0\x00', {0x7, 0x5, 0x4, 0x248}, 0x55, [0x0, 0xc00, 0x7b, 0x7fffffff, 0xda8, 0x8001, 0x8001, 0x6, 0x3, 0x5, 0x80, 0x5, 0x1, 0x0, 0x7ff, 0x9, 0x0, 0x5, 0x5496, 0x81, 0x3, 0x0, 0x4, 0x8, 0x0, 0x0, 0x5, 0x1f, 0x4, 0x7, 0x5, 0x0, 0x9, 0x20, 0x0, 0x22a7, 0x0, 0x2, 0x0, 0x4, 0x80000001, 0x9, 0x306e, 0x0, 0x7, 0x4, 0xfffffffe, 0xe8ef, 0x5, 0x6, 0x81, 0x401, 0x9, 0x9, 0x9, 0x114, 0x5, 0x0, 0x0, 0x9, 0x0, 0xffffff4c, 0x401], [0x0, 0x0, 0x7, 0x1, 0x8, 0xfe0c, 0x1, 0x7fff, 0x1faa7c2c, 0x2, 0x200, 0x40, 0x5, 0x5, 0x0, 0x3, 0x6, 0x7, 0xffffffff, 0x3, 0x1, 0xfffffffd, 0x4, 0x6b88, 0x8, 0x20, 0x8, 0x3, 0x10001, 0x10000, 0xb3d8, 0x0, 0x4000, 0xffffffe1, 0x3, 0x2, 0x2954, 0x8, 0x6045, 0xffffff4f, 0x8, 0x1, 0x4, 0x80000000, 0x1, 0xffffe16d, 0x2, 0xa8f, 0x2, 0x101, 0x4, 0x8, 0x1, 0x7, 0x100, 0x5, 0x6, 0x8000, 0x7, 0x8, 0x8001, 0x5fa3, 0x7, 0x5e], [0xffffffff, 0x9, 0xfffffffd, 0x26bc, 0x800, 0xffff7fff, 0x80, 0x7f, 0x892, 0x0, 0x0, 0x2, 0x9, 0x1ff, 0x10001, 0x9, 0x6, 0x8, 0x10001, 0x4, 0x3, 0x8aeb, 0xffffffff, 0x7, 0x80000000, 0x20, 0x1000, 0x23, 0x7, 0x101, 0x1, 0x10001, 0x8, 0x0, 0x4, 0x80000001, 0xc8, 0xfffff536, 0x736fd575, 0x1, 0x5, 0x7fff, 0x1, 0x0, 0x0, 0x1, 0x4, 0xa170, 0xe5, 0x27d4ff6c, 0x0, 0x3ff, 0xb2, 0x1ff, 0x8a, 0x3, 0x78, 0x1, 0x1d, 0x7f, 0x6, 0x7fc8a33f, 0x910, 0x1f], [0x5c, 0x7f, 0x7ff, 0xc4, 0x7fff, 0x7, 0x8, 0x81, 0x0, 0xfffffc00, 0x6, 0x5, 0x3, 0x0, 0x7, 0x0, 0x10000, 0xd1d, 0x80, 0x7fff, 0x800, 0x5e58, 0xffff019b, 0x8, 0x7, 0x4, 0x0, 0x0, 0x1, 0x2, 0x5, 0x80, 0xfff, 0x10001, 0x9, 0x0, 0x9, 0x401, 0xede8, 0x5, 0x10f, 0x1f, 0xffffffff, 0x2, 0x1f, 0x2, 0x9, 0x2, 0x3, 0x0, 0x8, 0x1, 0x6, 0x1, 0xfffffff8, 0x1, 0x8, 0xffff, 0x6, 0x1ffc00, 0x8, 0x0, 0x0, 0x6]}, 0x45c) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x22140}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) r5 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x5, 0x40002) mmap$dsp(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000004, 0x80010, r5, 0x0) [ 1487.254411] Virtual processor ID = 0x0002 [ 1487.485559] *** Guest State *** [ 1487.489051] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1487.498708] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1487.508189] CR3 = 0x00000000fffbc000 [ 1487.512648] RSP = 0x00000000000004cb RIP = 0x0000000000000000 [ 1487.518759] RFLAGS=0x00022142 DR7 = 0x0000000000000400 [ 1487.525616] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1487.532805] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1487.541271] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1487.549344] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1487.557636] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1487.566057] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1487.574872] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1487.582990] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1487.591276] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1487.599268] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1487.607347] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1487.615517] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1487.622051] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1487.629506] Interruptibility = 00000000 ActivityState = 00000000 [ 1487.638341] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 1487.648012] *** Host State *** [ 1487.672622] RIP = 0xffffffff8117a4e0 RSP = 0xffff88805c2cf998 [ 1487.681828] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1487.688440] FSBase=00007f8194aa3700 GSBase=ffff8880aed00000 TRBase=fffffe0000003000 [ 1487.696647] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 1487.702778] CR0=0000000080050033 CR3=0000000089ded000 CR4=00000000001426e0 [ 1487.709908] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff868018e0 [ 1487.717929] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1487.724177] *** Control State *** [ 1487.727694] PinBased=0000003f CPUBased=b6a1edfa SecondaryExec=000000e3 15:45:08 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0x0) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:08 executing program 2: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) writev(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)="ee", 0xc}], 0x1) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x559302, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f00000000c0)=r3) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r6, @ANYBLOB="00000003000000600a911158b7203ade6d25774dbb"], 0x28}}, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in6, @in6=@initdev}}, {{@in6=@ipv4}, 0x0, @in=@dev}}, &(0x7f0000000440)=0xe8) 15:45:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, 0x0) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000280)={0xe, {0x6, 0x0, 0x1f, 0xce, "8b787fe24dc87ef9d27604ab46357e80f1c299fa374ad73496c97c78530b03ca688ea4f63b7153179f48189caf0fcd04c38f9d1b96eb5188f4522ec8ccbab394a602427fce14bba6e2451f88d8174c301a4fbb2538551496922a906c01843773763651cb33d4bc2e396f469d70b1d77a9200be2e1ff4d5478987978a7269d6dd2d8443fcfd47b4781c7a11d4217154092556b8b02879c1d0d4886e8c431d1e0eb5f8e62e1bace4dac0ba7b4c63fe3747a5414faab467c6892ed1a2d5a1746bdbc36d1712dbb80e835a5be3e7664b"}}, 0xda) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x22140}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 15:45:08 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r5, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f00) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f00000001c0)={r2}) connect$llc(r4, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r4, 0x0, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r6, 0x0, 0x0) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r7, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r7, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[@ANYPTR=&(0x7f00000002c0)=ANY=[@ANYPTR, @ANYBLOB="1e28d11c15ee610993b69daac024722793be3d7c81e19ed5896024dc9de119d130d44b799b2dae8da27a523a01463dacf35d482c2b3dab01b6d542f4c1b23aab415245892912285a8cd311e8a6c85372db8df56e851336199e62a09bed6b71bd73e8e6307a0e7f4e90f68575039b97c1f5123bc4ba7c2dfb648d2cf72f7828c80cd4c0e03f44f6fb01bebba9497221238c4c0c0d999d0634adefd52dd6e50991ba7ec709c2d1904fee2a6c2e38e14bac50fbb168fd29fd5889f6f8ac1792ab04b2460b6fcd2b62e939f6de6227c49756c8", @ANYRES64], @ANYPTR=&(0x7f00000003c0)=ANY=[@ANYRES16=r3, @ANYRESDEC=r4, @ANYRESHEX, @ANYPTR64, @ANYRES16, @ANYRES64=r0, @ANYBLOB="580ca7129d403434dd3d4e07bfa1987b581c4bfb215236d031cd495643653d380e0d31d09c7b7e40de53ea291f4103b72bd89c8360f4a1b3e5ce9e8a496dc497d09a2ac44f42a486085a169cb2a2ccdf67bf70874e84f861fd92631c7b76b1088f596ced5620000d44559eacd91149c6f36e9d1b0209eec70714", @ANYBLOB="1607e13d6c4da1216f1f8e8426c31db0bb2d60b4e8a124ac98085572aeea7d0327ac6953258c6803d8670220f4d0a593f038fd3b93d934ab271c4e05dd47e8f75db111def8a9a181b168eee6c99fde8ea61893ee3076a896b2a4996221d4aa3c2415a423719b3666d5f4c3db0f4707a078967d", @ANYRESOCT=r6], @ANYPTR64=&(0x7f0000000080)=ANY=[], @ANYRES16=r7], 0x1a) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000080)={0x9, 0x4}) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:08 executing program 0: futex(&(0x7f000000cffc), 0x180, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") futex(&(0x7f000000cffc), 0x85, 0x0, 0x0, &(0x7f0000000000), 0x5000000) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r3, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000000c0)) connect$llc(r2, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r2, 0x0, 0x0) connect$llc(r2, &(0x7f0000000000)={0x1a, 0x310, 0x0, 0x0, 0x0, 0x3, @link_local}, 0x10) accept(r1, 0x0, 0x0) fstat(r1, &(0x7f0000000040)) [ 1487.734549] EntryControls=0000d1ff ExitControls=002fefff [ 1487.740338] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1487.773500] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1487.783748] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 15:45:08 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 1487.858421] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1487.889172] *** Guest State *** [ 1487.894254] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 15:45:08 executing program 2: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) writev(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)="ee", 0xc}], 0x1) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x559302, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f00000000c0)=r6) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f00000000c0)=r6) ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0285629, &(0x7f0000000280)={0x0, 0x3, 0x1ff, [], &(0x7f0000000240)=0x5}) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r9}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in6, @in6=@initdev}}, {{@in6=@ipv4}, 0x0, @in=@dev}}, &(0x7f0000000440)=0xe8) [ 1487.904279] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1487.918523] CR3 = 0x00000000fffbc000 [ 1487.924701] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 1487.932039] RFLAGS=0x00022142 DR7 = 0x0000000000000400 [ 1487.938636] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 15:45:08 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 1487.955413] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1487.965764] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1487.976067] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1487.986819] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1488.003339] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1488.014799] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1488.021395] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1488.028225] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1488.032698] reason=80000021 qualification=0000000000000000 [ 1488.040768] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 15:45:08 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 1488.057151] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1488.066100] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1488.066908] IDTVectoring: info=00000000 errcode=00000000 [ 1488.080890] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1488.083288] TSC Offset = 0xfffffce08a50a536 [ 1488.088792] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1488.094139] TPR Threshold = 0x00 [ 1488.101735] Interruptibility = 00000000 ActivityState = 00000000 [ 1488.112371] *** Host State *** [ 1488.115304] EPT pointer = 0x00000000a9f0d01e [ 1488.116008] RIP = 0xffffffff8117a4e0 RSP = 0xffff88805930f998 [ 1488.127230] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1488.134942] FSBase=00007fc3fc826700 GSBase=ffff8880aec00000 TRBase=fffffe0000034000 [ 1488.138080] Virtual processor ID = 0x0002 [ 1488.143770] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 15:45:08 executing program 2: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) writev(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)="ee", 0xc}], 0x1) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x559302, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) recvfrom$rose(r2, &(0x7f0000000240)=""/66, 0x42, 0x0, &(0x7f00000002c0)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x1, @null}, 0x1c) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f00000000c0)=r3) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r8, 0xc1205531, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(r8, 0x5016, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in6, @in6=@initdev}}, {{@in6=@ipv4}, 0x0, @in=@dev}}, &(0x7f0000000440)=0xe8) [ 1488.155235] CR0=0000000080050033 CR3=000000008c222000 CR4=00000000001426f0 [ 1488.174444] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff868018e0 [ 1488.182772] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1488.190572] *** Control State *** [ 1488.194281] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000e2 [ 1488.202408] EntryControls=0000d1ff ExitControls=002fefff [ 1488.215471] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1488.227022] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1488.227573] selinux_nlmsg_perm: 387 callbacks suppressed [ 1488.227588] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=25071 comm=syz-executor.1 [ 1488.234728] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1488.247832] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=25071 comm=syz-executor.1 [ 1488.254407] reason=80000021 qualification=0000000000000000 [ 1488.265130] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=25071 comm=syz-executor.1 [ 1488.276971] IDTVectoring: info=00000000 errcode=00000000 [ 1488.286888] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=25071 comm=syz-executor.1 [ 1488.295757] TSC Offset = 0xfffffce054a3c849 [ 1488.305649] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=25071 comm=syz-executor.1 [ 1488.313372] EPT pointer = 0x0000000040b6701e [ 1488.331979] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=25071 comm=syz-executor.1 [ 1488.336225] Virtual processor ID = 0x0003 [ 1488.359004] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=25071 comm=syz-executor.1 [ 1488.389085] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=25071 comm=syz-executor.1 15:45:09 executing program 2: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) writev(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)="ee", 0xc}], 0x1) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x559302, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) accept$unix(r1, &(0x7f0000000240)=@abs, &(0x7f00000002c0)=0x6e) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f00000000c0)=r4) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r7}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in6, @in6=@initdev}}, {{@in6=@ipv4}, 0x0, @in=@dev}}, &(0x7f0000000440)=0xe8) [ 1488.411359] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=25071 comm=syz-executor.1 [ 1488.450403] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=25071 comm=syz-executor.1 [ 1488.459835] *** Guest State *** [ 1488.466784] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1488.490680] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1488.502501] CR3 = 0x00000000fffbc000 [ 1488.508377] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 1488.517319] RFLAGS=0x00022142 DR7 = 0x0000000000000400 [ 1488.525071] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1488.534296] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1488.551408] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 15:45:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() read$char_usb(0xffffffffffffffff, &(0x7f0000000280)=""/85, 0x55) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, 0x0) write$uinput_user_dev(r3, &(0x7f00000003c0)={'syz0\x00', {0x7, 0x5, 0x4, 0x248}, 0x55, [0x0, 0xc00, 0x7b, 0x7fffffff, 0xda8, 0x8001, 0x8001, 0x6, 0x3, 0x5, 0x80, 0x5, 0x1, 0x0, 0x7ff, 0x9, 0x0, 0x5, 0x5496, 0x81, 0x3, 0x0, 0x4, 0x88, 0x0, 0x0, 0x5, 0x1f, 0x4, 0x7, 0x5, 0x0, 0x9, 0x20, 0x0, 0x22a7, 0x0, 0x2, 0x0, 0x4, 0x80000001, 0x9, 0x306e, 0x0, 0x7, 0x6, 0xfffffffe, 0xe8ef, 0x5, 0x6, 0x81, 0x401, 0x9, 0x9, 0x9, 0x114, 0x5, 0x0, 0x0, 0x9, 0x0, 0xffffff4c, 0x401], [0x0, 0x0, 0x7, 0x1, 0x8, 0xfe0c, 0x1, 0x7fff, 0x1faa7c2c, 0x2, 0x200, 0x40, 0x5, 0x5, 0x0, 0x3, 0x6, 0x7, 0xffffffff, 0x3, 0x1, 0xfffffffd, 0x4, 0x6b88, 0x8, 0x20, 0x8, 0x3, 0x10001, 0x10000, 0xb3d8, 0x0, 0x4000, 0xffffffe1, 0x3, 0x2, 0x2954, 0x8, 0x6045, 0xffffbf4f, 0x8, 0x1, 0x4, 0x80000000, 0x1, 0xffffe169, 0x2, 0xa8f, 0x2, 0x101, 0x4, 0x8, 0x1, 0x7, 0x100, 0x5, 0x6, 0x8000, 0x7, 0x8, 0x8001, 0x5fa3, 0x7, 0x5e], [0xffffffff, 0x9, 0xfffffffd, 0x26bc, 0x800, 0xffff7fff, 0x80, 0x7f, 0x892, 0x0, 0x0, 0x2, 0x9, 0x1ff, 0x10001, 0x9, 0x6, 0x8, 0x10001, 0x4, 0x3, 0x8aeb, 0xffffffff, 0x7, 0x80000000, 0x20, 0x1000, 0x23, 0x7, 0x101, 0x1, 0x10001, 0x8, 0x2, 0x4, 0x80000001, 0xc8, 0xfffff536, 0x736fd575, 0x1, 0x5, 0x7fff, 0x1, 0x0, 0x0, 0x1, 0x4, 0xa170, 0xe5, 0x27d4ff6c, 0x0, 0x3ff, 0xb2, 0x1ff, 0x8a, 0x3, 0x78, 0x1, 0x1d, 0x7f, 0x6, 0x7fc8a33f, 0x910, 0x1f], [0x5c, 0x7f, 0x7ff, 0xc4, 0x7fff, 0x7, 0x8, 0x81, 0x0, 0xfffffc00, 0x6, 0x5, 0x3, 0x0, 0x7, 0x2, 0x10000, 0xd1d, 0x80, 0x7fff, 0x800, 0x5e58, 0xffff019b, 0x8, 0x7, 0x4, 0x0, 0x0, 0x1, 0x2, 0x5, 0x80, 0xfff, 0x10001, 0x9, 0x0, 0x9, 0x401, 0xede8, 0x5, 0x10f, 0x1f, 0xffffffff, 0x2, 0x1f, 0x2, 0x9, 0x2, 0x3, 0x0, 0x8, 0x1, 0x6, 0x1, 0xfffffff8, 0x1, 0x8, 0xffff, 0x6, 0x1ffc00, 0x8, 0x0, 0x0, 0x6]}, 0x45c) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x22140}) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000080)=@buf={0xbb, &(0x7f0000000840)="5eca2dc22c5ec17f76d66c802b217aa4c12731753280e637f71fde0ffd4c594a5ef932805c21a87abf586f3f017939e69e33824ff76ae23b672dbd22be21b8879d02b949675bc28c29edac793bd06c64371c5ca78acc33562f581bb7d33a8f7ab4969a9969873a1d95bfc36d16af3072597d6b19bf4fe829280e57e6b593741fd69a04a15fa60e6ca10b66ae4eb7daa1feecf10c9d3e077224c037ff1077652f479772aaf4208c58bb00b13ba92cadd46cf12af9aa0f5f8520e24c"}) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000300)='/dev/null\x00', 0xa8480, 0x0) read$char_usb(r5, &(0x7f0000000340), 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r6, &(0x7f0000000180)='.//ile0\x00', r6, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$KVM_SET_CLOCK(r6, 0x4030ae7b, &(0x7f0000000100)={0x7, 0xec7}) connect$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) 15:45:09 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000"], 0x5) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 1488.559912] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1488.578835] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1488.591652] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1488.611617] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 15:45:09 executing program 2: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) writev(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)="ee", 0xc}], 0x1) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x559302, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000540)=ANY=[], &(0x7f0000000400)) fchmodat(r3, &(0x7f0000000280)='./file0\x00', 0x47) r4 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x4, 0x18000) ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f0000000480)={{0x2, @addr=0x1}, "0bcad8689ac1ff72c3688aee2b0fad59899eb263d415ec5d650c95ac130019c2", 0x1}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f00000000c0)=r5) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[]}}, 0x40000c1) r8 = socket(0x10, 0x803, 0x0) ioctl$SG_GET_ACCESS_COUNT(r3, 0x2289, &(0x7f00000002c0)) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in6, @in6=@initdev}}, {{@in6=@ipv4}, 0x0, @in=@dev}}, &(0x7f0000000440)=0xe8) [ 1488.654859] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1488.669207] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1488.691075] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1488.713380] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1488.756449] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1488.768727] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1488.779241] Interruptibility = 00000000 ActivityState = 00000000 [ 1488.787800] *** Host State *** [ 1488.794321] RIP = 0xffffffff8117a4e0 RSP = 0xffff88805930f998 [ 1488.802422] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1488.809740] FSBase=00007fc3fc826700 GSBase=ffff8880aed00000 TRBase=fffffe0000034000 [ 1488.822659] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 1488.829890] CR0=0000000080050033 CR3=000000008c222000 CR4=00000000001426e0 [ 1488.844548] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff868018e0 [ 1488.853684] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1488.859871] *** Control State *** [ 1488.866169] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000e2 [ 1488.878278] EntryControls=0000d1ff ExitControls=002fefff [ 1488.886783] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1488.892207] *** Guest State *** [ 1488.897041] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1488.899051] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1488.907822] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1488.917064] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1488.926746] reason=80000021 qualification=0000000000000000 [ 1488.933394] CR3 = 0x00000000fffbc000 [ 1488.939761] IDTVectoring: info=00000000 errcode=00000000 [ 1488.943781] RSP = 0x00000000000004cb RIP = 0x0000000000000000 [ 1488.953028] TSC Offset = 0xfffffce0061479c6 [ 1488.956934] RFLAGS=0x00022142 DR7 = 0x0000000000000400 [ 1488.959225] EPT pointer = 0x000000008cb3b01e [ 1488.966829] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1488.974550] Virtual processor ID = 0x0002 [ 1488.979293] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 15:45:09 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x600000, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) setitimer(0x0, &(0x7f0000000080)={{r3, r4/1000+30000}, {0x77359400}}, &(0x7f0000000100)) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x22140}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$KVM_RUN(r5, 0xae80, 0x0) 15:45:09 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000"], 0x5) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 1489.002886] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1489.014380] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1489.024251] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1489.034181] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1489.044738] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1489.054417] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1489.075208] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1489.097228] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1489.117628] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1489.157295] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1489.167011] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1489.176409] Interruptibility = 00000000 ActivityState = 00000000 [ 1489.184833] *** Host State *** [ 1489.188259] RIP = 0xffffffff8117a4e0 RSP = 0xffff8880a685f998 [ 1489.199955] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1489.208305] FSBase=00007f8194ae5700 GSBase=ffff8880aec00000 TRBase=fffffe0000003000 [ 1489.217443] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 1489.225420] CR0=0000000080050033 CR3=00000000967ab000 CR4=00000000001426f0 [ 1489.235371] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff868018e0 [ 1489.243949] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1489.250889] *** Control State *** [ 1489.254406] PinBased=0000003f CPUBased=b6a1edfa SecondaryExec=000000e3 [ 1489.262303] EntryControls=0000d1ff ExitControls=002fefff 15:45:10 executing program 0: futex(&(0x7f0000000000), 0x180, 0x0, 0x0, 0x0, 0x2) r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x100, 0x0) ioctl$TIOCCBRK(r1, 0x5428) futex(&(0x7f000000cffc), 0x85, 0x0, 0x0, &(0x7f0000048000), 0x5000000) 15:45:10 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x2b, 0x2, 0x3f) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r3, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) r5 = accept4$alg(r4, 0x0, 0x0, 0x80800) r6 = eventfd2(0x8001, 0x800) r7 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r8, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r8, 0x0, 0x0) r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r9, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r9, 0x0, 0x0) r10 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r10, 0xc1205531, 0x0) r11 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r11, 0xc1205531, 0x0) r12 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/policy\x00', 0x0, 0x0) io_submit(r3, 0x6, &(0x7f0000000700)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0xf5, r5, &(0x7f00000002c0)="6780b0302c67c6e54a1d7457d6e8375a5a3fd7cef57f18036cf5d4e5938f5933c91a06e66afa5e35bcdf924352845e599e3fabf7cfe7ea8da9e73d1972467cf111ec74cda50f227021d9bdfc2585b6aa0a66e547e6faa08367db8050672ce7742b7681da175799a92c016cc111c579f66bc6a376329b91bcf97d2261ddcb3526a50d2bc58b09417c2fbbb7216ac4b031832a75b60e60029a2ac3b84b69d1bde72fbf4506f9eb687f35aebf270c397735aedfda4e3b52b695baf10ec8519b5bb57bc823f7f530a7468c3d367092c51906549f36b12d80a79e527b79974b88f752ba8b497170257e", 0xe7, 0x1, 0x0, 0x2, r6}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x3, 0xde92, r0, &(0x7f0000000180)="7c30fe6f", 0x4, 0xf49, 0x0, 0x3, r12}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x3f, r7, &(0x7f00000003c0)="76867cd46f68dcf106ec4482a50df3334d2beb0cf298e077802c16d1ebf040082bbf878b4bbfad30df23b038ee0199f284c531cab17d18a3fe5db16e8fcb0a3321c827f4ed5e6253824087d8d5f91325954f8cd58c2b81783218d7fad2c8eabcd5eea9fda891966a47aaf670ab46c1abdba3c0f7480586e3d66defc352c8005f8ad931c453a5182774a255b1927b2002a2cd0a82149c090661d328fd141f06439565ed7292f71dc55914394418e99aa76c9d872bdb1b44c3ef7e780ec15b2c2d25dd3ccbc6d2bd50c8f1317e9e398aa0362e6f6ec2e5eff18e7d1bd86ccb0f6c8a78edb1", 0xe4, 0x1, 0x0, 0x2}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x2, 0x7ff, r8, &(0x7f00000004c0)="a932076c134e22813298f515215ece8568f52af6c5", 0x15, 0x8994, 0x0, 0x1}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x8, 0x0, r2, &(0x7f0000000540)="da0c7eec4e9c42b415d4caeb4e4aa47fd8001820679f99729a434bd58796b0543ebd33be7c65a799ca36a9e8504512b5153635a31aeaa3773ba16b2485fceeca06864a49ebe3c0ed1c88a848b942f3781e0abe722d73aebcea5b541b491925962fd9a4d8c5d1e930a4590db268260146ce76035d87dc5413a4048c8f185614627771dfadcb0b576e46fb529e892796461ec0665ca8eb8a7eecc7", 0x9a, 0x7, 0x0, 0x1, r11}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x3, 0x12, r9, &(0x7f0000000640)="8c05a64f6c580886fd3b76fce097c1d7d4bd15264e2237565b2180076fa66f4a2c31db051274df8143bb052f93f8ed4159bb6e9fa3aa712a030abca9630ff865412673fa9ef585aa904db7dae32f9406a2f297e7a4865fb441def2d8563e7b4568", 0x61, 0x5, 0x0, 0x2, r10}]) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) r14 = fcntl$dupfd(r13, 0x0, r13) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:10 executing program 2: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) writev(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)="ee", 0xc}], 0x1) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x559302, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, 0x1, 0x7, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x9}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5086}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfffeffff}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f00000000c0)=r3) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in6, @in6=@initdev}}, {{@in6=@ipv4}, 0x0, @in=@dev}}, &(0x7f0000000440)=0xe8) 15:45:10 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000"], 0x5) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x10090, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r4, &(0x7f0000000180)='.//ile0\x00', r4, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$EVIOCGPROP(r4, 0x80404509, &(0x7f0000000300)=""/62) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r5, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x1c, r6, 0x300, 0x70bd26, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x22140}) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r8 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x100, 0x0) ioctl$LOOP_SET_FD(r8, 0x4c00, r7) [ 1489.267891] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1489.293352] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1489.314958] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 15:45:10 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b1"], 0x8) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 1489.340964] reason=80000021 qualification=0000000000000000 [ 1489.360806] IDTVectoring: info=00000000 errcode=00000000 [ 1489.368563] TSC Offset = 0xfffffcdfcd5342f8 [ 1489.379389] TPR Threshold = 0x00 [ 1489.386694] EPT pointer = 0x0000000097fe601e [ 1489.397397] Virtual processor ID = 0x0003 15:45:10 executing program 2: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) writev(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)="ee", 0xc}], 0x1) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x559302, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r3, &(0x7f0000000180)='.//ile0\x00', r3, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r3, 0xc1004111, &(0x7f0000000480)={0x7f, [0x9, 0x5, 0x7], [{0x5, 0xa0, 0x0, 0x1}, {0xffff0001, 0xe1, 0x1, 0x0, 0x0, 0x1}, {0x6, 0x9f, 0x0, 0x1, 0x1, 0x1}, {0x8, 0x8, 0x0, 0x0, 0x1}, {0x9, 0x1, 0x0, 0x0, 0x1, 0x1}, {0x7, 0x7f, 0x0, 0x0, 0x1}, {0x101, 0x800, 0x0, 0x1, 0x0, 0x1}, {0xcb, 0xe21, 0x1, 0x0, 0x0, 0x1}, {0x401, 0xffffffff, 0x0, 0x1, 0x0, 0x1}, {0x8, 0x4, 0x1, 0x1, 0x1, 0x1}, {0x25d, 0x6ac, 0x1, 0x1, 0x1, 0x1}, {0x183d8000, 0x3, 0x1, 0x1}], 0xff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f00000000c0)=r4) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r7, @ANYBLOB="00fa00220001000000d1299cdc51db0680f901aac6654fdaa53ed58cfe117420d72808be"], 0x28}}, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in6, @in6=@initdev}}, {{@in6=@ipv4}, 0x0, @in=@dev}}, &(0x7f0000000440)=0xe8) [ 1489.556098] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1489.593183] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 15:45:10 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r3, &(0x7f0000000180)='.//ile0\x00', r3, &(0x7f00000007c0)='./file0/f.le.\x00') write$P9_RMKNOD(r3, &(0x7f0000000080)={0x14, 0x13, 0x1, {0xa2, 0x4, 0x7}}, 0x14) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:10 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b1"], 0x8) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, 0x0) write$uinput_user_dev(r3, &(0x7f00000003c0)={'syz0\x00', {0x7, 0x5, 0x4, 0x248}, 0x55, [0x0, 0xc00, 0x7b, 0x7fffffff, 0xda8, 0x8001, 0x8001, 0x6, 0x3, 0x5, 0x80, 0x5, 0x1, 0x0, 0x7ff, 0x9, 0x0, 0x5, 0x5496, 0x81, 0x3, 0x0, 0x4, 0x8, 0x0, 0x0, 0x5, 0x1f, 0x4, 0x7, 0x5, 0x0, 0x9, 0x20, 0x0, 0x22a7, 0x0, 0x2, 0x0, 0x4, 0x80000001, 0x9, 0x306e, 0x0, 0x7, 0x4, 0xfffffffe, 0xe8ef, 0x5, 0x6, 0x81, 0x401, 0x9, 0x9, 0x9, 0x114, 0x5, 0x0, 0x0, 0x9, 0x0, 0xffffff4c, 0x401], [0x0, 0x0, 0x7, 0x1, 0x8, 0xfe0c, 0x1, 0x7fff, 0x1faa7c2c, 0x2, 0x200, 0x40, 0x5, 0x5, 0x0, 0x3, 0x6, 0x7, 0xfffffffb, 0x3, 0x1, 0xfffffffd, 0x4, 0x6b88, 0x8, 0x20, 0x8, 0x3, 0x10001, 0x10000, 0xb3d8, 0x0, 0x4000, 0xffffffe1, 0x3, 0x2, 0x2954, 0x8, 0x6045, 0xffffff4f, 0x8, 0x1, 0x4, 0x80000000, 0x1, 0xffffe171, 0x2, 0xa8f, 0x2, 0x101, 0x4, 0x8, 0x1, 0x7, 0x100, 0x5, 0x6, 0x8000, 0x7, 0x8, 0x8001, 0x5fa3, 0x7, 0x5e], [0xffffffff, 0x9, 0xfffffffd, 0x26bc, 0x800, 0xffff7fff, 0x80, 0x7f, 0x892, 0x0, 0x0, 0x2, 0x9, 0x1ff, 0x10001, 0x9, 0x6, 0x8, 0x10001, 0x4, 0x3, 0x8aeb, 0xffffffff, 0x7, 0x80000000, 0x20, 0x1000, 0x23, 0x7, 0x101, 0x1, 0x10001, 0x8, 0x0, 0x4, 0x80000001, 0xc8, 0xfffff536, 0x736fd575, 0x1, 0x5, 0x7fffffff, 0x1, 0x0, 0x0, 0x1, 0x4, 0xa170, 0xe5, 0x27d4ff6c, 0x0, 0x3ff, 0xb2, 0x1ff, 0x8a, 0x3, 0x78, 0x1, 0x1d, 0x7f, 0x6, 0x7fc8a33f, 0x910, 0x1f], [0x5c, 0x7f, 0x7ff, 0xc4, 0x7fff, 0x7, 0x8, 0x81, 0x0, 0xfffffc00, 0x6, 0x5, 0x3, 0x0, 0x7, 0x0, 0x10000, 0xd1d, 0x80, 0x7fff, 0x800, 0x5e58, 0xffff019b, 0x8, 0x7, 0x4, 0x0, 0x0, 0x1, 0x2, 0x5, 0x80, 0xfff, 0x10001, 0x9, 0x0, 0x9, 0x401, 0xede8, 0x5, 0x10f, 0x1f, 0xffffffff, 0x2, 0x1f, 0x2, 0x9, 0x2, 0x3, 0x0, 0x8, 0x1, 0x6, 0x1, 0xfffffff8, 0x1, 0x8, 0xffff, 0x6, 0x1ffc00, 0x8, 0x0, 0x0, 0x6]}, 0x45c) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x22140}) r5 = accept4$unix(r3, &(0x7f0000000280)=@abs, &(0x7f0000000080)=0x6e, 0x80000) getsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000100), 0x10) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) 15:45:10 executing program 2: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) writev(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)="ee", 0xc}], 0x1) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x559302, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f00000000c0)=r3) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r5, 0x0, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r5, 0x891b, &(0x7f0000000240)={'bridge_slave_0\x00', {0x2, 0x4e20, @multicast2}}) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r7, @ANYBLOB="000000000000000008000a000f0000000889d8f66062931420e8a91ab5789040ced29a99cd33524bd09aadaabc82984b0ce140765ac5f40ee4299b90d3bf9fdfb80dfd195adebfa1f1bee1ea21448a972691da65e41c3749a1cdeefed21044307136fc3128135a5ccef503055a267e6b51e15c4f5992cb6c7c0db89e9fe55481b7a1bcaacfff2d5aa6f9288d7647b813d33039674988decd3a0762e1aa8bb5d4e494a32a6c0e7b07b4d4c163e05f2162a972e0b6ff5768a954eddc3a96a0396805a56826f3f573eefedb808ffebbcc7f3bd3c20bfd7d0f3b535aa7e10312adfdfa7543fd548a"], 0x28}}, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in6, @in6=@initdev}}, {{@in6=@ipv4}, 0x0, @in=@dev}}, &(0x7f0000000440)=0xe8) [ 1490.149327] *** Guest State *** [ 1490.164705] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 15:45:11 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b1"], 0x8) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 1490.206461] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1490.244925] CR3 = 0x00000000fffbc000 [ 1490.255785] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 1490.271860] RFLAGS=0x00022142 DR7 = 0x0000000000000400 [ 1490.281264] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1490.302528] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1490.328540] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1490.352685] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1490.362731] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1490.386859] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1490.389305] *** Guest State *** [ 1490.403012] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1490.404137] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1490.413703] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1490.413916] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1490.413938] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1490.413996] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1490.433248] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1490.440204] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1490.455315] CR3 = 0x00000000fffbc000 [ 1490.457029] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1490.466136] RSP = 0x00000000000004cb RIP = 0x0000000000000000 [ 1490.476542] Interruptibility = 00000000 ActivityState = 00000000 [ 1490.476547] *** Host State *** [ 1490.476556] RIP = 0xffffffff8117a4e0 RSP = 0xffff888054e8f998 [ 1490.476573] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1490.476582] FSBase=00007fc3fc826700 GSBase=ffff8880aec00000 TRBase=fffffe0000003000 [ 1490.476591] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 1490.476602] CR0=0000000080050033 CR3=0000000091bca000 CR4=00000000001426f0 [ 1490.476613] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff868018e0 [ 1490.476622] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1490.480693] *** Control State *** [ 1490.482387] RFLAGS=0x00022142 DR7 = 0x0000000000000400 [ 1490.489108] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000e2 [ 1490.502456] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1490.509427] EntryControls=0000d1ff ExitControls=002fefff [ 1490.512176] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1490.518184] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1490.528601] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1490.538283] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1490.544225] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1490.549219] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 15:45:11 executing program 0: futex(&(0x7f000000cffc), 0x180, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") futex(&(0x7f000000cffc), 0x85, 0x0, 0x0, &(0x7f0000048000), 0x5000000) prctl$PR_GET_TIMERSLACK(0x1e) 15:45:11 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a925b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:11 executing program 2: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) writev(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)="ee", 0xc}], 0x1) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x559302, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f00000000c0)=r3) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480)='nl80211\x00') r7 = socket(0x10, 0x803, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r8, &(0x7f0000000200)={&(0x7f00000005c0)=@ax25, 0x80, &(0x7f0000000240)=[{&(0x7f0000000080)=""/138, 0x8a}, {&(0x7f0000000640)=""/205, 0xcd}, {&(0x7f00000002c0)=""/115, 0x73}], 0x3, &(0x7f00000001c0)=""/4, 0x4, 0x7301}, 0x40013f00) sendto$inet6(r8, &(0x7f0000000240), 0x0, 0x80, &(0x7f0000000280)={0xa, 0x4e23, 0x101, @dev={0xfe, 0x80, [], 0x36}, 0x9}, 0x1c) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in6, @in6=@initdev}}, {{@in6=@ipv4}, 0x0, @in=@dev}}, &(0x7f0000000440)=0xe8) 15:45:11 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b189"], 0x9) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 1490.556461] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1490.568035] reason=80000021 qualification=0000000000000000 [ 1490.574470] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1490.581283] IDTVectoring: info=00000000 errcode=00000000 [ 1490.587496] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1490.598486] TSC Offset = 0xfffffcdf73fb7e01 [ 1490.604529] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1490.611650] EPT pointer = 0x0000000093eb401e [ 1490.618477] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1490.630180] Virtual processor ID = 0x0002 [ 1490.634243] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1490.715520] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1490.726811] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1490.734485] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1490.745907] Interruptibility = 00000000 ActivityState = 00000000 [ 1490.754068] *** Host State *** [ 1490.757640] RIP = 0xffffffff8117a4e0 RSP = 0xffff88800e817998 [ 1490.779567] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1490.793352] FSBase=00007f8194ae5700 GSBase=ffff8880aed00000 TRBase=fffffe0000034000 [ 1490.802856] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 1490.809595] CR0=0000000080050033 CR3=0000000095273000 CR4=00000000001426e0 [ 1490.818528] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff868018e0 [ 1490.828603] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1490.843533] *** Control State *** [ 1490.847559] PinBased=0000003f CPUBased=b6a1edfa SecondaryExec=000000e3 [ 1490.864295] EntryControls=0000d1ff ExitControls=002fefff [ 1490.875253] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1490.887537] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1490.898958] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1490.917487] reason=80000021 qualification=0000000000000000 [ 1490.933164] IDTVectoring: info=00000000 errcode=00000000 [ 1490.944075] TSC Offset = 0xfffffcdf00afd18c [ 1490.948715] TPR Threshold = 0x00 [ 1490.957383] EPT pointer = 0x00000000a8dba01e [ 1490.963913] Virtual processor ID = 0x0003 [ 1490.967777] *** Guest State *** [ 1490.978448] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1490.995159] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1491.005328] CR3 = 0x00000000fffbc000 [ 1491.009745] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 1491.022869] RFLAGS=0x00022142 DR7 = 0x0000000000000400 [ 1491.029259] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1491.039445] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1491.054803] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1491.064013] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1491.077164] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1491.078480] *** Guest State *** [ 1491.087552] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1491.090267] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1491.102436] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1491.107292] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1491.119565] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1491.125187] CR3 = 0x00000000fffbc000 [ 1491.133789] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1491.137808] RSP = 0x00000000000004cb RIP = 0x0000000000000000 [ 1491.150221] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1491.151698] RFLAGS=0x00022142 DR7 = 0x0000000000000400 [ 1491.159643] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1491.166780] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1491.179183] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1491.181975] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1491.192589] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1491.201096] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1491.211669] Interruptibility = 00000000 ActivityState = 00000000 [ 1491.216040] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1491.226063] *** Host State *** [ 1491.230798] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1491.233597] RIP = 0xffffffff8117a4e0 RSP = 0xffff888054e8f998 [ 1491.242788] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1491.251569] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1491.256466] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1491.266565] FSBase=00007fc3fc826700 GSBase=ffff8880aec00000 TRBase=fffffe0000003000 [ 1491.270904] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1491.278598] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 1491.286939] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1491.296633] CR0=0000000080050033 CR3=0000000091bca000 CR4=00000000001426f0 [ 1491.302025] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1491.307981] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff868018e0 [ 1491.316229] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1491.328362] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1491.333448] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1491.339126] *** Control State *** [ 1491.345408] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1491.352452] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000e2 [ 1491.356453] Interruptibility = 00000000 ActivityState = 00000000 [ 1491.366800] EntryControls=0000d1ff ExitControls=002fefff [ 1491.369273] *** Host State *** [ 1491.374809] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1491.378412] RIP = 0xffffffff8117a4e0 RSP = 0xffff88800e817998 [ 1491.385757] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1491.392938] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1491.403054] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1491.407352] FSBase=00007f8194ae5700 GSBase=ffff8880aed00000 TRBase=fffffe0000034000 [ 1491.417701] reason=80000021 qualification=0000000000000000 [ 1491.422020] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 1491.427985] IDTVectoring: info=00000000 errcode=00000000 [ 1491.434368] CR0=0000000080050033 CR3=0000000095273000 CR4=00000000001426e0 [ 1491.443713] TSC Offset = 0xfffffcdeb58aec3e 15:45:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r3, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f00) accept4$packet(r3, 0x0, &(0x7f0000000000), 0x800) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x22140}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 15:45:12 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b189"], 0x9) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:12 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@ipv4={[], [], @remote}, @in6=@initdev}}, {{@in=@multicast2}, 0x0, @in=@local}}, &(0x7f0000000180)=0xe8) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) r3 = syz_open_dev$ptys(0xc, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) r8 = syz_open_dev$evdev(&(0x7f0000000400)='/dev/input/event#\x00', 0x3, 0x2000) ioctl$EVIOCGABS2F(r8, 0x8018456f, &(0x7f0000000440)=""/230) recvmsg$kcm(r7, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x1c1de7de}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f00) r9 = creat(&(0x7f0000000140)='./file0\x00', 0x42) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) signalfd(r3, &(0x7f0000000540)={[0x401]}, 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r10, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x7, 0x2, 0x0, r12}, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r9, 0x84, 0x22, &(0x7f0000000180)={0x2, 0x6, 0x0, 0xffffffff, r12}, 0x10) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r7, 0x84, 0x77, &(0x7f0000000240)={r12, 0x8, 0x1, [0x1ad9]}, &(0x7f00000003c0)=0xa) connect$nfc_raw(r6, &(0x7f0000000080)={0x27, 0x1, 0x0, 0x2}, 0x10) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 1491.447910] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff868018e0 [ 1491.455280] EPT pointer = 0x000000004bf7301e [ 1491.458463] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1491.462856] Virtual processor ID = 0x0002 [ 1491.469220] *** Control State *** [ 1491.476870] PinBased=0000003f CPUBased=b6a1edfa SecondaryExec=000000e3 [ 1491.488985] EntryControls=0000d1ff ExitControls=002fefff [ 1491.495293] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1491.508771] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1491.517388] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1491.548868] reason=80000021 qualification=0000000000000000 15:45:12 executing program 2: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) writev(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)="ee", 0xc}], 0x1) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x559302, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket(0x2c, 0x802, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0xc0040, 0x0) ioctl$VIDIOC_S_PARM(r3, 0xc0cc5616, &(0x7f0000000480)={0x3, @capture={0x0, 0x1, {0x0, 0x62e}, 0x1, 0x7fff}}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f00000000c0)=r4) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r7}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$netlink(0x10, 0x3, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000280)={0x2, 0x7f, "a0761c", 0x68, 0x6}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in6, @in6=@initdev}}, {{@in6=@ipv4}, 0x0, @in=@dev}}, &(0x7f0000000440)=0xe8) [ 1491.560723] IDTVectoring: info=00000000 errcode=00000000 [ 1491.567259] TSC Offset = 0xfffffcde9f230f98 [ 1491.574061] TPR Threshold = 0x00 [ 1491.577634] EPT pointer = 0x00000000a58fa01e [ 1491.583500] Virtual processor ID = 0x0003 15:45:12 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) r4 = creat(&(0x7f0000000140)='./file0\x00', 0x42) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, r7}, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000180)={0x2, 0x6, 0x0, 0xffffffff, r7}, 0x10) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000080)={r7, 0x2}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={r8, 0x3}, &(0x7f0000000240)=0x8) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:12 executing program 0: futex(&(0x7f000000cffc), 0x180, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x6, 0x3, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") futex(&(0x7f000000cffc), 0x85, 0x0, 0x0, &(0x7f0000048000), 0x5000000) 15:45:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, 0x0) write$uinput_user_dev(r3, &(0x7f00000003c0)={'syz0\x00', {0x7, 0x5, 0x4, 0x248}, 0x55, [0xffffffff, 0xc00, 0x7b, 0x7fffffff, 0xda8, 0x8001, 0x8001, 0x6, 0x3, 0x5, 0x80, 0x5, 0x1, 0x0, 0x7ff, 0x9, 0x0, 0x5, 0x5496, 0x81, 0x3, 0x0, 0x4, 0x8, 0x0, 0x0, 0x5, 0x1f, 0x4, 0x7, 0x5, 0x0, 0x9, 0x20, 0x0, 0x22a7, 0x0, 0x2, 0x0, 0x4, 0x80000001, 0x9, 0x306e, 0x0, 0x7, 0x4, 0xfffffffe, 0xe8ef, 0x5, 0x6, 0x81, 0x401, 0x9, 0x9, 0x9, 0x114, 0x5, 0x0, 0x0, 0x9, 0x0, 0xffffff4c, 0x401], [0x0, 0x0, 0x7, 0x1, 0x8, 0xfe0c, 0x1, 0x7fff, 0x1faa7c2c, 0x2, 0x200, 0x40, 0x5, 0x5, 0x0, 0x3, 0x6, 0x7, 0xffffffff, 0x3, 0x1, 0xfffffffd, 0x4, 0x6b88, 0x8, 0x20, 0x8, 0x3, 0x10001, 0x10000, 0xb3d8, 0x0, 0x4000, 0xffffffe1, 0x3, 0x2, 0x2954, 0x8, 0x6045, 0xffffff4f, 0x8, 0x1, 0x4, 0x80000000, 0x1, 0xffffe16d, 0x2, 0xa8f, 0x2, 0x101, 0x4, 0x8, 0x1, 0x7, 0x100, 0x5, 0x6, 0x8000, 0x7, 0x8, 0x8001, 0x5fa3, 0x7, 0x5e], [0xffffffff, 0x9, 0xfffffffd, 0x26bc, 0x800, 0xffff7fff, 0x80, 0x7f, 0x892, 0x0, 0x0, 0x2, 0x9, 0x1ff, 0x10001, 0x9, 0x6, 0x8, 0x10001, 0x4, 0x3, 0x8aeb, 0xffffffff, 0x7, 0x80000000, 0x20, 0x1000, 0x23, 0x7, 0x101, 0x1, 0x10001, 0x8, 0x0, 0x4, 0x80000001, 0xc8, 0xfffff536, 0x736fd575, 0x1, 0x5, 0x7fff, 0x1, 0x0, 0x0, 0x1, 0x4, 0xa170, 0xe5, 0x27d4ff6c, 0x0, 0x3ff, 0xb2, 0x1ff, 0x8a, 0x3, 0x78, 0x1, 0x1d, 0x7f, 0x6, 0x7fc8a33f, 0x910, 0x1f], [0x5c, 0x7f, 0x7ff, 0xc4, 0x7fff, 0x7, 0x8, 0x81, 0x0, 0xfffffc00, 0x6, 0x5, 0x3, 0x0, 0x7, 0x0, 0x10000, 0xd1d, 0x80, 0x7fff, 0x800, 0x5e58, 0xffff019b, 0x8, 0x7, 0x4, 0x0, 0x0, 0x1, 0x2, 0x5, 0x80, 0xfff, 0x10001, 0x9, 0x0, 0x9, 0x401, 0xede8, 0x5, 0x10f, 0x1f, 0xffffffff, 0x2, 0x1f, 0x2, 0x9, 0x2, 0x3, 0x0, 0x8, 0x1, 0x6, 0x1, 0xfffffff8, 0x1, 0x8, 0xffff, 0x6, 0x1ffc00, 0x8, 0x0, 0x0, 0x6]}, 0x45c) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x22140}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) 15:45:12 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b189"], 0x9) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:12 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(0xffffffffffffffff) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:12 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x116}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:12 executing program 2: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) writev(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)="ee", 0xc}], 0x1) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x559302, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f00000000c0)=r4) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r7, @ANYBLOB="000000000000000008000a000f000000f8c21602814d389d07f87537a3efaeb2f3b300c7dafeb3e44f611f0acf7e88f46a3a7dd50701d4e71ddbf9"], 0x28}}, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$VIDIOC_G_FBUF(r1, 0x8030560a, &(0x7f0000000480)={0x14, 0x21, &(0x7f0000000240)="b2fbb35443f3916d06e58a1a58ee7f17ee1ac8fff7edd85de1b8ee76b06b3444a9a64356467ffff5200ea83b821e474b9e214793a456efd1dd271a7d956f2658fa85b1db14b4c3618dcf9bce008ff2fcd0c0fde3147c79ce772ba804e48825e89c3fcd67f6819f67c845903d3b8877f0ca83f94c4eba9d31319de9588928dd714a2f048be602c5e86dc4050bf456dc9f460aa70e24bf8c16a665ee9643f2fba797160d895fb52f4823356fdb45f24dd189b925556041415462d602275dfcdccf07a981cc439ba11207f55e3bc031e268c3ec5fba", {0x80, 0x452, 0x3131354f, 0x8, 0xff, 0x2, 0xc, 0x9}}) socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in6, @in6=@initdev}}, {{@in6=@ipv4}, 0x0, @in=@dev}}, &(0x7f0000000440)=0xe8) 15:45:12 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(0xffffffffffffffff) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 1492.396822] *** Guest State *** [ 1492.401555] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1492.411334] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1492.422539] CR3 = 0x00000000fffbc000 [ 1492.426397] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 1492.432675] RFLAGS=0x00022142 DR7 = 0x0000000000000400 [ 1492.439143] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1492.446247] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1492.454537] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1492.464603] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1492.472908] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1492.482011] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1492.490243] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1492.499455] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1492.507988] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1492.516443] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1492.524680] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1492.533004] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1492.539540] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1492.547161] Interruptibility = 00000000 ActivityState = 00000000 [ 1492.554242] *** Host State *** [ 1492.557469] RIP = 0xffffffff8117a4e0 RSP = 0xffff88805b83f998 [ 1492.563984] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1492.570534] FSBase=00007fc3fc7c2700 GSBase=ffff8880aed00000 TRBase=fffffe0000034000 [ 1492.578559] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 1492.585224] CR0=0000000080050033 CR3=00000000828a2000 CR4=00000000001426e0 [ 1492.593382] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff868018e0 [ 1492.601997] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1492.608442] *** Control State *** [ 1492.612180] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000e2 [ 1492.618904] EntryControls=0000d1ff ExitControls=002fefff [ 1492.624513] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1492.632019] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1492.638684] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 15:45:13 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(0xffffffffffffffff) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:13 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x101400, 0x0) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e22, @loopback}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:13 executing program 2: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) writev(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)="ee", 0xc}], 0x1) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x559302, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f00000000c0)=r3) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r6, @ANYBLOB="000000000304050045000000000000"], 0x28}}, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000580)='keyring\x00', &(0x7f00000005c0)={'syz', 0x0}, 0x0, 0x0, r8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) r9 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, r8) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f00000002c0)={r9, 0xd8, 0x90}, &(0x7f0000000480)={'enc=', 'pkcs1', ' hash=', {'ghash-generic\x00'}}, &(0x7f00000005c0)="bafbdd4669ee91e2d8bf0054425ecfc482a86b4d808fe074149a4c6c398a1c7440809edbfc446ae76da66bc7e5001cfaf22f678664d1028497a287f0174f5b170ad635dce3004d8c68cfe3c3362f89cc7075f145d7f36ca03a82ccef30b267d205aedc14dc14ab60040d344aeb54c4c7020c9caee5130ff8411a6ac9f7c7ba2e6779dd4346d954310938cfa2e46356f63cc0c1e001f1dec3d00c177a893bb932aabcc90f22bb73a9750fca6439b4ac576fc7cf2cda652abdeef74e6a70ea09c00846ddf907b17bb66d539bda3784153e7fbe0428cb9df0da", &(0x7f00000006c0)=""/144) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in6, @in6=@initdev}}, {{@in6=@ipv4}, 0x0, @in=@dev}}, &(0x7f0000000440)=0xe8) 15:45:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r4, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f00) r5 = creat(&(0x7f0000000140)='./file0\x00', 0x42) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, r8}, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000180)={0x2, 0x6, 0x0, 0xffffffff, r8}, 0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000280)={r8, 0x5b, "5ad6336453f6e93edec1c5758629228d21f250f96df06af7217c565abb65ffbd6a57c828b85f51e7b74d66cc4ec59517bb8abf2bb26ecb2f43c7210cc38b56e3b70033e33d0a5b323a91c3487ef3313e9b68342cf89bbece65d1b8"}, &(0x7f0000000080)=0x63) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, 0x0) write$uinput_user_dev(r3, &(0x7f00000003c0)={'syz0\x00', {0x7, 0x5, 0x4, 0x248}, 0x55, [0x0, 0xc00, 0x7b, 0x7fffffff, 0xda8, 0x8001, 0x8001, 0x6, 0x3, 0x5, 0x80, 0x5, 0x1, 0x0, 0x7ff, 0x9, 0x0, 0x5, 0x5496, 0x81, 0x3, 0x0, 0x4, 0x8, 0x0, 0x0, 0x5, 0x1f, 0x4, 0x7, 0x5, 0x0, 0x9, 0x20, 0x0, 0x22a7, 0x0, 0x2, 0x0, 0x4, 0x80000001, 0x9, 0x306e, 0x0, 0x7, 0x4, 0xfffffffe, 0xe8ef, 0x5, 0x6, 0x81, 0x401, 0x9, 0x9, 0x9, 0x114, 0x5, 0x0, 0x0, 0x9, 0x0, 0xffffff4c, 0x401], [0x0, 0x0, 0x7, 0x1, 0x8, 0xfe0c, 0x1, 0x7fff, 0x1faa7c2c, 0x2, 0x200, 0x40, 0x5, 0x5, 0x0, 0x3, 0x6, 0x7, 0xffffffff, 0x3, 0x1, 0xfffffffd, 0x4, 0x6b88, 0x8, 0x20, 0x8, 0x3, 0x10001, 0x10000, 0xb3d8, 0x0, 0x4000, 0xffffffe1, 0x3, 0x2, 0x2954, 0x8, 0x6045, 0xffffff4f, 0x8, 0x1, 0x4, 0x80000000, 0x1, 0xffffe16d, 0x2, 0xa8f, 0x2, 0x101, 0x4, 0x8, 0x1, 0x7, 0x100, 0x5, 0x6, 0x8000, 0x7, 0x8, 0x8001, 0x5fa3, 0x7, 0x5e], [0xffffffff, 0x9, 0xfffffffd, 0x26bc, 0x800, 0xffff7fff, 0x80, 0x7f, 0x892, 0x0, 0x0, 0x2, 0x9, 0x1ff, 0x10001, 0x9, 0x6, 0x8, 0x10001, 0x4, 0x3, 0x8aeb, 0xffffffff, 0x7, 0x80000000, 0x20, 0x1000, 0x23, 0x7, 0x101, 0x1, 0x10001, 0x8, 0x0, 0x4, 0x80000001, 0xc8, 0xfffff536, 0x736fd575, 0x1, 0x5, 0x7fff, 0x1, 0x0, 0x0, 0x1, 0x4, 0xa170, 0xe5, 0x27d4ff6c, 0x0, 0x3ff, 0xb2, 0x1ff, 0x8a, 0x3, 0x78, 0x1, 0x1d, 0x7f, 0x6, 0x7fc8a33f, 0x910, 0x1f], [0x5c, 0x7f, 0x7ff, 0xc4, 0x7fff, 0x7, 0x8, 0x81, 0x0, 0xfffffc00, 0x6, 0x5, 0x3, 0x0, 0x7, 0x0, 0x10000, 0xd1d, 0x80, 0x7fff, 0x800, 0x5e58, 0xffff019b, 0x8, 0x7, 0x4, 0x0, 0x0, 0x1, 0x2, 0x5, 0x80, 0xfff, 0x10001, 0x9, 0x0, 0x9, 0x401, 0xede8, 0x5, 0x10f, 0x1f, 0xffffffff, 0x2, 0x1f, 0x2, 0x9, 0x0, 0x3, 0x0, 0x8, 0x1, 0x6, 0x1, 0xfffffff8, 0x1, 0x8, 0xffff, 0x6, 0x1ffc00, 0x8, 0x0, 0x0, 0x6]}, 0x45c) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r9, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r9, 0x0, 0x0) r10 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r10, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r10, 0x0, 0x0) dup3(r9, r10, 0x80000) r11 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x22140}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$KVM_RUN(r11, 0xae80, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) 15:45:13 executing program 0: futex(&(0x7f000000cffc), 0x180, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r4, 0x0, 0x0) io_getevents(r1, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000180)={r2, r3+30000000}) futex(&(0x7f000000cffc), 0x85, 0x0, 0x0, &(0x7f0000048000), 0x5000000) [ 1492.645835] reason=80000021 qualification=0000000000000000 [ 1492.652379] IDTVectoring: info=00000000 errcode=00000000 [ 1492.657833] TSC Offset = 0xfffffcdde8efc867 [ 1492.662419] EPT pointer = 0x0000000099ead01e [ 1492.666964] Virtual processor ID = 0x0002 15:45:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x2000000000000000, 0x0, 0x0, 0x1}, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, 0x0) epoll_wait(r3, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}], 0x6, 0x7) r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r4, &(0x7f0000000180)='.//ile0\x00', r4, &(0x7f00000007c0)='./file0/f.le.\x00') perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0xa1, 0x3f, 0x94, 0x6, 0x0, 0x5, 0x2000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x35, 0x4, @perf_bp={&(0x7f0000000000), 0x8}, 0x4000, 0x5, 0x81, 0x5, 0x80000000, 0x830, 0x3}, 0xffffffffffffffff, 0xf, r4, 0x2) getpeername(r4, &(0x7f0000000300)=@rc, &(0x7f0000000100)=0x80) r5 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, &(0x7f0000000540)=ANY=[], &(0x7f0000000400)) syz_open_pts(r5, 0x208001) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x22140}) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r7, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) r8 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r8, 0x84, 0x1b, &(0x7f0000000540)=ANY=[], &(0x7f0000000400)) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000580)={[0x4, 0x9, 0x9, 0x7, 0x9, 0x7, 0x38c0, 0x1, 0x20c, 0x0, 0x101, 0x7, 0x8, 0xfffffffffffffbff, 0xfffffffffffffffb, 0x31f], 0x1, 0x2}) accept(r7, 0x0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r7, 0x0, 0x484, &(0x7f0000000440)=""/137, &(0x7f00000003c0)=0x89) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 15:45:13 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x0, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 1492.746857] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 15:45:13 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 1492.846668] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1492.849242] *** Guest State *** [ 1492.879907] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 15:45:13 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x0, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:13 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ea9a0000a927b19900"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 1492.901872] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1492.913156] CR3 = 0x00000000fffbc000 [ 1492.917685] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 1492.924949] RFLAGS=0x00022142 DR7 = 0x0000000000000400 [ 1492.941884] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 15:45:13 executing program 2: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) writev(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)="ee", 0xc}], 0x1) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x559302, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) ioctl$SIOCAX25GETUID(r1, 0x89e0, &(0x7f0000000240)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r3}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f00000000c0)=r6) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x1, 0x0, {0xa, 0x0, 0x0, r9, 0x24080}, [@IFLA_PROTO_DOWN={0x5, 0xa, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) ioctl$SIOCGSTAMP(r10, 0x8906, &(0x7f0000000440)) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in6, @in6=@initdev}}, {{@in6=@ipv4}, 0x0, @in=@dev}}, &(0x7f00000002c0)=0xe8) [ 1492.952676] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1492.985647] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 15:45:13 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x0, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 1493.004826] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1493.020416] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1493.033415] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1493.046442] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 15:45:13 executing program 2: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) writev(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)="ee", 0xc}], 0x1) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x559302, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket(0x10, 0x6, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f00000000c0)=r3) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r4, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000240)={'gre0\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r7}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r8 = socket(0x10, 0x803, 0x0) r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r9, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r9, 0x0, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000280)={@empty, @local, 0x0}, &(0x7f00000002c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000300)={'batadv0\x00', r10}) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in6, @in6=@initdev}}, {{@in6=@ipv4}, 0x0, @in=@dev}}, &(0x7f0000000440)=0xe8) [ 1493.071359] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1493.098890] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 15:45:13 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x0, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 1493.126442] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1493.154511] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 15:45:13 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, 0x0) ioctl$TCGETS2(r3, 0x802c542a, &(0x7f0000000080)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) getresgid(&(0x7f0000000180), &(0x7f00000001c0)=0x0, &(0x7f0000000240)) r7 = socket$kcm(0x29, 0x2, 0x0) close(r7) r8 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r8, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x1}) getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000440)=0x284) setuid(r9) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0xffffff0f00000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x318, 0x0, 0x0, 0x0, 0x1b0, 0x1b0, 0x280, 0x280, 0x280, 0x280, 0x280, 0x3, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0x190, 0x1b0, 0x0, {}, [@common=@inet=@recent0={{0xf8, 'recent\x00'}, {0x0, 0x0, 0x2, 0x0, 'syz1\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x378) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) r13 = msgget$private(0x0, 0x0) msgsnd(r13, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x0) msgrcv(r13, &(0x7f00000000c0)={0x0, ""/147}, 0x9b, 0xd6d0c418f59fe7d3, 0x0) r14 = msgget$private(0x0, 0x0) msgsnd(r14, 0x0, 0x0, 0x0) msgrcv(r14, &(0x7f00000000c0)={0x0, ""/147}, 0x9b, 0xd6d0c418f59fe7d3, 0x0) fsetxattr$system_posix_acl(r7, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000900)=ANY=[@ANYBLOB="0200000001000c00000000000200", @ANYRES32, @ANYBLOB="8cb5037124333ca70efcc21f9e50e48d8db26b81aa63b10a64527b77c1d953", @ANYRES32=r9, @ANYRESHEX, @ANYRES32, @ANYBLOB="bc75dcf8", @ANYRES32, @ANYPTR=0xfffffffffffffffd, @ANYRES32, @ANYBLOB="040003000000000008000000", @ANYRES32, @ANYBLOB="002200eeef8d73d06444ca074bc976ab2461b8d1a9658004af09cd557592c20138caa1b9f86d06461ea1e5b37e97d358b705381b45ce3ab4bb91a4996d8ebcdb31d86aa1f28a39ed2c368f4a0fd123fd1d948f5b2de69da993164aff581b90e5356eac82d3ae30f425c9d9747f476d390e55aa42c756de87d3850717a49f107ea5216ab50d6e805e1a33ac03b32025bba65e81", @ANYRES32=r11, @ANYBLOB="08000601", @ANYBLOB="080004", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYBLOB="9e146c82399e3e53c06e319c5feea15a7bd01ea19b40955de5b5de3f8800e4f7f4c0e91976e20fda20818053502903632b8a1c072695e150a72530258e239ec7b20ebde0cf91623ef4a3ceac", @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYPTR64=&(0x7f0000000b40)=ANY=[@ANYRESDEC=r10], @ANYPTR64=&(0x7f0000000480)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYRESOCT=r13, @ANYRES32=r14, @ANYPTR, @ANYPTR], @ANYPTR], @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="02000000", @ANYRES32, @ANYBLOB], 0x19, 0x0) r15 = getegid() lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r17 = socket$kcm(0x29, 0x2, 0x0) close(r17) r18 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r18, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) ioctl$KVM_CREATE_DEVICE(r18, 0xc00caee0, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x1}) getsockopt$inet6_IPV6_XFRM_POLICY(r18, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000440)=0x284) setuid(r19) r20 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r20, 0xffffff0f00000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x318, 0x0, 0x0, 0x0, 0x1b0, 0x1b0, 0x280, 0x280, 0x280, 0x280, 0x280, 0x3, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0x190, 0x1b0, 0x0, {}, [@common=@inet=@recent0={{0xf8, 'recent\x00'}, {0x0, 0x0, 0x2, 0x0, 'syz1\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x378) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) r23 = msgget$private(0x0, 0x0) msgsnd(r23, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x0) msgrcv(r23, &(0x7f00000000c0)={0x0, ""/147}, 0x9b, 0xd6d0c418f59fe7d3, 0x0) r24 = msgget$private(0x0, 0x0) msgsnd(r24, 0x0, 0x0, 0x0) msgrcv(r24, &(0x7f00000000c0)={0x0, ""/147}, 0x9b, 0xd6d0c418f59fe7d3, 0x0) fsetxattr$system_posix_acl(r17, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000900)=ANY=[@ANYBLOB="0200000001000c00000000000200", @ANYRES32, @ANYBLOB="8cb5037124333ca70efcc21f9e50e48d8db26b81aa63b10a64527b77c1d953", @ANYRES32=r19, @ANYRESHEX, @ANYRES32, @ANYBLOB="bc75dcf8", @ANYRES32, @ANYPTR=0xfffffffffffffffd, @ANYRES32, @ANYBLOB="040003000000000008000000", @ANYRES32, @ANYBLOB="002200eeef8d73d06444ca074bc976ab2461b8d1a9658004af09cd557592c20138caa1b9f86d06461ea1e5b37e97d358b705381b45ce3ab4bb91a4996d8ebcdb31d86aa1f28a39ed2c368f4a0fd123fd1d948f5b2de69da993164aff581b90e5356eac82d3ae30f425c9d9747f476d390e55aa42c756de87d3850717a49f107ea5216ab50d6e805e1a33ac03b32025bba65e81", @ANYRES32=r21, @ANYBLOB="08000601", @ANYBLOB="080004", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYBLOB="9e146c82399e3e53c06e319c5feea15a7bd01ea19b40955de5b5de3f8800e4f7f4c0e91976e20fda20818053502903632b8a1c072695e150a72530258e239ec7b20ebde0cf91623ef4a3ceac", @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYPTR64=&(0x7f0000000b40)=ANY=[@ANYRESDEC=r20], @ANYPTR64=&(0x7f0000000480)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYRESOCT=r23, @ANYRES32=r24, @ANYPTR, @ANYPTR], @ANYPTR], @ANYBLOB="08000100", @ANYRES32=r22, @ANYBLOB="02000000", @ANYRES32, @ANYBLOB], 0x19, 0x0) r25 = socket$kcm(0x29, 0x2, 0x0) close(r25) r26 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r26, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) ioctl$KVM_CREATE_DEVICE(r26, 0xc00caee0, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x1}) getsockopt$inet6_IPV6_XFRM_POLICY(r26, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000440)=0x284) setuid(r27) r28 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r28, 0xffffff0f00000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x318, 0x0, 0x0, 0x0, 0x1b0, 0x1b0, 0x280, 0x280, 0x280, 0x280, 0x280, 0x3, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0x190, 0x1b0, 0x0, {}, [@common=@inet=@recent0={{0xf8, 'recent\x00'}, {0x0, 0x0, 0x2, 0x0, 'syz1\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x378) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) r31 = msgget$private(0x0, 0x0) msgsnd(r31, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x0) msgrcv(r31, &(0x7f00000000c0)={0x0, ""/147}, 0x9b, 0xd6d0c418f59fe7d3, 0x0) r32 = msgget$private(0x0, 0x0) msgsnd(r32, 0x0, 0x0, 0x0) msgrcv(r32, &(0x7f00000000c0)={0x0, ""/147}, 0x9b, 0xd6d0c418f59fe7d3, 0x0) fsetxattr$system_posix_acl(r25, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000900)=ANY=[@ANYBLOB="0200000001000c00000000000200", @ANYRES32, @ANYBLOB="8cb5037124333ca70efcc21f9e50e48d8db26b81aa63b10a64527b77c1d953", @ANYRES32=r27, @ANYRESHEX, @ANYRES32, @ANYBLOB="bc75dcf8", @ANYRES32, @ANYPTR=0xfffffffffffffffd, @ANYRES32, @ANYBLOB="040003000000000008000000", @ANYRES32, @ANYBLOB="002200eeef8d73d06444ca074bc976ab2461b8d1a9658004af09cd557592c20138caa1b9f86d06461ea1e5b37e97d358b705381b45ce3ab4bb91a4996d8ebcdb31d86aa1f28a39ed2c368f4a0fd123fd1d948f5b2de69da993164aff581b90e5356eac82d3ae30f425c9d9747f476d390e55aa42c756de87d3850717a49f107ea5216ab50d6e805e1a33ac03b32025bba65e81", @ANYRES32=r29, @ANYBLOB="08000601", @ANYBLOB="080004", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYBLOB="9e146c82399e3e53c06e319c5feea15a7bd01ea19b40955de5b5de3f8800e4f7f4c0e91976e20fda20818053502903632b8a1c072695e150a72530258e239ec7b20ebde0cf91623ef4a3ceac", @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYPTR64=&(0x7f0000000b40)=ANY=[@ANYRESDEC=r28], @ANYPTR64=&(0x7f0000000480)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYRESOCT=r31, @ANYRES32=r32, @ANYPTR, @ANYPTR], @ANYPTR], @ANYBLOB="08000100", @ANYRES32=r30, @ANYBLOB="02000000", @ANYRES32, @ANYBLOB], 0x19, 0x0) getgroups(0x6, &(0x7f0000000380)=[r6, r11, r15, r16, r22, r30]) [ 1493.194569] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1493.204641] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1493.224839] Interruptibility = 00000000 ActivityState = 00000000 [ 1493.232453] *** Host State *** [ 1493.234831] selinux_nlmsg_perm: 260 callbacks suppressed [ 1493.234841] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=25276 comm=syz-executor.3 [ 1493.236067] RIP = 0xffffffff8117a4e0 RSP = 0xffff8880a9497998 [ 1493.244852] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=25276 comm=syz-executor.3 [ 1493.255448] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1493.266024] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=25276 comm=syz-executor.3 [ 1493.275173] FSBase=00007fc3fc826700 GSBase=ffff8880aed00000 TRBase=fffffe0000003000 [ 1493.287262] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 1493.312808] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=25276 comm=syz-executor.3 [ 1493.321577] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 1493.330793] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=25276 comm=syz-executor.3 [ 1493.334131] CR0=0000000080050033 CR3=00000000a6646000 CR4=00000000001426e0 [ 1493.351212] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=25276 comm=syz-executor.3 [ 1493.354582] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff868018e0 [ 1493.377505] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=25276 comm=syz-executor.3 [ 1493.384793] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1493.395368] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=25276 comm=syz-executor.3 [ 1493.397349] *** Control State *** [ 1493.414014] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000e2 [ 1493.414748] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=25276 comm=syz-executor.3 [ 1493.422680] EntryControls=0000d1ff ExitControls=002fefff [ 1493.441463] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1493.450299] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=25276 comm=syz-executor.3 [ 1493.452906] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1493.471679] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1493.479017] reason=80000021 qualification=0000000000000000 [ 1493.489857] IDTVectoring: info=00000000 errcode=00000000 [ 1493.490338] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 1493.496322] TSC Offset = 0xfffffcddae1479f5 [ 1493.510271] EPT pointer = 0x0000000098ada01e [ 1493.528930] Virtual processor ID = 0x0002 [ 1493.538805] *** Guest State *** [ 1493.547465] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1493.557638] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1493.572001] CR3 = 0x00000000fffbc000 [ 1493.575908] *** Guest State *** [ 1493.575988] RSP = 0x00000000000004cb RIP = 0x0000000000000000 [ 1493.579217] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1493.579229] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1493.579234] CR3 = 0x00000000fffbc000 [ 1493.579240] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 1493.579248] RFLAGS=0x00022142 DR7 = 0x0000000000000400 [ 1493.579259] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1493.588203] RFLAGS=0x00022142 DR7 = 0x0000000000000400 [ 1493.596374] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1493.612361] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1493.616049] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1493.627006] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 1493.628769] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1493.635254] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1493.643341] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1493.653561] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1493.657822] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1493.667190] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1493.675546] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1493.705347] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1493.709407] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1493.719720] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1493.724872] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1493.737847] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1493.741300] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1493.768868] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1493.777986] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1493.782129] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1493.794079] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1493.798637] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1493.804663] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1493.819905] Interruptibility = 00000000 ActivityState = 00000000 [ 1493.822202] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1493.826538] *** Host State *** [ 1493.838519] RIP = 0xffffffff8117a4e0 RSP = 0xffff8880a9497998 [ 1493.839499] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1493.844815] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1493.851426] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1493.863468] FSBase=00007fc3fc826700 GSBase=ffff8880aec00000 TRBase=fffffe0000003000 [ 1493.865645] Interruptibility = 00000000 ActivityState = 00000000 [ 1493.878236] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 1493.879541] *** Host State *** [ 1493.885679] CR0=0000000080050033 CR3=00000000a6646000 CR4=00000000001426f0 [ 1493.888822] RIP = 0xffffffff8117a4e0 RSP = 0xffff8880829a7998 [ 1493.896004] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff868018e0 [ 1493.902611] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1493.912844] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1493.915820] FSBase=00007f8194ac4700 GSBase=ffff8880aed00000 TRBase=fffffe0000034000 [ 1493.925480] *** Control State *** [ 1493.929585] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 1493.933378] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000e2 [ 1493.939252] CR0=0000000080050033 CR3=00000000828a2000 CR4=00000000001426e0 [ 1493.950874] EntryControls=0000d1ff ExitControls=002fefff [ 1493.953570] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff868018e0 [ 1493.958778] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1493.969698] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1493.973879] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1493.978844] *** Control State *** [ 1493.985775] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1493.993358] PinBased=0000003f CPUBased=b6a1edfa SecondaryExec=000000e3 [ 1493.996171] reason=80000021 qualification=0000000000000000 [ 1494.002821] EntryControls=0000d1ff ExitControls=002fefff [ 1494.009249] IDTVectoring: info=00000000 errcode=00000000 [ 1494.018944] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1494.020910] TSC Offset = 0xfffffcdd477bde58 [ 1494.028110] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1494.032284] EPT pointer = 0x000000009934401e [ 1494.044509] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1494.052250] reason=80000021 qualification=0000000000000000 [ 1494.057571] Virtual processor ID = 0x0002 [ 1494.059479] IDTVectoring: info=00000000 errcode=00000000 [ 1494.079190] TSC Offset = 0xfffffcdd4edc8917 [ 1494.086012] TPR Threshold = 0x00 [ 1494.089715] EPT pointer = 0x0000000090d6401e [ 1494.098203] Virtual processor ID = 0x0003 15:45:14 executing program 2: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) writev(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)="ee", 0xc}], 0x1) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x559302, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') r1 = semget(0x3, 0x2, 0x2) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000240)=[0x3, 0x29, 0x401, 0x4, 0x80, 0xfffd, 0x0, 0xffff, 0x9]) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f00000000c0)=r4) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r7}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in6, @in6=@initdev}}, {{@in6=@ipv4}, 0x0, @in=@dev}}, &(0x7f0000000440)=0xe8) 15:45:14 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x0, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:14 executing program 0: futex(&(0x7f000000cffc), 0x180, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x80002, 0x0) r0 = socket(0xf, 0x2, 0x80) ioctl(r0, 0x100000891a, &(0x7f00000005c0)="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") futex(&(0x7f000000cffc), 0x85, 0x0, 0x0, &(0x7f0000048000), 0x5000000) 15:45:14 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x6, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000002c0)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000500500003803000038030000000000000000000018020000800400008004000080040000800400008004000004000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000b6735ee9958047ff00"/64], @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00118020000000000000000000000000000000000000000000000003801727400000000000000000000000000000000000000000000000000000000ff070000ff010000060000000100010002050000fe8000000000000000000000000000bbff020000000000000000000000000001ff010000000000000000000000000001ff020000000000000000000000000001ff02000000000000000000000000000100000000000000000000ffff0000000200000000000000000000ffffac1414aafe8800000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000001fe88000000000000000000000000010100000000000000000000000000000001ff020000000000000000000000000001ff0100000000000000000000000000010a0000003800534554000000000000000000000000000000000000000000000000000003020004040100050303000001020000000700000000000000fe8000000000000000000000000000bbff010000000000000000000000000001ffffff00ff000000ff000000ffffff00ff0000000000000000000000ffffff006970365f7674693000000000000000007665746831000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000670000042200000000000000f800200100000000000000000000000000000000000000000000000028006575693634000000000000000000000000000000000000000000000000000000000000000000280065756936340000000000000000000000000000000000000000000000000000000000000000002800434f4e4e5345434d41524b0000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d80048010000000000000000000000000000000000000000000000003000636c7573746572000000000000000000000000000000000000000000000000f0ffff81000000000400000100000070004e464c4f47000000000000000000000000000000000000000000000000003f00000000800400010000003e0ad922f38cc106b4f9d6f817872a05c44001ea6b6f0d8cc791185434f768c8d6644d5c4252a4aa8e1e087e0b1dd5d250aa0e9cb85543c5577886ed27ef16c8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x5b0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000880)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, 0x0) accept$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000840)=0x1c) write$uinput_user_dev(r3, &(0x7f00000003c0)={'syz0\x00', {0x7, 0x5, 0x4, 0x248}, 0x55, [0x0, 0xc00, 0x7b, 0x7fffffff, 0xda8, 0x8001, 0x8001, 0x6, 0x3, 0x5, 0x80, 0x5, 0x1, 0x0, 0x7ff, 0x9, 0x0, 0x5, 0x5496, 0x81, 0x3, 0x0, 0x4, 0x8, 0x0, 0x0, 0x5, 0x1f, 0x4, 0x7, 0x5, 0x0, 0x9, 0x20, 0x0, 0x22a7, 0x0, 0x2, 0x0, 0x4, 0x80000001, 0x9, 0x306e, 0x0, 0x7, 0x4, 0xfffffffe, 0xe8ef, 0x5, 0x6, 0x81, 0x401, 0x9, 0x9, 0x9, 0x114, 0x5, 0x0, 0x0, 0x9, 0x0, 0xffffff4c, 0x401], [0x0, 0x0, 0x7, 0x1, 0x8, 0xfe0c, 0x1, 0x7fff, 0x1faa7c2c, 0x2, 0x200, 0x40, 0x5, 0x5, 0x0, 0x3, 0x6, 0x7, 0xffffffff, 0x3, 0x1, 0xfffffffd, 0x4, 0x6b88, 0x8, 0x20, 0x8, 0x3, 0x10001, 0x10000, 0xb3d8, 0x0, 0x4000, 0xffffffe1, 0x3, 0x2, 0x2954, 0x8, 0x6045, 0xffffff4f, 0x8, 0x1, 0x4, 0x80000000, 0x1, 0xffffe16d, 0x2, 0xa8f, 0x2, 0x101, 0x4, 0x8, 0x1, 0x7, 0x100, 0x5, 0x6, 0x8000, 0x7, 0x8, 0x8001, 0x5fa3, 0x7, 0x5e], [0xffffffff, 0x9, 0xfffffffd, 0x26bc, 0x800, 0xffff7fff, 0x80, 0x7f, 0x892, 0x0, 0x0, 0x2, 0x9, 0x1ff, 0x10001, 0x9, 0x6, 0x8, 0x10001, 0x4, 0x3, 0x8aeb, 0xffffffff, 0x7, 0x80000000, 0x20, 0x1000, 0x23, 0x7, 0x101, 0x1, 0x10001, 0x8, 0x0, 0x4, 0x80000001, 0xc8, 0xfffff536, 0x736fd575, 0x1, 0x5, 0x7fff, 0x1, 0x0, 0x0, 0x1, 0x4, 0xa170, 0xe5, 0x27d4ff6c, 0x0, 0x3ff, 0xb2, 0x1ff, 0x8a, 0x3, 0x78, 0x1, 0x1d, 0x7f, 0x6, 0x7fc8a33f, 0x910, 0x1f], [0x5c, 0x7f, 0x7ff, 0xc4, 0x7fff, 0x7, 0x8, 0x81, 0x0, 0xfffffc00, 0x6, 0x5, 0x3, 0x0, 0x7, 0x0, 0x10000, 0xd1d, 0x80, 0x7fff, 0x800, 0x5e58, 0xffff019b, 0x8, 0x7, 0x4, 0x0, 0x0, 0x1, 0x2, 0x5, 0x80, 0xfff, 0x10001, 0x9, 0x0, 0x9, 0x401, 0xede8, 0x5, 0x10f, 0x1f, 0xffffffff, 0x2, 0x1f, 0x2, 0x9, 0x2, 0x3, 0x0, 0x8, 0x1, 0x6, 0x1, 0xfffffff8, 0x1, 0x8, 0xffff, 0x6, 0x1ffc00, 0x8, 0x0, 0x0, 0x6]}, 0x45c) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000900)={0x5, 0x80000001, 0x3f, 0x0, 0x2}, 0x14) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x22140}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r5, &(0x7f0000000180)='.//ile0\x00', r5, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$LOOP_GET_STATUS64(r5, 0x4c05, &(0x7f0000000280)) connect$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) 15:45:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x22140}) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000), 0x4) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x101282, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 15:45:15 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x0, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:15 executing program 2: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) writev(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)="ee", 0xc}], 0x1) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x559302, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f00000005c0)={'filter\x00', 0x0, 0x3, 0x78, [], 0x5, &(0x7f0000000480)=[{}, {}, {}, {}, {}], &(0x7f0000000500)=""/120}, &(0x7f0000000300)=0x78) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f00000000c0)=r5) r6 = socket$netlink(0x10, 0x3, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x4, 0x70, 0x2, 0x1f, 0x8, 0xff, 0x0, 0xe9, 0x38041, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x10001, 0x0, @perf_bp={&(0x7f0000000240), 0x9}, 0x410, 0x3, 0x10000, 0x4, 0x1, 0x1, 0x2}, r1, 0x2, 0xffffffffffffffff, 0x8) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800e2ff0f00250800000000000080000a002000", @ANYRES32=r8, @ANYBLOB="000000000000000008000a000f000000"], 0x28}}, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in6, @in6=@initdev}}, {{@in6=@ipv4}, 0x0, @in=@dev}}, &(0x7f0000000440)=0xe8) 15:45:15 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 1494.459839] *** Guest State *** [ 1494.479580] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1494.500835] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 15:45:15 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:15 executing program 2: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) writev(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)="ee", 0xc}], 0x1) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x559302, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f00000000c0)=r3) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$netlink(0x10, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in6, @in6=@initdev}}, {{@in6=@ipv4}, 0x0, @in=@dev}}, &(0x7f0000000440)=0xe8) [ 1494.510227] CR3 = 0x00000000fffbc000 [ 1494.514034] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 1494.521624] RFLAGS=0x00022142 DR7 = 0x0000000000000400 [ 1494.534409] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1494.551165] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1494.560914] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1494.569145] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1494.583720] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1494.599873] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 15:45:15 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 1494.616724] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1494.627127] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1494.651544] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1494.659774] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1494.673628] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1494.689856] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1494.703591] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1494.719446] Interruptibility = 00000000 ActivityState = 00000000 [ 1494.733090] *** Host State *** [ 1494.739760] RIP = 0xffffffff8117a4e0 RSP = 0xffff88803f4d7998 [ 1494.750291] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 15:45:15 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:15 executing program 2: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) writev(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)="ee", 0xc}], 0x1) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x559302, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f00000000c0)=r3) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r7, 0x6, 0x21, &(0x7f0000000240)="9e26855e2f3c49cb3541d0e53f0189b7", 0x10) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000410800000022953492000a000000", @ANYRES32=r6, @ANYBLOB="000000000000000008000a000f000000"], 0x28}}, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in6, @in6=@initdev}}, {{@in6=@ipv4}, 0x0, @in=@dev}}, &(0x7f0000000440)=0xe8) [ 1494.778080] FSBase=00007fc3fc826700 GSBase=ffff8880aed00000 TRBase=fffffe0000034000 [ 1494.789249] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 1494.803426] CR0=0000000080050033 CR3=00000000a5434000 CR4=00000000001426e0 [ 1494.816104] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff868018e0 [ 1494.828528] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1494.846389] *** Control State *** [ 1494.853226] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000e2 [ 1494.879449] EntryControls=0000d1ff ExitControls=002fefff [ 1494.902693] *** Guest State *** [ 1494.906218] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1494.906685] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1494.928276] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1494.935661] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1494.937614] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1494.947811] reason=80000021 qualification=0000000000000000 [ 1494.953860] CR3 = 0x00000000fffbc000 [ 1494.953892] RSP = 0x00000000000004cb RIP = 0x0000000000000000 [ 1494.953927] RFLAGS=0x00022142 DR7 = 0x0000000000000400 [ 1494.953979] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1494.954014] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1494.954047] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1494.954078] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1494.954132] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1494.954162] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1494.954250] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1494.954277] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1494.954417] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1494.954466] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1494.955249] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1494.955277] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1494.955398] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1494.955431] Interruptibility = 00000000 ActivityState = 00000000 [ 1494.955455] *** Host State *** [ 1494.955498] RIP = 0xffffffff8117a4e0 RSP = 0xffff8880829a7998 [ 1494.955653] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1494.955676] FSBase=00007f8194ae5700 GSBase=ffff8880aec00000 TRBase=fffffe0000003000 [ 1494.956071] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 1494.956155] CR0=0000000080050033 CR3=0000000045a47000 CR4=00000000001426f0 [ 1494.956273] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff868018e0 [ 1494.956338] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1494.956363] *** Control State *** [ 1494.956391] PinBased=0000003f CPUBased=b6a1edfa SecondaryExec=000000e3 [ 1494.956421] EntryControls=0000d1ff ExitControls=002fefff [ 1494.956543] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1494.957259] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1494.957281] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1494.957292] reason=80000021 qualification=0000000000000000 [ 1494.957322] IDTVectoring: info=00000000 errcode=00000000 [ 1494.957407] TSC Offset = 0xfffffcdcac037069 [ 1494.957474] TPR Threshold = 0x00 [ 1494.957576] EPT pointer = 0x000000005966601e [ 1494.957609] Virtual processor ID = 0x0003 [ 1495.086652] *** Guest State *** [ 1495.093790] IDTVectoring: info=00000000 errcode=00000000 [ 1495.099276] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1495.106191] TSC Offset = 0xfffffcdcd0eae403 [ 1495.115849] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 15:45:15 executing program 0: futex(&(0x7f000000cffc), 0x180, 0x0, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f0000000140)='./file0\x00', 0x8, 0x5) r0 = socket(0x10, 0x80002, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x5c, 0x2, 0x9, 0x605, 0x0, 0x0, {0xc, 0x0, 0x8}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFCTH_STATUS={0x8}, @NFCTH_TUPLE={0x38, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, {0x14, 0x4, @loopback}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40080c0}, 0x1) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") futex(&(0x7f000000cffc), 0x85, 0x0, 0x0, &(0x7f0000048000), 0x5000000) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r1, 0x0, 0x0) recvfrom$llc(r1, &(0x7f0000000280)=""/172, 0xac, 0x12160, 0x0, 0x0) 15:45:15 executing program 3: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000740)='/dev/dlm_plock\x00', 0x81, 0x0) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000780)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000600)={&(0x7f0000000240)='./file0\x00', 0x0, 0x8}, 0x10) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r3, 0x0, 0x0) r4 = accept4$rose(0xffffffffffffffff, &(0x7f0000000940)=@short={0xb, @remote, @null, 0x1, @netrom}, &(0x7f0000000980)=0x1c, 0x0) write$binfmt_elf64(r4, &(0x7f0000000840)=ANY=[@ANYRESDEC, @ANYRESDEC=r3, @ANYRESDEC=r3], 0x3c) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r5, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f00) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f0000000340), 0x41395527) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0)='NLBL_UNLBL\x00') r8 = getpid() sched_setattr(r8, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r6, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="d974004000", @ANYRES16=r7, @ANYRESDEC=r8], 0x3}, 0x1, 0x0, 0x0, 0x4008040}, 0x40015) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r5, &(0x7f0000000700)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000010}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x50, r7, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'hsr0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_virt_wifi\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x4) close(r2) socket(0x10, 0x3, 0x4) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f00000002c0)={0x0, 0x0, 0xa, 0x0, [], [{0x6, 0x6, 0x6, 0x4, 0x5, 0xff}, {0x3c, 0x34071bf, 0x0, 0x9, 0x100000001, 0xc33}], [[], [], [], [], [], [], [], [], [], []]}) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) splice(r10, 0x0, r2, 0x0, 0xc0000001, 0xd) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)) [ 1495.128377] EPT pointer = 0x0000000085dda01e [ 1495.139792] CR3 = 0x00000000fffbc000 [ 1495.147624] Virtual processor ID = 0x0002 [ 1495.166194] RSP = 0x00000000000004cb RIP = 0x0000000000000000 [ 1495.283506] RFLAGS=0x00022142 DR7 = 0x0000000000000400 [ 1495.289712] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1495.305897] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1495.325424] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1495.329089] *** Guest State *** [ 1495.338975] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1495.340539] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1495.347751] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1495.357175] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1495.369341] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1495.375981] CR3 = 0x00000000fffbc000 [ 1495.382989] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1495.383000] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1495.383014] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1495.383024] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1495.383038] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1495.383046] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1495.383056] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1495.383063] Interruptibility = 00000000 ActivityState = 00000000 [ 1495.383067] *** Host State *** [ 1495.383076] RIP = 0xffffffff8117a4e0 RSP = 0xffff8880829a7998 [ 1495.383094] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1495.383102] FSBase=00007f8194ae5700 GSBase=ffff8880aec00000 TRBase=fffffe0000003000 [ 1495.383111] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 1495.383122] CR0=0000000080050033 CR3=0000000045a47000 CR4=00000000001426f0 [ 1495.383133] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff868018e0 [ 1495.383142] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1495.383145] *** Control State *** [ 1495.387447] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 1495.400578] PinBased=0000003f CPUBased=b6a1edfa SecondaryExec=000000e3 [ 1495.412150] RFLAGS=0x00022142 DR7 = 0x0000000000000400 [ 1495.425756] EntryControls=0000d1ff ExitControls=002fefff [ 1495.442918] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1495.449066] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1495.452277] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1495.462744] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1495.469043] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1495.479231] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1495.486290] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1495.493041] reason=80000021 qualification=0000000000000000 [ 1495.498967] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1495.498985] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1495.507440] IDTVectoring: info=00000000 errcode=00000000 15:45:16 executing program 2: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) writev(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)="ee", 0xc}], 0x1) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x559302, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f00000000c0)=r4) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r7}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) ioperm(0x9, 0x6, 0x1) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$netlink(0x10, 0x3, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) getpeername$inet6(r9, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000002c0)=0x1c) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000240)={0x0, 0xf, 0x0, 0xff, "ad6beb2c908008cca46cb7779a312c16803e9228d4393b9d06e4b1bcd9557083"}) syz_mount_image$ocfs2(&(0x7f0000000300)='ocfs2\x00', &(0x7f0000000480)='./file0\x00', 0x4, 0x1, &(0x7f0000000540)=[{&(0x7f00000004c0)="e89515966ee05227e6ee2d7bf6152bdf041d0ea515306c8cc83099800315a0d5981636a8382ede95aca72e85047e148fb61fc1554e97a3fb682435aa4285f0300435050eba112796a4a0c0e268db0ae5543df408b04bb0985f6a60e138a6c705d6a3914555953eaf98115861315f", 0x6e, 0x1}], 0x122818, &(0x7f00000005c0)='/dev/nvme-fabrics\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in6, @in6=@initdev}}, {{@in6=@ipv4}, 0x0, @in=@dev}}, &(0x7f0000000440)=0xe8) [ 1495.508810] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1495.515909] TSC Offset = 0xfffffcdc7958093c [ 1495.523186] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1495.532583] TPR Threshold = 0x00 [ 1495.534774] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1495.541510] EPT pointer = 0x0000000093eb401e [ 1495.553595] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1495.556268] Virtual processor ID = 0x0003 [ 1495.564332] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1495.664089] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1495.671218] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1495.678827] Interruptibility = 00000000 ActivityState = 00000000 [ 1495.685323] *** Host State *** [ 1495.689363] RIP = 0xffffffff8117a4e0 RSP = 0xffff88803f4d7998 [ 1495.695577] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1495.702272] FSBase=00007fc3fc826700 GSBase=ffff8880aed00000 TRBase=fffffe0000034000 [ 1495.710292] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 1495.723935] CR0=0000000080050033 CR3=00000000a5434000 CR4=00000000001426e0 [ 1495.734082] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff868018e0 [ 1495.747269] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1495.753579] *** Control State *** [ 1495.757036] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000e2 [ 1495.764156] EntryControls=0000d1ff ExitControls=002fefff [ 1495.769661] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1495.777590] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1495.788329] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1495.799604] reason=80000021 qualification=0000000000000000 15:45:16 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000540)=ANY=[], &(0x7f0000000400)) mmap$usbmon(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x8, 0x10, r1, 0x3) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, 0x0) write$uinput_user_dev(r4, &(0x7f00000003c0)={'syz0\x00', {0x7, 0x5, 0x4, 0x248}, 0x55, [0x0, 0xc00, 0x7b, 0x7fffffff, 0xda8, 0x8001, 0x8001, 0x6, 0x3, 0x5, 0x80, 0x5, 0x1, 0x0, 0x7ff, 0x9, 0x0, 0x5, 0x5496, 0x81, 0x3, 0x0, 0x4, 0x8, 0x0, 0x0, 0x5, 0x1f, 0x4, 0x7, 0x5, 0x0, 0x9, 0x20, 0x0, 0x22a7, 0x0, 0x2, 0x0, 0x4, 0x80000001, 0x9, 0x306e, 0x0, 0x7, 0x4, 0xfffffffe, 0xe8ef, 0x5, 0x6, 0x81, 0x401, 0x9, 0x9, 0x9, 0x114, 0x5, 0x0, 0x0, 0x9, 0x0, 0xffffff4c, 0x401], [0x0, 0x0, 0x7, 0x1, 0x8, 0xfe0c, 0x1, 0x7fff, 0x1faa7c2c, 0x2, 0x200, 0x40, 0x5, 0x5, 0x0, 0x3, 0x6, 0x7, 0xffffffff, 0x3, 0x1, 0xfffffffd, 0x4, 0x6b88, 0x8, 0x20, 0x8, 0x3, 0x10001, 0x10000, 0xb3d8, 0x0, 0x4000, 0xffffffe1, 0x3, 0x2, 0x2954, 0x8, 0x6045, 0xffffff4f, 0x8, 0x1, 0x4, 0x80000000, 0x1, 0xffffe16d, 0x2, 0xa8f, 0x2, 0x101, 0x4, 0x8, 0x1, 0x7, 0x100, 0x5, 0x6, 0x8000, 0x7, 0x8, 0x8001, 0x5fa3, 0x7, 0x5e], [0xffffffff, 0x9, 0xfffffffd, 0x26bc, 0x800, 0xffff7fff, 0x80, 0x7f, 0x892, 0x0, 0x0, 0x2, 0x9, 0x1ff, 0x10001, 0x9, 0x6, 0x8, 0x10001, 0x4, 0x3, 0x8aeb, 0xffffffff, 0x7, 0x80000000, 0x20, 0x1000, 0x23, 0x7, 0x101, 0x1, 0x10001, 0x8, 0x0, 0x4, 0x80000001, 0xc8, 0xfffff536, 0x736fd575, 0x1, 0x5, 0x7fff, 0x1, 0x0, 0x0, 0x1, 0x4, 0xa170, 0xe5, 0x27d4ff6c, 0x0, 0x3ff, 0xb2, 0x1ff, 0x8a, 0x3, 0x78, 0x1, 0x1d, 0x7f, 0x6, 0x7fc8a33f, 0x910, 0x1f], [0x5c, 0x7f, 0x7ff, 0xc4, 0x7fff, 0x7, 0x8, 0x81, 0x0, 0xfffffc00, 0x6, 0x5, 0x3, 0x0, 0x7, 0x0, 0x10000, 0xd1d, 0x80, 0x7fff, 0x800, 0x5e58, 0xffff019b, 0x8, 0x7, 0x4, 0x0, 0x0, 0x1, 0x2, 0x5, 0x80, 0xfff, 0x10001, 0x9, 0x0, 0x9, 0x401, 0xede8, 0x5, 0x10f, 0x1f, 0xffffffff, 0x2, 0x1f, 0x2, 0x9, 0x2, 0x3, 0x0, 0x8, 0x1, 0x6, 0x1, 0xfffffff8, 0x1, 0x8, 0xffff, 0x6, 0x1ffc00, 0x8, 0x0, 0x0, 0x6]}, 0x45c) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x22140}) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$KVM_RUN(r5, 0xae80, 0x0) r7 = shmget(0x1, 0x4000, 0x100, &(0x7f0000000000/0x4000)=nil) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000000080)=0xe8) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r10) statx(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x7800, 0x1, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = fcntl$getown(r6, 0x9) r13 = getpid() sched_setattr(r13, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) shmctl$IPC_SET(r7, 0x1, &(0x7f0000000940)={{0x0, r8, 0xee00, r10, r11, 0x10, 0x6}, 0x7, 0x1, 0x0, 0x7fff, r12, r13, 0xbc9}) connect$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) 15:45:16 executing program 2: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x1, @loopback, 0x5}, 0x1c) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000240)={0x0, 'veth1_virt_wifi\x00', {0x1}, 0x5}) writev(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)="ee", 0xc}], 0x1) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x559302, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f00000000c0)=r3) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r6, @ANYBLOB="000000000000000008000a000f00000012298d1cb5b2e827abac93be8dc122451bbaedcbce45c35d2a262b0c0e15446f9a53630472bd19e588a14ff58713e8b39b79b452191a6aacbeb222a0f3999398c5ff7eb610e0f8f96c0aefcc2fb752547a89dad9726b99a67eaabe179b2565970e53ebedf36aa6ccafeb748d00c277"], 0x28}}, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$netlink(0x10, 0x3, 0x0) r8 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r8, &(0x7f0000000180)='.//ile0\x00', r8, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$TUNSETOFFLOAD(r8, 0x400454d0, 0x1e) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in6, @in6=@initdev}}, {{@in6=@ipv4}, 0x0, @in=@dev}}, &(0x7f0000000440)=0xe8) [ 1495.808807] IDTVectoring: info=00000000 errcode=00000000 [ 1495.814622] TSC Offset = 0xfffffcdc59868ab1 [ 1495.818970] EPT pointer = 0x000000005553501e [ 1495.823572] Virtual processor ID = 0x0002 15:45:16 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:16 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280), 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:16 executing program 0: futex(&(0x7f000000cffc), 0x180, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000200)={0x9c0000, 0x7, 0xb56, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x9c090a, 0x3ff, [], @p_u32=&(0x7f0000000140)=0x3}}) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r1, 0x80184132, &(0x7f0000000240)) futex(&(0x7f000000cffc), 0x85, 0x0, 0x0, &(0x7f0000048000), 0x5000000) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r3 = add_key$keyring(&(0x7f0000000580)='keyring\x00', &(0x7f00000005c0)={'syz', 0x0}, 0x0, 0x0, r2) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, r3) keyctl$revoke(0x3, r3) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40401, 0x1d) getdents64(r4, &(0x7f0000000040)=""/196, 0xc4) 15:45:16 executing program 2: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r1, 0x0, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f00000000c0)="ee", 0x1}], 0x1) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x559302, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f00000000c0)=r4) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r7}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r8, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r8, 0x0, 0x0) connect(r8, &(0x7f0000000240)=@nl=@unspec, 0x80) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in6, @in6=@initdev}}, {{@in6=@ipv4}, 0x0, @in=@dev}}, &(0x7f0000000440)=0xe8) 15:45:16 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280), 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:17 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="7c289a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x28, r7, 0x23f, 0x0, 0x0, {{}, {0x0, 0xf}, {0xc, 0x14, 'syz0\x00'}}}, 0x28}, 0x1, 0xfffffff0}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r7, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x80000001}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x2004004c) recvmsg$kcm(r4, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f00) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000240)={0x0, 0x3}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000300)={r8, 0xfff9}, 0x8) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) r11 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x36b, 0x240200) ioctl$sock_rose_SIOCADDRT(r11, 0x890b, &(0x7f0000000180)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x927, @bcast, @netrom={'nr', 0x0}, 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @null, @bcast]}) 15:45:17 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280), 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 1496.271539] *** Guest State *** [ 1496.279512] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1496.295551] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1496.306833] CR3 = 0x00000000fffbc000 15:45:17 executing program 2: r0 = socket$kcm(0xa, 0x2, 0x73) r1 = dup2(0xffffffffffffffff, r0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000002c0)={0x0, 0x4, 0x9, 0x1, 0x7, 0x3d12}, &(0x7f0000000300)=0x14) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000480)={r2, 0x5}, 0x8) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) writev(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)="ee", 0xc}], 0x1) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x559302, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f00000000c0)=r6) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r9}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f0000000240)=0x0) write$FUSE_LK(r3, &(0x7f0000000280)={0x28, 0x0, 0x4, {{0xfffffffffffffff8, 0x200, 0x1, r11}}}, 0x28) socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in6, @in6=@initdev}}, {{@in6=@ipv4}, 0x0, @in=@dev}}, &(0x7f0000000440)=0xe8) [ 1496.321412] RSP = 0x00000000000004cb RIP = 0x0000000000000000 [ 1496.332569] RFLAGS=0x00022142 DR7 = 0x0000000000000400 [ 1496.339175] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1496.348880] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 15:45:17 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="3529b3495cfebef35773bfbd88b9b3502673ea13c51e3c0fb870364c681d1d80b61bcaae24bf24658d505c83d337b930716398fee18149791f1a36190ec84b976d4947215823070f58020e38d52b24f7bc43d385bbfc1c9ec55891f3fdf358a339bc86b6be3c62e7717ed9a00e55673808dce97a0ef5be", 0x77}], 0x1) write$binfmt_elf64(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="f0ca9a5cd5ebade227e6cd0423e43cd46d0000a927b18901969b79edbb7579d94720d2357bc9c65fe5dc191166d738c075ec2d0abd84c16e96e925cd6fe4b4d4c32e59c7488a45f1cfd90640bb95df281bb785652077eef4f30b26384344d513c544da8894b740c4a1858037095c6c17956b9badbb814009d64139d492488b18cd43847841577e1cf78661de8760759dbe505116f690ec41e0d3a72bf486bdf314587b0070c76d3d9bac851fb66298b6bd6f776e6088066e8edf9ebc785f53661411169764e2eb"], 0xc7) r3 = epoll_create1(0x0) r4 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x121002) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)) write$RDMA_USER_CM_CMD_JOIN_MCAST(r4, 0x0, 0x0) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:17 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{0x0}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 1496.389459] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1496.419383] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1496.442955] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1496.452400] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1496.463153] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1496.487472] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1496.507225] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1496.518134] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1496.532821] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1496.542874] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1496.551834] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1496.571342] Interruptibility = 00000000 ActivityState = 00000000 [ 1496.585753] *** Host State *** [ 1496.590644] RIP = 0xffffffff8117a4e0 RSP = 0xffff88809f4e7998 [ 1496.598561] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1496.606804] FSBase=00007f8194ae5700 GSBase=ffff8880aec00000 TRBase=fffffe0000003000 [ 1496.616495] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 1496.637967] CR0=0000000080050033 CR3=000000009f48a000 CR4=00000000001426f0 [ 1496.661152] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff868018e0 [ 1496.668117] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1496.687592] *** Control State *** [ 1496.716389] PinBased=0000003f CPUBased=b6a1edfa SecondaryExec=000000e3 [ 1496.725537] EntryControls=0000d1ff ExitControls=002fefff [ 1496.736760] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1496.746891] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1496.758027] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1496.780985] reason=80000021 qualification=0000000000000000 [ 1496.800535] IDTVectoring: info=00000000 errcode=00000000 [ 1496.819844] TSC Offset = 0xfffffcdbdbfb1018 [ 1496.825445] TPR Threshold = 0x00 [ 1496.829410] EPT pointer = 0x00000000a166c01e [ 1496.840886] Virtual processor ID = 0x0002 15:45:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, 0x0) write$uinput_user_dev(r3, &(0x7f00000003c0)={'syz0\x00', {0x7, 0x5, 0x4, 0x248}, 0x55, [0x0, 0xc00, 0x7b, 0x7fffffff, 0xda8, 0x8001, 0x8001, 0x6, 0x3, 0x5, 0x80, 0x5, 0x1, 0x0, 0x7ff, 0x9, 0x0, 0x5, 0x5496, 0x81, 0x3, 0x0, 0x4, 0x8, 0x0, 0x0, 0x5, 0x1f, 0x4, 0x7, 0x5, 0x0, 0x9, 0x20, 0x0, 0x22a7, 0x0, 0x2, 0x0, 0x4, 0x80000001, 0x9, 0x306e, 0x0, 0x7, 0x4, 0xfffffffe, 0xe8ef, 0x5, 0x6, 0x81, 0x401, 0x9, 0x9, 0x9, 0x114, 0x5, 0x0, 0x0, 0x9, 0x0, 0xffffff4c, 0x401], [0x0, 0x0, 0x7, 0x1, 0x8, 0xfe0c, 0x1, 0x7fff, 0x1faa7c2c, 0x2, 0x200, 0x40, 0x5, 0x5, 0x0, 0x3, 0x6, 0x7, 0xffffffff, 0x3, 0x1, 0xfffffffd, 0x4, 0x6b88, 0x8, 0x20, 0x8, 0x3, 0x10001, 0x10000, 0xb3d8, 0x0, 0x4000, 0xffffffe1, 0x2, 0x2, 0x2954, 0x8, 0x6045, 0xffffff4f, 0x8, 0x1, 0x4, 0x80000000, 0x1, 0xffffe16d, 0x2, 0xa8f, 0x2, 0x101, 0x4, 0x8, 0x1, 0x7, 0x100, 0x5, 0x6, 0x8000, 0x7, 0x8, 0x8001, 0x5fa3, 0x7, 0x5e], [0xffffffff, 0x9, 0xfffffffd, 0x26bc, 0x800, 0xffff7fff, 0x80, 0x7f, 0x892, 0x0, 0x0, 0x2, 0x9, 0x1ff, 0x10001, 0x9, 0x6, 0x8, 0x10001, 0xb78, 0x3, 0x8aeb, 0xffffffff, 0xb, 0x80000000, 0x20, 0x1000, 0x23, 0x7, 0x101, 0x1, 0x10001, 0x8, 0x0, 0x4, 0x80000001, 0xc8, 0xfffff536, 0x736fd575, 0x1, 0x5, 0x7fff, 0x1, 0x0, 0x0, 0x1, 0x4, 0xa170, 0xe5, 0x27d4ff6c, 0x0, 0x3ff, 0xb2, 0x1ff, 0x8a, 0x3, 0x78, 0x1, 0x1d, 0x7f, 0x6, 0x7fc8a33f, 0x910, 0x1f], [0x5c, 0x7f, 0x800, 0xc4, 0x7fff, 0x7, 0x8, 0x81, 0x0, 0xfffffc00, 0x6, 0x5, 0x3, 0x0, 0x7, 0x0, 0x10000, 0xd1d, 0x80, 0x7fff, 0x800, 0x5e58, 0xffff019b, 0x8, 0x7, 0x4, 0x0, 0x0, 0x1, 0x2, 0x5, 0x80, 0xfff, 0x10001, 0x9, 0x0, 0x9, 0x401, 0xede8, 0x5, 0x10f, 0x1f, 0xffffffff, 0x2, 0x1f, 0x2, 0x9, 0x2, 0x3, 0x0, 0x8, 0x1, 0x6, 0x1, 0xfffffff8, 0x1, 0x8, 0xffff, 0x6, 0x1ffc00, 0x8, 0x0, 0x0, 0x6]}, 0x45c) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x22140}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) 15:45:18 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{0x0}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:18 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r3, 0x0, 0x0) fsetxattr$trusted_overlay_upper(r3, &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f00000002c0)={0x0, 0xfb, 0x10e, 0x6, 0xf9, "e7e93659886289f1cb88b40dc5fb7dbd", "caf55bdb144b83f5424994274d8beca132357bfa0444443ed2e4006f860fe53408ca06d1d40bd655ad3da51c47f60dd65e8d4cd9f7a2c7dbed84fe0b6ddacc14823d37130403d78deecbc98d8cd384a596cf889171e2eb83d9c26fb0753526e718bfe52fdea4490f2a002a561cf275891c8f9edcb97a0616001c0f78b3aa63625c6c7e301f1d909d441641c312a83ad9a58c5a7caa496feb32ea9d0a61dc881b8a7d176c4f6d8c9e5942ca740f59d0e1c0b2ab135775cabe32c5b9d86bec94356b45d077f8d14792c7e7ee79f252cbe9c5bbdc19372da8d0fad5c4bab791ab6312f736214e500a6e74f00911a627a3acd3c186c5ad3e0e46eb"}, 0x10e, 0x2) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:18 executing program 2: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) writev(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)="ee", 0xc}], 0x1) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x559302, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f00000000c0)=r3) r4 = socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair(0x1e, 0x80000, 0x6, &(0x7f0000000140)={0x0, 0x0}) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000940)) recvmsg$kcm(r5, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f00) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f00000009c0)={0x2b0, r6, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x11c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb95}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffe30c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x94}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x4, @remote, 0x40}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}]}, @TIPC_NLA_MEDIA={0xfc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x82}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9a6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xefcd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x437e32ea}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}]}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}]}]}, 0x2b0}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6ed831bd59f6280000e50f00250800000000000000000a000000aea78bfef6dd354fe0ff74a360b9c1dc32ebd605000000ba470e5f0117eaeb70d71a064db6822a63e71e5c2beb8664a82bbdc03b3dd6ce11eb749aca6903d41660ef08ced0505cbb26a7a759397e01785650dfccc3b4594800"/126, @ANYRES32=r7, @ANYBLOB='\b'], 0x28}}, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) ioctl$SIOCAX25GETINFOOLD(r9, 0x89e9, &(0x7f0000000900)) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in6, @in6=@initdev}}, {{@in6=@ipv4}, 0x0, @in=@dev}}, &(0x7f0000000440)=0xe8) r10 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r10, 0xc1205531, 0x0) ioctl$SNDCTL_DSP_SPEED(r10, 0xc0045002, &(0x7f0000000980)=0xa9) 15:45:18 executing program 0: futex(&(0x7f000000cffc), 0x180, 0x0, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x374, &(0x7f0000000200)="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") futex(&(0x7f000000cffc), 0x85, 0x0, 0x0, &(0x7f0000048000), 0x5000000) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x100, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000040)={0x5}, 0x1) 15:45:18 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{0x0}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:18 executing program 2: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) writev(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)="ee", 0xc}], 0x1) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x559302, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f00000000c0)=r3) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r6, @ANYBLOB="00ebffffff00000008000a000f0000009cc41dba39b1519321712eb7c0c0f64dd1784d2fd1fae87178b72a8ee5517a7f328d95cc55739c229fd5030e363001c1f61729d1a0c5b7c298f0"], 0x28}}, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in6, @in6=@initdev}}, {{@in6=@ipv4}, 0x0, @in=@dev}}, &(0x7f0000000440)=0xe8) [ 1497.607097] *** Guest State *** [ 1497.615617] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1497.638577] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 15:45:18 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 1497.668929] CR3 = 0x00000000fffbc000 [ 1497.680650] RSP = 0x00000000000004cb RIP = 0x0000000000000000 [ 1497.695302] RFLAGS=0x00022142 DR7 = 0x0000000000000400 [ 1497.708941] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1497.727262] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1497.746801] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1497.765715] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 15:45:18 executing program 2: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) writev(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)="ee", 0xc}], 0x1) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x559302, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000480)={@null=' \x00', 0xe, 'veth0_to_bridge\x00'}) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f00000000c0)=r5) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) fcntl$dupfd(r6, 0x406, 0xffffffffffffffff) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in6, @in6=@initdev}}, {{@in6=@ipv4}, 0x0, @in=@dev}}, &(0x7f0000000440)=0xe8) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) [ 1497.787062] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1497.821101] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1497.829281] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 15:45:18 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 1497.861680] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1497.880683] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1497.902529] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1497.926544] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1497.953487] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1497.977141] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 15:45:18 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 1498.023032] Interruptibility = 00000000 ActivityState = 00000000 [ 1498.043925] *** Host State *** [ 1498.055871] RIP = 0xffffffff8117a4e0 RSP = 0xffff88809f4e7998 15:45:18 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de93", 0x24}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 1498.076184] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1498.095726] FSBase=00007f8194ae5700 GSBase=ffff8880aec00000 TRBase=fffffe0000034000 [ 1498.114928] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 1498.142256] CR0=0000000080050033 CR3=00000000a166e000 CR4=00000000001426f0 [ 1498.149526] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff868018e0 [ 1498.178402] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1498.214181] *** Control State *** [ 1498.218622] PinBased=0000003f CPUBased=b6a1edfa SecondaryExec=000000e3 [ 1498.242800] EntryControls=0000d1ff ExitControls=002fefff [ 1498.265802] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1498.288374] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1498.296947] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1498.312029] reason=80000021 qualification=0000000000000000 [ 1498.318847] IDTVectoring: info=00000000 errcode=00000000 [ 1498.332246] TSC Offset = 0xfffffcdb21e9ff19 [ 1498.336757] TPR Threshold = 0x00 [ 1498.340466] EPT pointer = 0x000000004861c01e [ 1498.360132] Virtual processor ID = 0x0002 15:45:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x600000, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) setitimer(0x0, &(0x7f0000000080)={{r3, r4/1000+30000}, {0x77359400}}, &(0x7f0000000100)) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x22140}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$KVM_RUN(r5, 0xae80, 0x0) 15:45:20 executing program 2: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) writev(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)="ee", 0xc}], 0x1) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x559302, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000240)=r3) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in6, @in6=@initdev}}, {{@in6=@ipv4}, 0x0, @in=@dev}}, &(0x7f0000000440)=0xe8) 15:45:20 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de93", 0x24}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:20 executing program 0: futex(&(0x7f000000cffc), 0x180, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x80002, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x62, 0x4, 0x7, 0x77, 0x1f, 0x5, 0x8, 0x2, 0x0, 0x0, 0x80, 0x9, 0xff, 0x7}, 0xe) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000040)={0x28, 0xd9, 0xf, 0x8001, 0x10000, 0x40, 0x80000001, 0x6, 0x0}, &(0x7f0000000080)=0x20) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000000c0)={r2, 0x3}, 0x8) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") futex(&(0x7f0000000100), 0x81, 0x0, 0x0, &(0x7f0000048000), 0x5000000) [ 1499.657123] selinux_nlmsg_perm: 295 callbacks suppressed [ 1499.657134] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=25457 comm=syz-executor.1 [ 1499.686639] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=25457 comm=syz-executor.1 [ 1499.705576] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=25457 comm=syz-executor.1 [ 1499.719429] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=25457 comm=syz-executor.1 [ 1499.735407] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=25457 comm=syz-executor.1 [ 1499.749491] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=25457 comm=syz-executor.1 [ 1499.763573] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=25457 comm=syz-executor.1 [ 1499.777451] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=25457 comm=syz-executor.1 [ 1499.793588] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=25457 comm=syz-executor.1 [ 1499.811132] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=25457 comm=syz-executor.1 15:45:20 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de93", 0x24}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:20 executing program 2: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) writev(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)="ee", 0xc}], 0x1) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x559302, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f00000000c0)=r3) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001000000000800000000000000a000000f2b67c2d635d21524ebeb575326959ec55bc4ecf1d491903f0fced2ff92f280e5d708ae076d8c83fa3aad5aac8dc0a07a3d29fb337ddb4a73203a1699394550c65ad81af0933a25750f9269dfe4b7957ee55b519b1c34b4d231377cc30e593941887d7dbbd0553c9683fa56fb3d6ee5dfdd3911b8e79eb7a0e95691592ac3c92058f461c6cd283aca751f8f87433b3900a79c3ad056cca4952f77d8cabb428ee4939f41e718324a83bba39", @ANYRES32=r6, @ANYBLOB="000000000000000008000a000f000000"], 0x28}}, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in6, @in6=@initdev}}, {{@in6=@ipv4}, 0x0, @in=@dev}}, &(0x7f0000000440)=0xe8) 15:45:20 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c", 0x36}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:20 executing program 2: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) writev(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)="ee", 0xc}], 0x1) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x559302, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f00000000c0)=r3) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="28000000100025080000ada2249d0000000000000a000000", @ANYRES32=r6, @ANYBLOB="000000000000000008000a000f000000"], 0x28}}, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$netlink(0x10, 0x3, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r8, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f00) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000480)={{{@in6, @in6=@initdev}}, {{@in6=@ipv4}, 0x0, @in=@dev}}, &(0x7f0000000440)=0xe8) 15:45:20 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c", 0x36}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:20 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c", 0x36}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 1500.168091] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 15:45:21 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea", 0x3f}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xd) ioctl$TCFLSH(r2, 0x541b, 0x2070dffc) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) fsetxattr$security_capability(r5, &(0x7f0000000080)='security.capability\x00', &(0x7f0000000100)=@v2={0x2000000, [{0x5, 0x100}, {0x0, 0x200}]}, 0x14, 0x2) write$uinput_user_dev(r4, &(0x7f00000003c0)={'syz0\x00', {0x7, 0x5, 0x4, 0x248}, 0x55, [0x0, 0xc00, 0x7b, 0x7fffffff, 0xda8, 0x8001, 0x8001, 0x6, 0x3, 0x5, 0x80, 0x5, 0x1, 0x0, 0x7ff, 0x9, 0x0, 0x5, 0x5496, 0x81, 0x3, 0x0, 0x4, 0x8, 0x0, 0x0, 0x5, 0x1f, 0x4, 0x7, 0x5, 0x0, 0x9, 0x20, 0x0, 0x22a7, 0x0, 0x2, 0x0, 0x4, 0x80000001, 0x9, 0x306e, 0x0, 0x7, 0x5, 0xfffffffe, 0xe8ef, 0x5, 0x6, 0x81, 0x401, 0x9, 0x9, 0x9, 0x114, 0x5, 0x0, 0x0, 0x9, 0x0, 0xffffff4c, 0x401], [0x0, 0x0, 0x7, 0x1, 0x8, 0xfe0c, 0x1, 0x7fff, 0x1faa7c2c, 0x2, 0x200, 0x2d18b62a, 0x5, 0x5, 0x0, 0x3, 0x6, 0x7, 0xffffffff, 0x3, 0x1, 0xfffffffd, 0x4, 0x6b88, 0x8, 0x20, 0x8, 0x3, 0x10001, 0x10000, 0xb3d8, 0x0, 0x4000, 0xffffffe1, 0x3, 0x2, 0x2954, 0x8, 0x6045, 0xffffff4f, 0x8, 0x1, 0x4, 0x80000000, 0x1, 0xffffe16d, 0x2, 0xa8f, 0x2, 0x101, 0x4, 0x8, 0x1, 0x7, 0x100, 0x5, 0x6, 0x8000, 0x7, 0x8, 0x8001, 0x5fa3, 0x7, 0x5e], [0xffffffff, 0x9, 0xfffffffd, 0x26bc, 0x800, 0xffff7fff, 0x80, 0x7f, 0x892, 0x0, 0x0, 0x2, 0x9, 0x1ff, 0x10001, 0x9, 0x6, 0x8, 0x10001, 0x4, 0x3, 0x8aeb, 0xffffffff, 0x7, 0x80000000, 0x20, 0x1000, 0x23, 0x7, 0x101, 0x1, 0x10001, 0x8, 0x0, 0x4, 0x80000001, 0xc8, 0xfffff536, 0x736fd575, 0x3, 0x5, 0x7fff, 0x1, 0x0, 0x0, 0x1, 0x4, 0xa170, 0xe5, 0x27d4ff6c, 0x0, 0x3ff, 0xb2, 0x1ff, 0x8a, 0x3, 0x78, 0x1, 0x1d, 0x7f, 0x6, 0x7fc8a33f, 0x910, 0x1f], [0x5c, 0x7f, 0x7ff, 0xc4, 0x7fff, 0x7, 0x8, 0x81, 0x0, 0xfffffc00, 0x6, 0x5, 0x3, 0x0, 0x7, 0x0, 0x10000, 0xd1d, 0x80, 0x7fff, 0x800, 0x5e58, 0xffff019b, 0x8, 0x7, 0x4, 0x0, 0x0, 0x1, 0x2, 0x5, 0x80, 0xfff, 0x10001, 0x9, 0x0, 0x9, 0x401, 0xede8, 0x5, 0x10f, 0x1f, 0xffffffff, 0x2, 0x1f, 0x2, 0x9, 0x2, 0x3, 0x0, 0x8, 0x1, 0x6, 0x1, 0xfffffff8, 0x1, 0x8, 0xffff, 0x6, 0x1ffc00, 0x8, 0xffff0000, 0x0, 0x6]}, 0x45c) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x22140}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$KVM_RUN(r6, 0xae80, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) 15:45:21 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea", 0x3f}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:21 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea", 0x3f}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:21 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766b", 0x44}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:21 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766b", 0x44}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:21 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766b", 0x44}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 1500.989723] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 15:45:21 executing program 2: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) writev(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)="ee", 0xc}], 0x1) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x559302, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f00000000c0)=r3) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in6, @in6=@initdev}}, {{@in6=@ipv4}, 0x0, @in=@dev}}, &(0x7f0000000440)=0xe8) 15:45:21 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39c", 0x46}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:22 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39c", 0x46}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:22 executing program 2: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) writev(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)="ee", 0xc}], 0x1) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x559302, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x42) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, r6}, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000180)={0x2, 0x6, 0x0, 0xffffffff, r6}, 0x10) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000240)={r6, 0xf4aa}, &(0x7f0000000280)=0x8) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f00000000c0)=r7) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r10}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in6, @in6=@initdev}}, {{@in6=@ipv4}, 0x0, @in=@dev}}, &(0x7f0000000440)=0xe8) 15:45:22 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39c", 0x46}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:22 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd1", 0x47}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 1502.408793] *** Guest State *** [ 1502.416998] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1502.427427] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1502.443200] CR3 = 0x00000000fffbc000 [ 1502.454316] RSP = 0x00000000000004cb RIP = 0x0000000000000000 [ 1502.464460] RFLAGS=0x00022142 DR7 = 0x0000000000000400 [ 1502.479337] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1502.489971] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1502.504429] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1502.513590] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1502.527449] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1502.536402] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1502.550321] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1502.575231] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1502.596375] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1502.627798] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1502.647908] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1502.657987] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1502.678183] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1502.688323] Interruptibility = 00000000 ActivityState = 00000000 [ 1502.708473] *** Host State *** [ 1502.712103] RIP = 0xffffffff8117a4e0 RSP = 0xffff888047607998 [ 1502.718198] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1502.741145] FSBase=00007f8194ae5700 GSBase=ffff8880aec00000 TRBase=fffffe0000003000 [ 1502.766243] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 1502.785926] CR0=0000000080050033 CR3=0000000089bde000 CR4=00000000001426f0 [ 1502.806700] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff868018e0 [ 1502.830393] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1502.847097] *** Control State *** [ 1502.851392] PinBased=0000003f CPUBased=b6a1edfa SecondaryExec=000000e3 [ 1502.868462] EntryControls=0000d1ff ExitControls=002fefff [ 1502.874590] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1502.892770] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1502.910190] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1502.927222] reason=80000021 qualification=0000000000000000 [ 1502.934560] IDTVectoring: info=00000000 errcode=00000000 [ 1502.940692] TSC Offset = 0xfffffcd93c24df16 15:45:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xd) ioctl$TCFLSH(r2, 0x541b, 0x2070dffc) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) fsetxattr$security_capability(r5, &(0x7f0000000080)='security.capability\x00', &(0x7f0000000100)=@v2={0x2000000, [{0x5, 0x100}, {0x0, 0x200}]}, 0x14, 0x2) write$uinput_user_dev(r4, &(0x7f00000003c0)={'syz0\x00', {0x7, 0x5, 0x4, 0x248}, 0x55, [0x0, 0xc00, 0x7b, 0x7fffffff, 0xda8, 0x8001, 0x8001, 0x6, 0x3, 0x5, 0x80, 0x5, 0x1, 0x0, 0x7ff, 0x9, 0x0, 0x5, 0x5496, 0x81, 0x3, 0x0, 0x4, 0x8, 0x0, 0x0, 0x5, 0x1f, 0x4, 0x7, 0x5, 0x0, 0x9, 0x20, 0x0, 0x22a7, 0x0, 0x2, 0x0, 0x4, 0x80000001, 0x9, 0x306e, 0x0, 0x7, 0x5, 0xfffffffe, 0xe8ef, 0x5, 0x6, 0x81, 0x401, 0x9, 0x9, 0x9, 0x114, 0x5, 0x0, 0x0, 0x9, 0x0, 0xffffff4c, 0x401], [0x0, 0x0, 0x7, 0x1, 0x8, 0xfe0c, 0x1, 0x7fff, 0x1faa7c2c, 0x2, 0x200, 0x2d18b62a, 0x5, 0x5, 0x0, 0x3, 0x6, 0x7, 0xffffffff, 0x3, 0x1, 0xfffffffd, 0x4, 0x6b88, 0x8, 0x20, 0x8, 0x3, 0x10001, 0x10000, 0xb3d8, 0x0, 0x4000, 0xffffffe1, 0x3, 0x2, 0x2954, 0x8, 0x6045, 0xffffff4f, 0x8, 0x1, 0x4, 0x80000000, 0x1, 0xffffe16d, 0x2, 0xa8f, 0x2, 0x101, 0x4, 0x8, 0x1, 0x7, 0x100, 0x5, 0x6, 0x8000, 0x7, 0x8, 0x8001, 0x5fa3, 0x7, 0x5e], [0xffffffff, 0x9, 0xfffffffd, 0x26bc, 0x800, 0xffff7fff, 0x80, 0x7f, 0x892, 0x0, 0x0, 0x2, 0x9, 0x1ff, 0x10001, 0x9, 0x6, 0x8, 0x10001, 0x4, 0x3, 0x8aeb, 0xffffffff, 0x7, 0x80000000, 0x20, 0x1000, 0x23, 0x7, 0x101, 0x1, 0x10001, 0x8, 0x0, 0x4, 0x80000001, 0xc8, 0xfffff536, 0x736fd575, 0x3, 0x5, 0x7fff, 0x1, 0x0, 0x0, 0x1, 0x4, 0xa170, 0xe5, 0x27d4ff6c, 0x0, 0x3ff, 0xb2, 0x1ff, 0x8a, 0x3, 0x78, 0x1, 0x1d, 0x7f, 0x6, 0x7fc8a33f, 0x910, 0x1f], [0x5c, 0x7f, 0x7ff, 0xc4, 0x7fff, 0x7, 0x8, 0x81, 0x0, 0xfffffc00, 0x6, 0x5, 0x3, 0x0, 0x7, 0x0, 0x10000, 0xd1d, 0x80, 0x7fff, 0x800, 0x5e58, 0xffff019b, 0x8, 0x7, 0x4, 0x0, 0x0, 0x1, 0x2, 0x5, 0x80, 0xfff, 0x10001, 0x9, 0x0, 0x9, 0x401, 0xede8, 0x5, 0x10f, 0x1f, 0xffffffff, 0x2, 0x1f, 0x2, 0x9, 0x2, 0x3, 0x0, 0x8, 0x1, 0x6, 0x1, 0xfffffff8, 0x1, 0x8, 0xffff, 0x6, 0x1ffc00, 0x8, 0xffff0000, 0x0, 0x6]}, 0x45c) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x22140}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$KVM_RUN(r6, 0xae80, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) 15:45:23 executing program 2: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) writev(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)="ee", 0xc}], 0x1) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x559302, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f00000000c0)=r3) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r6, @ANYBLOB="000000000000000008000a000f000000b5f4f1bf812dca6268e066d069bb0a8bce83ea429822f06cda46f8a4bcf4474a73bcc67a842731a3"], 0x28}}, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xfffffffffffffd12}, 0x1, 0x0, 0x0, 0x4010}, 0x4044080) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in6, @in6=@initdev}}, {{@in6=@ipv4}, 0x0, @in=@dev}}, &(0x7f0000000440)=0xe8) [ 1502.945079] TPR Threshold = 0x00 [ 1502.948671] EPT pointer = 0x000000008c22201e [ 1502.958039] Virtual processor ID = 0x0002 15:45:23 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd1", 0x47}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000280)=0x0) perf_event_open(&(0x7f00000012c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3ff, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000540)=ANY=[], &(0x7f0000000400)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000000080)={0x0, 0x6}) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x1223) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r5, &(0x7f0000000180)='.//ile0\x00', r5, &(0x7f00000007c0)='./file0/f.le.\x00') r6 = getpid() sched_setattr(r6, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f00000002c0)=r6) ioctl$DRM_IOCTL_AGP_ALLOC(r5, 0xc0206434, &(0x7f0000000100)={0x4, 0x0, 0x2, 0xd3bd}) ioctl$DRM_IOCTL_SG_ALLOC(r2, 0xc0106438, &(0x7f0000000180)={0x4, r7}) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x22140}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 15:45:23 executing program 0: futex(&(0x7f000000cffc), 0x180, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") futex(&(0x7f000000cffc), 0x85, 0x0, 0x0, &(0x7f0000048000), 0x5000000) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x400, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r4 = dup3(r2, r3, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}}, 0x18) write$P9_RSTAT(r4, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], 0x70) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r5, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r5, 0x0) ioctl$ASHMEM_SET_NAME(r5, 0x40087708, &(0x7f00000005c0)='\x00\x00\x00\x01\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93\r\x99\xbe\x18\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) dup2(r7, r5) ioctl$DRM_IOCTL_ADD_CTX(r7, 0xc0086420, &(0x7f0000000300)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f00000002c0)={r8, 0x5}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f0000000040)={r8, &(0x7f0000000200)=""/4096}) 15:45:23 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd1", 0x47}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 1503.169887] *** Guest State *** [ 1503.196029] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 15:45:24 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:24 executing program 2: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) writev(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)="ee", 0xc}], 0x1) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x559302, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f00000000c0)=r4) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r7}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/nvme-fabrics\x00', 0x4100c2, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f00000005c0)={{{@in=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f0000000500)=0xe8) setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f0000000540)={r11, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280)='batadv\x00') sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r12, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xcc99}]}, 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x1) socket$netlink(0x10, 0x3, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ubi_ctrl\x00', 0x22c180, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r13, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f00) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r14, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f00) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000840)={{{@in6, @in6=@initdev}}, {{@in6=@ipv4}, 0x0, @in=@dev}}, &(0x7f0000000940)=0xe8) [ 1503.258960] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 15:45:24 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 1503.310213] CR3 = 0x00000000fffbc000 [ 1503.314052] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 1503.345288] RFLAGS=0x00022142 DR7 = 0x0000000000000400 [ 1503.378613] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1503.390772] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1503.399383] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1503.414463] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 15:45:24 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0cab00000a927b18901"], 0xa) close(r2) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000540)=ANY=[], &(0x7f0000000400)) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)={0x0, 0x0, 0x1000}) ioctl$DRM_IOCTL_GEM_CLOSE(r3, 0x40086409, &(0x7f0000000180)={r4}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/btrfs-control\x00', 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r7, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r7, 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r7, 0x800c6613, &(0x7f00000001c0)=@v2={0x2, @aes128, 0x2, [], "9b939e5d0bc460792afb00ebad1b9c54"}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 1503.444405] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1503.459763] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1503.475430] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1503.485941] GDTR: limit=0x0000ffff, base=0x0000000000000000 15:45:24 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 1503.498249] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1503.508846] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1503.536918] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 15:45:24 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) r5 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, &(0x7f0000000540)=ANY=[], &(0x7f0000000400)) write$6lowpan_control(r5, &(0x7f0000000080)='connect aa:aa:aa:aa:aa:11 0', 0x1b) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 1503.556350] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1503.567345] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1503.590395] Interruptibility = 00000000 ActivityState = 00000000 [ 1503.605862] *** Host State *** [ 1503.612319] RIP = 0xffffffff8117a4e0 RSP = 0xffff88804603f998 [ 1503.624488] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1503.639638] FSBase=00007fc3fc826700 GSBase=ffff8880aed00000 TRBase=fffffe0000003000 [ 1503.663082] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 1503.669701] CR0=0000000080050033 CR3=0000000055c9c000 CR4=00000000001426e0 [ 1503.684995] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff868018e0 [ 1503.694961] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1503.732736] *** Control State *** [ 1503.745089] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000e2 [ 1503.764130] EntryControls=0000d1ff ExitControls=002fefff [ 1503.775256] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1503.784897] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1503.794121] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1503.804595] reason=80000021 qualification=0000000000000000 [ 1503.815204] IDTVectoring: info=00000000 errcode=00000000 [ 1503.824197] TSC Offset = 0xfffffcd824d8ad23 [ 1503.828864] EPT pointer = 0x000000005d68701e [ 1503.835868] Virtual processor ID = 0x0002 [ 1503.868662] *** Guest State *** [ 1503.873911] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1503.886390] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1503.898419] CR3 = 0x00000000fffbc000 [ 1503.906104] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 1503.915301] RFLAGS=0x00022142 DR7 = 0x0000000000000400 [ 1503.924999] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1503.934834] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1503.946922] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1503.958450] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1503.969639] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1503.982666] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1503.994938] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1504.006583] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1504.015471] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1504.027325] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1504.036277] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1504.048176] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1504.055785] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1504.067112] Interruptibility = 00000000 ActivityState = 00000000 [ 1504.075440] *** Host State *** [ 1504.078737] RIP = 0xffffffff8117a4e0 RSP = 0xffff8880929e7998 [ 1504.085018] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1504.092083] FSBase=00007fc3fc805700 GSBase=ffff8880aec00000 TRBase=fffffe0000003000 [ 1504.099972] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 1504.106071] CR0=0000000080050033 CR3=0000000055c9c000 CR4=00000000001426f0 [ 1504.113313] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff868018e0 [ 1504.120199] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1504.126361] *** Control State *** [ 1504.129959] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000e2 [ 1504.136861] EntryControls=0000d1ff ExitControls=002fefff [ 1504.142811] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1504.149483] *** Guest State *** [ 1504.149971] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1504.159910] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1504.159977] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1504.176228] reason=80000021 qualification=0000000000000000 [ 1504.177626] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1504.182868] IDTVectoring: info=00000000 errcode=00000000 [ 1504.182874] TSC Offset = 0xfffffcd7c447b516 [ 1504.182881] EPT pointer = 0x000000008bd9a01e [ 1504.182890] Virtual processor ID = 0x0002 [ 1504.214052] CR3 = 0x00000000fffbc000 [ 1504.218310] RSP = 0x00000000000004cb RIP = 0x0000000000000000 [ 1504.225159] RFLAGS=0x00022142 DR7 = 0x0000000000000400 [ 1504.232400] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1504.239149] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1504.248515] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1504.260495] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1504.268575] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1504.277202] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1504.285754] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1504.294742] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1504.303464] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1504.312186] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1504.321737] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1504.331125] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1504.337586] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1504.345179] Interruptibility = 00000000 ActivityState = 00000000 [ 1504.351512] *** Host State *** [ 1504.354721] RIP = 0xffffffff8117a4e0 RSP = 0xffff88809a187998 [ 1504.360891] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1504.367513] FSBase=00007f8194ae5700 GSBase=ffff8880aed00000 TRBase=fffffe0000034000 [ 1504.375561] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 1504.381566] CR0=0000000080050033 CR3=0000000083dfd000 CR4=00000000001426e0 [ 1504.388586] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff868018e0 [ 1504.396176] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1504.402427] *** Control State *** [ 1504.405891] PinBased=0000003f CPUBased=b6a1edfa SecondaryExec=000000e3 [ 1504.412814] EntryControls=0000d1ff ExitControls=002fefff 15:45:25 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="f0ca9a0000a927b189011e872d3875b998959b2e0bf99f77d63321d5dd4105b2c437475e4e2ce4a55768f86b6806021c47c4d4e3c0fd9d4f09f8e55abda545ea51"], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000080), 0x2) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xd) ioctl$TCFLSH(r2, 0x541b, 0x2070dffc) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) fsetxattr$security_capability(r5, &(0x7f0000000080)='security.capability\x00', &(0x7f0000000100)=@v2={0x2000000, [{0x5, 0x100}, {0x0, 0x200}]}, 0x14, 0x2) write$uinput_user_dev(r4, &(0x7f00000003c0)={'syz0\x00', {0x7, 0x5, 0x4, 0x248}, 0x55, [0x0, 0xc00, 0x7b, 0x7fffffff, 0xda8, 0x8001, 0x8001, 0x6, 0x3, 0x5, 0x80, 0x5, 0x1, 0x0, 0x7ff, 0x9, 0x0, 0x5, 0x5496, 0x81, 0x3, 0x0, 0x4, 0x8, 0x0, 0x0, 0x5, 0x1f, 0x4, 0x7, 0x5, 0x0, 0x9, 0x20, 0x0, 0x22a7, 0x0, 0x2, 0x0, 0x4, 0x80000001, 0x9, 0x306e, 0x0, 0x7, 0x5, 0xfffffffe, 0xe8ef, 0x5, 0x6, 0x81, 0x401, 0x9, 0x9, 0x9, 0x114, 0x5, 0x0, 0x0, 0x9, 0x0, 0xffffff4c, 0x401], [0x0, 0x0, 0x7, 0x1, 0x8, 0xfe0c, 0x1, 0x7fff, 0x1faa7c2c, 0x2, 0x200, 0x2d18b62a, 0x5, 0x5, 0x0, 0x3, 0x6, 0x7, 0xffffffff, 0x3, 0x1, 0xfffffffd, 0x4, 0x6b88, 0x8, 0x20, 0x8, 0x3, 0x10001, 0x10000, 0xb3d8, 0x0, 0x4000, 0xffffffe1, 0x3, 0x2, 0x2954, 0x8, 0x6045, 0xffffff4f, 0x8, 0x1, 0x4, 0x80000000, 0x1, 0xffffe16d, 0x2, 0xa8f, 0x2, 0x101, 0x4, 0x8, 0x1, 0x7, 0x100, 0x5, 0x6, 0x8000, 0x7, 0x8, 0x8001, 0x5fa3, 0x7, 0x5e], [0xffffffff, 0x9, 0xfffffffd, 0x26bc, 0x800, 0xffff7fff, 0x80, 0x7f, 0x892, 0x0, 0x0, 0x2, 0x9, 0x1ff, 0x10001, 0x9, 0x6, 0x8, 0x10001, 0x4, 0x3, 0x8aeb, 0xffffffff, 0x7, 0x80000000, 0x20, 0x1000, 0x23, 0x7, 0x101, 0x1, 0x10001, 0x8, 0x0, 0x4, 0x80000001, 0xc8, 0xfffff536, 0x736fd575, 0x3, 0x5, 0x7fff, 0x1, 0x0, 0x0, 0x1, 0x4, 0xa170, 0xe5, 0x27d4ff6c, 0x0, 0x3ff, 0xb2, 0x1ff, 0x8a, 0x3, 0x78, 0x1, 0x1d, 0x7f, 0x6, 0x7fc8a33f, 0x910, 0x1f], [0x5c, 0x7f, 0x7ff, 0xc4, 0x7fff, 0x7, 0x8, 0x81, 0x0, 0xfffffc00, 0x6, 0x5, 0x3, 0x0, 0x7, 0x0, 0x10000, 0xd1d, 0x80, 0x7fff, 0x800, 0x5e58, 0xffff019b, 0x8, 0x7, 0x4, 0x0, 0x0, 0x1, 0x2, 0x5, 0x80, 0xfff, 0x10001, 0x9, 0x0, 0x9, 0x401, 0xede8, 0x5, 0x10f, 0x1f, 0xffffffff, 0x2, 0x1f, 0x2, 0x9, 0x2, 0x3, 0x0, 0x8, 0x1, 0x6, 0x1, 0xfffffff8, 0x1, 0x8, 0xffff, 0x6, 0x1ffc00, 0x8, 0xffff0000, 0x0, 0x6]}, 0x45c) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x22140}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$KVM_RUN(r6, 0xae80, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) 15:45:25 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:25 executing program 0: futex(&(0x7f000000cffc), 0x180, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x80002, 0x0) ioctl$sock_x25_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@remote={[], 0x2}, 0x9, 'vcan0\x00'}) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") futex(&(0x7f000000cffc), 0x85, 0x0, 0x0, &(0x7f0000048000), 0x5000000) 15:45:25 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x22140}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r4, 0xc008551c, &(0x7f0000000080)={0x4, 0x8, [0x2, 0x2]}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 15:45:25 executing program 2: r0 = socket$kcm(0xa, 0xd, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) writev(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)="ee", 0xc}], 0x1) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x559302, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f00000000c0)=r3) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800b209d4a9000800000000000000000a000000", @ANYRES32=r6, @ANYBLOB="000000000000000008000a000f000000"], 0x28}}, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in6, @in6=@initdev}}, {{@in6=@ipv4}, 0x0, @in=@dev}}, &(0x7f0000000440)=0xe8) [ 1504.418279] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1504.425304] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1504.432054] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1504.438617] reason=80000021 qualification=0000000000000000 [ 1504.445044] IDTVectoring: info=00000000 errcode=00000000 [ 1504.450652] TSC Offset = 0xfffffcd7a5ca7db5 [ 1504.454998] TPR Threshold = 0x00 [ 1504.458374] EPT pointer = 0x000000005d68701e [ 1504.462894] Virtual processor ID = 0x0003 15:45:25 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:25 executing program 2: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) writev(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)="ee", 0xc}], 0x1) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000500)='/dev/sequencer2\x00', 0x8000, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f0000000540)={0x9, 0x2000000000000000, 0x1000, 0x5}) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x559302, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f00000000c0)=r5) r6 = syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x7fffffff, 0x200000) setsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f00000004c0)={r5, @rand_addr=0x5, @remote}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="000000000000000008000a000f000000"], 0x28}}, 0x0) r10 = socket(0x10, 0x803, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000280)={0x8, 0x3, 0x4, 0x20000000, 0xec76, {0x0, 0x7530}, {0x3, 0x0, 0x80, 0x18, 0x8, 0x20, "b58661c3"}, 0x4, 0x3, @fd=r2, 0x3, 0x0, 0xffffffffffffffff}) ioctl$sock_TIOCOUTQ(r12, 0x5411, &(0x7f0000000300)) recvmsg$kcm(r11, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f00) setsockopt$inet6_IPV6_ADDRFORM(r11, 0x29, 0x1, &(0x7f0000000240), 0x4) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$netlink(0x10, 0x3, 0x0) r13 = dup(0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r13, 0x29, 0x22, &(0x7f0000000340)={{{@in6, @in6=@initdev}}, {{@in6=@ipv4}, 0x0, @in=@dev}}, &(0x7f0000000440)=0xe8) 15:45:25 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:25 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r3, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[@ANYRESHEX, @ANYRES64=r1, @ANYRESDEC=r0], 0x2e) close(r2) socket(0x10, 0x3, 0x4) r4 = open(&(0x7f0000000080)='./file0\x00', 0x101000, 0x180) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, 0x0) mq_notify(r5, &(0x7f0000000240)={0x0, 0x38, 0x0, @thr={&(0x7f0000000180)="7346be31d65929fc5681f005e1f25ce3d89d7c043520ed8f6082d89735205bf2e126b68c5bcf4960510f27857a35c672c09603d809e610760bea38cfff17d52f51b2e9a0451955fb425a812a88299e3e0f0a94120c9dc0985656e0740d67158fbd634bc8668ca2cfd6b9", &(0x7f00000002c0)="38e41ff906bc6b6f7df2c80a00749ec4af3100a1bbc10b1ee57729b5ff5860054327a9a6f7bf7db0c65d92dcbef62484e9a5f590c1ad8d6f2feaacff760d8253c93b9d1e2400bc1c982ba2beef5b69f80a4756e70acd60beca28bd8b87b87901c19559164fb4d18639cac863025046ced774d7e232fdea197f02b12f4a3c5d27aeb99a1a2c11"}}) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r6) r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r7, 0xc1205531, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:25 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r1) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0xfef0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x80000001, 0x0) [ 1504.712918] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1504.726379] selinux_nlmsg_perm: 322 callbacks suppressed [ 1504.726390] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=25589 comm=syz-executor.3 [ 1504.747451] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=25589 comm=syz-executor.3 [ 1504.760743] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=25589 comm=syz-executor.3 [ 1504.773973] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=25589 comm=syz-executor.3 [ 1504.787555] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=25589 comm=syz-executor.3 [ 1504.806820] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=25589 comm=syz-executor.3 [ 1504.822144] *** Guest State *** [ 1504.826898] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1504.833330] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=25589 comm=syz-executor.3 [ 1504.836947] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 15:45:25 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r1) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0xfef0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x80000001, 0x0) [ 1504.856047] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=25589 comm=syz-executor.3 [ 1504.861953] CR3 = 0x00000000fffbc000 [ 1504.875920] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=25589 comm=syz-executor.3 [ 1504.877575] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 1504.889109] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=25589 comm=syz-executor.3 [ 1504.911577] RFLAGS=0x00022142 DR7 = 0x0000000000000400 [ 1504.925703] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1504.934173] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1504.944266] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1504.954453] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1504.965056] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1504.987222] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1505.005010] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1505.018576] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1505.030872] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1505.046441] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1505.056013] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1505.067719] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1505.076049] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1505.087631] Interruptibility = 00000000 ActivityState = 00000000 [ 1505.096437] *** Host State *** [ 1505.096883] *** Guest State *** [ 1505.100791] RIP = 0xffffffff8117a4e0 RSP = 0xffff88809fd47998 [ 1505.103786] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1505.109517] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1505.127874] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1505.127972] FSBase=00007fc3fc826700 GSBase=ffff8880aec00000 TRBase=fffffe0000003000 [ 1505.137919] CR3 = 0x00000000fffbc000 [ 1505.146902] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 1505.155278] RSP = 0x00000000000004cb RIP = 0x0000000000000000 [ 1505.158494] CR0=0000000080050033 CR3=00000000a8203000 CR4=00000000001426f0 [ 1505.164944] RFLAGS=0x00022142 DR7 = 0x0000000000000400 [ 1505.172369] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff868018e0 [ 1505.172502] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1505.172527] *** Control State *** [ 1505.172537] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000e2 [ 1505.172567] EntryControls=0000d1ff ExitControls=002fefff [ 1505.172654] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1505.172681] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1505.172738] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1505.172764] reason=80000021 qualification=0000000000000000 [ 1505.172821] IDTVectoring: info=00000000 errcode=00000000 [ 1505.172922] TSC Offset = 0xfffffcd74665ad6a [ 1505.173022] EPT pointer = 0x0000000055c3601e [ 1505.173124] Virtual processor ID = 0x0002 [ 1505.263803] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1505.271165] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1505.279390] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1505.284274] *** Guest State *** [ 1505.289583] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1505.293975] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1505.304477] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1505.314219] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1505.322835] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1505.338434] CR3 = 0x00000000fffbc000 [ 1505.340851] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1505.344419] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 1505.354125] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1505.368978] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1505.369948] RFLAGS=0x00022142 DR7 = 0x0000000000000400 [ 1505.378086] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1505.386377] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1505.393225] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1505.402304] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1505.407779] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1505.421281] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1505.422841] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1505.435213] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1505.438776] Interruptibility = 00000000 ActivityState = 00000000 [ 1505.447049] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1505.453815] *** Host State *** [ 1505.465400] RIP = 0xffffffff8117a4e0 RSP = 0xffff8880581cf998 [ 1505.466653] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1505.472491] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1505.480009] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1505.487013] FSBase=00007f8194ae5700 GSBase=ffff8880aed00000 TRBase=fffffe0000034000 [ 1505.495481] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1505.507270] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 1505.511021] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1505.511033] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1505.511047] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1505.511055] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1505.511064] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1505.511071] Interruptibility = 00000000 ActivityState = 00000000 [ 1505.511075] *** Host State *** [ 1505.511084] RIP = 0xffffffff8117a4e0 RSP = 0xffff88809fd47998 [ 1505.511101] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1505.511109] FSBase=00007fc3fc826700 GSBase=ffff8880aec00000 TRBase=fffffe0000003000 [ 1505.511118] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 1505.511129] CR0=0000000080050033 CR3=00000000a8203000 CR4=00000000001426f0 [ 1505.511140] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff868018e0 [ 1505.511151] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1505.511154] *** Control State *** [ 1505.511160] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000e2 [ 1505.511166] EntryControls=0000d1ff ExitControls=002fefff [ 1505.511176] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1505.511182] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1505.511188] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1505.511194] reason=80000021 qualification=0000000000000000 [ 1505.511199] IDTVectoring: info=00000000 errcode=00000000 [ 1505.511203] TSC Offset = 0xfffffcd703350d16 [ 1505.511210] EPT pointer = 0x00000000a5eee01e [ 1505.511218] Virtual processor ID = 0x0002 [ 1505.588042] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1505.593846] CR0=0000000080050033 CR3=000000004a6fe000 CR4=00000000001426e0 [ 1505.699028] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff868018e0 [ 1505.705890] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1505.719749] *** Control State *** [ 1505.723363] PinBased=0000003f CPUBased=b6a1edfa SecondaryExec=000000e3 [ 1505.730392] EntryControls=0000d1ff ExitControls=002fefff [ 1505.735895] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1505.742962] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1505.749627] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1505.756437] reason=80000021 qualification=0000000000000000 [ 1505.762911] IDTVectoring: info=00000000 errcode=00000000 [ 1505.768359] TSC Offset = 0xfffffcd7207d5902 15:45:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xd) ioctl$TCFLSH(r2, 0x541b, 0x2070dffc) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) fsetxattr$security_capability(r5, &(0x7f0000000080)='security.capability\x00', &(0x7f0000000100)=@v2={0x2000000, [{0x5, 0x100}, {0x0, 0x200}]}, 0x14, 0x2) write$uinput_user_dev(r4, &(0x7f00000003c0)={'syz0\x00', {0x7, 0x5, 0x4, 0x248}, 0x55, [0x0, 0xc00, 0x7b, 0x7fffffff, 0xda8, 0x8001, 0x8001, 0x6, 0x3, 0x5, 0x80, 0x5, 0x1, 0x0, 0x7ff, 0x9, 0x0, 0x5, 0x5496, 0x81, 0x3, 0x0, 0x4, 0x8, 0x0, 0x0, 0x5, 0x1f, 0x4, 0x7, 0x5, 0x0, 0x9, 0x20, 0x0, 0x22a7, 0x0, 0x2, 0x0, 0x4, 0x80000001, 0x9, 0x306e, 0x0, 0x7, 0x5, 0xfffffffe, 0xe8ef, 0x5, 0x6, 0x81, 0x401, 0x9, 0x9, 0x9, 0x114, 0x5, 0x0, 0x0, 0x9, 0x0, 0xffffff4c, 0x401], [0x0, 0x0, 0x7, 0x1, 0x8, 0xfe0c, 0x1, 0x7fff, 0x1faa7c2c, 0x2, 0x200, 0x2d18b62a, 0x5, 0x5, 0x0, 0x3, 0x6, 0x7, 0xffffffff, 0x3, 0x1, 0xfffffffd, 0x4, 0x6b88, 0x8, 0x20, 0x8, 0x3, 0x10001, 0x10000, 0xb3d8, 0x0, 0x4000, 0xffffffe1, 0x3, 0x2, 0x2954, 0x8, 0x6045, 0xffffff4f, 0x8, 0x1, 0x4, 0x80000000, 0x1, 0xffffe16d, 0x2, 0xa8f, 0x2, 0x101, 0x4, 0x8, 0x1, 0x7, 0x100, 0x5, 0x6, 0x8000, 0x7, 0x8, 0x8001, 0x5fa3, 0x7, 0x5e], [0xffffffff, 0x9, 0xfffffffd, 0x26bc, 0x800, 0xffff7fff, 0x80, 0x7f, 0x892, 0x0, 0x0, 0x2, 0x9, 0x1ff, 0x10001, 0x9, 0x6, 0x8, 0x10001, 0x4, 0x3, 0x8aeb, 0xffffffff, 0x7, 0x80000000, 0x20, 0x1000, 0x23, 0x7, 0x101, 0x1, 0x10001, 0x8, 0x0, 0x4, 0x80000001, 0xc8, 0xfffff536, 0x736fd575, 0x3, 0x5, 0x7fff, 0x1, 0x0, 0x0, 0x1, 0x4, 0xa170, 0xe5, 0x27d4ff6c, 0x0, 0x3ff, 0xb2, 0x1ff, 0x8a, 0x3, 0x78, 0x1, 0x1d, 0x7f, 0x6, 0x7fc8a33f, 0x910, 0x1f], [0x5c, 0x7f, 0x7ff, 0xc4, 0x7fff, 0x7, 0x8, 0x81, 0x0, 0xfffffc00, 0x6, 0x5, 0x3, 0x0, 0x7, 0x0, 0x10000, 0xd1d, 0x80, 0x7fff, 0x800, 0x5e58, 0xffff019b, 0x8, 0x7, 0x4, 0x0, 0x0, 0x1, 0x2, 0x5, 0x80, 0xfff, 0x10001, 0x9, 0x0, 0x9, 0x401, 0xede8, 0x5, 0x10f, 0x1f, 0xffffffff, 0x2, 0x1f, 0x2, 0x9, 0x2, 0x3, 0x0, 0x8, 0x1, 0x6, 0x1, 0xfffffff8, 0x1, 0x8, 0xffff, 0x6, 0x1ffc00, 0x8, 0xffff0000, 0x0, 0x6]}, 0x45c) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x22140}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$KVM_RUN(r6, 0xae80, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) 15:45:26 executing program 0: futex(&(0x7f0000000080), 0x1, 0x2, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x80002, 0x0) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f00000000c0)) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) r2 = accept(r1, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x5, &(0x7f0000000000)=0x2, 0x4) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000040)) futex(&(0x7f000000cffc), 0x85, 0x0, 0x0, &(0x7f0000048000), 0x5000000) 15:45:26 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x40, 0x0) sendto$netrom(r5, &(0x7f0000000180)="2c7e2a8886eeac66c40d0e17f840b66b5019d957e9a3b2c82c35e9f75cd3ee0645a9f2c7ea0609edbc2528b9c20ae4b8bf721deed3bea307ac68e160f5b68a549a6f80e048", 0x45, 0x4000000, &(0x7f00000002c0)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5}, [@null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast]}, 0x48) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:26 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r1) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0xfef0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x80000001, 0x0) 15:45:26 executing program 2: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}, 0x3ff}, 0x1c) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) writev(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)="ee", 0xc}], 0x1) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x559302, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000300)) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f00000000c0)=r4) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000250800000000000000000a000000", @ANYRES32=r7, @ANYBLOB="000000000000000008000a000f000000"], 0x28}}, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r9, 0x84, 0x75, &(0x7f0000000480)={0x0, 0x2}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000500)={r10, 0x24, "33728fe1b8b11246576737c192b941105699bb07e60918d32e592382568328a897759d00"}, &(0x7f0000000540)=0x2c) socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in6, @in6=@initdev}}, {{@in6=@ipv4}, 0x0, @in=@dev}}, &(0x7f0000000440)=0xe8) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r11, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f00) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r11, 0x84, 0x76, &(0x7f0000000240)={0x0, 0x71a}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000002c0)={r12, 0x2, 0xdb7}, 0x8) 15:45:26 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r1, 0x0, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000280)={0x401, 0x7, 0x4, 0x800, 0xed, {0x77359400}, {0x2, 0x0, 0x7, 0x3f, 0x6, 0x40, "f25f7ee2"}, 0x0, 0x3, @fd, 0x7, 0x0, r1}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000800)={{{@in6=@initdev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@empty}}, &(0x7f0000000900)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000e40)={0x0, @local, @empty}, &(0x7f0000000e80)=0xc) sendmmsg$inet6(r2, &(0x7f0000006c40)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x8}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000300)="d52eb59c0f588056fb9479a786a6dc29b31ed97a8a6fd99e595831f135fda99c61e5349ea0d512b9ae58baba4bab0c0ef8ca9293653adcc1a342fb9f82de4f41487c12a79e7ba4ad8485f5570fd803ff12dc5acf899b", 0x56}, {&(0x7f0000000080)="b23b6811fdd0ea9b5a1920307b1a2f155900befe93b062bef8dc8975bb634a", 0x1f}, {&(0x7f00000003c0)="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", 0xfe}, {&(0x7f0000001340)="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", 0x1000}, {&(0x7f0000000100)="0f0c60a4540f3a61575bc91beb", 0xd}, {&(0x7f00000004c0)="f76c57a2250ffdb979cab81ed25f09adf2a64db8a6a9533039855698d8e771c7739aca309e49e8c60aaf2e2a18dc030c02bdab9eb20934363c28ee3ae9fd7a1f2477983084c9daa3128e", 0x4a}, {&(0x7f0000000180)="9e50981b7bb32d5eecfe12dcb8c317", 0xf}, {&(0x7f0000000540)="e39918a0dd27c6bb976bdbfb29795df4d0393c3ea156bcfb2c6f9ea36cc54ab35f013a16caccc778b8373f2e1d8a2e529101deb46dd2", 0x36}], 0x8}}, {{&(0x7f0000000600)={0xa, 0x4e20, 0x80, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4ed296c6}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000640)="87938ace87ad71937b72f7c842e912426a1ce0246116844b55e4948a4a730b8c39f3fd740bfdaadaa0519ea1cb587e", 0x2f}], 0x1, &(0x7f0000000940)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @empty}, r4}}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x3b, 0x8, 0x0, 0x8e, 0x0, [@local, @ipv4={[], [], @multicast1}, @mcast2, @mcast2]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @tclass={{0x14, 0x29, 0x43, 0x7fffffff}}, @dstopts_2292={{0x90, 0x29, 0x4, {0x33, 0xe, [], [@pad1, @jumbo={0xc2, 0x4, 0x9c}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, [], 0x34}}, @jumbo={0xc2, 0x4, 0xffff}, @calipso={0x7, 0x28, {0x0, 0x8, 0x5, 0x81, [0x3, 0x9, 0x100000001, 0x0]}}, @hao={0xc9, 0x10, @remote}, @enc_lim={0x4, 0x1, 0x3}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @enc_lim]}}}, @rthdr_2292={{0x18, 0x29, 0x39, {0x0, 0x0, 0x1, 0x3}}}], 0x158}}, {{&(0x7f0000000ac0)={0xa, 0x4e24, 0x8, @remote, 0xffffffff}, 0x1c, &(0x7f0000000dc0)=[{&(0x7f0000000b00)="7deefedd0d28e09e7c33602c56fa033b6d118ce15ea8258aacbd58151ba86c62e439d4115bd93520bbae0fe3c10190308c421aebe7ef6179cacd5bd1976c5ed7a5132742990d1bf88ade0ff03d2b2350ca724633a1e1234409df913c9113878bf9839cb78acf65563f3d1f2aca92a591cfbab15db025e8f86649355100c4dc1baf60363412279373dc8d97b62c2211482a445a1da510881024263f61667b9829", 0xa0}, {&(0x7f0000000bc0)="d09f0f7b4ae06825ebb88aef2c06b627a14e84c4e220fdb9a4d5053bbd1a5d2e3ebe003b114992aa514733486ebbbf2ec4006288c1e3f441311fe081fd83d6fbae10a586d72f44feff59114ecb22e9e20d1506d2758252e4dd3003e0e4ec877663f8010f580c0c919f221bd0097dced3f0eaa3f25bba9fd2d334dc71d4", 0x7d}, {&(0x7f0000000c40)="38f576d20afd0aed143ec1072a61a43d1f3e6be72e26f073dd3060d9baf133d4a3e40099c3f0288d6f4cf51293693257ac1dd6562fc1f53f125e236e40bc6c82743a09df9a39ad4a021f4aa491878a052f50df79cf5c827d3240c0a6feab5b02a1996365e581d6cf80434c05e60f46a401ff9d543e1d54f328298177ded2e492b2099cacd494906d531e42ec86c3", 0x8e}, {&(0x7f0000000d00)="2f94e27f6cbacf556ed8e727eb22616e9dba3fd9cbb0c07a662f699b372677b2267158cfec75f980c1a27826c750865b3aceb9f9153b1400768084200046c8e0ea81e1cf1461885dd4bf4aa39874f0c3b2ba20a8e29ed27582862e08fcb1971df056669a67eaa3d75e52ec81ab4b8cf72856da66b4a130222981a4744216fdf6aa20ddf416", 0x85}], 0x4, &(0x7f0000000ec0)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast2, r5}}}], 0x28}}, {{&(0x7f0000000f00)={0xa, 0x4e21, 0x42, @empty, 0x1}, 0x1c, &(0x7f0000004440)=[{&(0x7f0000000f40)="5edc51484de11c5f938b5891c266ab8cac89ca5c9b600885ff357d6b653e34d0f03340c646e991fbdc2fb2dca767eca223abfa37883d0f1a95de1c2d4530534dd14150191833942ce1b5b425ccfe67a6cde6095fbb365594ea21bc8ce49ae8146a", 0x61}, {&(0x7f0000000fc0)="7f129485b2a5230001c03e434b18fc6d5b89d9b9e4345c842b26a2d2eba36a216e2c6bc3dede1f549c7b7b0ea944207d1668f065cbc138394d40e8c4ec5159c0153e47779c41a69c43a77abe4349662af0561e2c67af2c113ceb0aa6c1a741da108c59b017be5af6d24f03ab7f274a3dc40e9c30f70c3914cfaea875e7987e9c141efb0453a150428242c90501013fe9a511a58846a4b33707d10bbd", 0x9c}, {&(0x7f0000002340)="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", 0x1000}, {&(0x7f0000003340)="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", 0x1000}, {&(0x7f0000001080)=')', 0x1}, {&(0x7f00000010c0)="9267f87b0b4e3cb0b2d510afadb2f3427e52412151e9a107de25cfb12fcef7da9fa1a1ccd48309e34602098ec709af828bcd992b70b80704b6ce2212f37098d9efefd90f67a8c34a22209e09cf40b6dc618d94634a378a6c55bd5476e3b04cba226f1aca16d4e962c5f7e7b32df69101d4e27e9978d43eca863b0085f2875849b86675d69cec17011c0b94e5415b91b802ff6aa2ce0900024a8f222517a177a89930c5672e08125597dfc130a60b37dc2c117952d808e4ff61403193b46c66338e2fb1a16ee4b2e0e8", 0xc9}, {&(0x7f00000011c0)="6bd79156ab76b78e6c9e048eb67a2e674e6b2e25d42a6c21c6248467aabbeba9550ecf7b41db78bbf3172d84d53e96f38465217cd7855dfaa145942a17767a49f5389658417f9684305f090048f74cfcbed951be2e12c0184b7bb752c8b757aaf27bbc9d7ab1ee12f6565640a28aae326b89e935cca3b71ffb23c787c40519a19b302e96ee304a388276bee3fa63264c7a38327f47130fedca7d8f5bf4b5af4fe811750daa6a33970580a13f63a4c6f0fb04c4f2f5286f3690e0a0787b1c621162c644ee5f6b72fd3896a083b20c148b4c4809b51e4005", 0xd7}, {&(0x7f0000004340)="00f0a3f13c21b940ae915d147f204f3941963211c7d080215e84ce31ea66ff26574adb728e12da8dd55efe9d0541ecbef6f53d79e66540aae50d87ee003fe58092ef39f8de607e3ddd915f42b812cc2066803c91d7cf54f5f13ca827ee465390a65db4f0222bcc4f194e281af08a0bb014f07d077a80e32997dc689687d89465fc94e72598e6f7d8c5251158c718be365ae717baa4dc1bb4457180b2aaaa182bdb4b3b513740c6cdcb127b3a6b6bed898172de77064209d4f9c0fde7ab5586be2770b80a12d4fe6d7ab1d1883560d76b", 0xd0}], 0x8}}, {{&(0x7f00000044c0)={0xa, 0x4e20, 0xfffff621, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, 0x1c, &(0x7f00000069c0)=[{&(0x7f0000004500)="34de397adaa5fbe0c2a35015e4cc03246b43b2a44f785d3c55aef8671fd206fbd10177df96f5399b078e1ac5f5c6122232664cca623b3df1de85dbf7819a33d78dc47473a22e03bf1301d15f28c0d163e80cf290ce48e682dd7e5c1ef602f6e576c224a9e61bdf76fe60fdc27dda8cd11d4d2179c64f3890079ee583d7983282a87ddabc5e6ebd90fc114bdfe558747f43522024f47798f3b20f168ce75226", 0x9f}, {&(0x7f00000045c0)="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", 0x1000}, {&(0x7f00000055c0)="46b99317aa45eeca6b4087d96e681e0a497bdbc8befeb8dc3d1c4a0cd13d3dce440de5bb1a7ae10a7edd5ad4364d123134a8b02cb72271c28ca08af3f13962828d92e18d6e09baa5f1fbaa1340e53d36", 0x50}, {&(0x7f0000005640)="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", 0x1000}, {&(0x7f0000006640)="8eee96cbaef9a450e03a5e9e23879014444bb0612793101b77622d66eb661c48ed4f622ffaa340a0f7ae20e80f6df5990b9aea789d09e5f7d9d2a94d4c767f89a685b2f02e8fd2f1f53a3701e467b2f1188aa9eaa51a64b1b3238e6615c1a4da75c2094e5bfe72607086a9816139b09ecc2f2ad6af5da8f155c7161ef3599345677b53c077344001fa5df386302d664d477b6672bb310226dfa6186a81b8a4ef29e46348bee06fe85b3231d6e873a21388fd0bc2c0015139e0997957dfc039a6650ffbcb142451d45e95cbe756dcc32e04bc8f212a77f78a8d2039a6e69e10c610ee24846dae6025c6522159ca0cb65631cf0a1fd561fd02", 0xf8}, {&(0x7f0000006740)}, {&(0x7f0000006780)="4a212f73b5d6d076a9b2d5bb364416c2e9b2db284e0152fe480bb937bb11564436a097ce8067257f61ac271a9328fa853a2066d3825da04eb83a442f2b5808f62543b6bbd0792ea51f4c3f548577594a2292243543e867", 0x57}, {&(0x7f0000006800)="81469e74f7c629163dcd156d3c132d7d089a1844ce179b356397a9f475cfd2428c8fa269f458b5e24d146e9e47ded71e7baf0131584b207e754c6f2a1fdc90cfdbc7875b20605da69b8ae570a13a1a8430361f6b96799e14efa70c87d0a3221de0f5a53353185f55cda2c0f3e22b479d2f37b05cd5024b94f7c49782d4a8cdef00dfb34b1fd40d9885da3f5747606409d9c0ab741d94edb05c6d2f3b22e30ccaa795a738a3", 0xa5}, {&(0x7f00000068c0)="bd59400341224d782be723e07a5f06f40a3666ed1390b8755e1b7474fd245ce8dcde0b569b539c4d6f50a6435f7aa1b6fe6e40be71712e56ed810a94028f41bc3bf9431f7be5a083288486b42a5c615a12804bc075d648cee4b35b2d66f542b081ba00f2e10bdc50e0dfe4c1fc88da6e61ee2f3c014c2ea5df360103abeb5f8985c5c6a498b66fcaf1ac78b2d7eaf1c07c378c0ba82cd5b0f124fd4da8d8d5c703283c9dbaf1cd860a12c96cc2d351753044748a8b06ebcea8bf9d342c3a5413d7f8f66885430392a38a77066d03b72b84f77870518a1d9c644655a4b56948b3104b840eb614a9c74cf366", 0xeb}], 0x9, &(0x7f0000006a80)=[@dstopts_2292={{0x60, 0x29, 0x4, {0x0, 0x8, [], [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x4}, @jumbo={0xc2, 0x4, 0x100}, @hao={0xc9, 0x10, @mcast2}, @ra={0x5, 0x2, 0x8}, @enc_lim, @jumbo={0xc2, 0x4, 0x9}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, [], 0x27}}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x8}}, @hopopts_2292={{0x140, 0x29, 0x36, {0x88, 0x24, [], [@generic={0xff, 0xcd, "93de2a6da9f68ce27040b1a523f2ae6cd297f4a90edbd5a1b9e5728c4619188178e7b59ab3c30f0c747d90cdc8571c371e891d8a1bf771ef50a81ed9cfbc53f02a1796889bf13b063228713de15554bb62f855bf735efb88e50cc65d082367f250f0b4f91d0581a8fc2ea87c4cb1bbb1c7791504769b5798cb6af9fc4710a42a2a974fcca987c132ece98f4346b2b19db983f468c0036c4cc870b7aa81ed6b375885902145f46c5e22e6043ff396c04e29a9984c6677adefd6e7beff7f75a3ea47e4848fd44e8644d62bbedff9"}, @jumbo={0xc2, 0x4, 0xde0}, @calipso={0x7, 0x40, {0x2, 0xe, 0x75, 0xff, [0xffffffff00000000, 0x3, 0x853a, 0x1, 0x96, 0x0, 0x14]}}, @enc_lim, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}], 0x1b8}}], 0x5, 0x0) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000380)) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x22140}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) [ 1505.772783] TPR Threshold = 0x00 [ 1505.776151] EPT pointer = 0x00000000a543401e [ 1505.780680] Virtual processor ID = 0x0003 15:45:26 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x80000001, 0x0) 15:45:26 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r3, &(0x7f0000000180)='.//ile0\x00', r3, &(0x7f00000007c0)='./file0/f.le.\x00') r4 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000540)=ANY=[], &(0x7f0000000400)) ioctl$DRM_IOCTL_AUTH_MAGIC(r4, 0x40046411, &(0x7f0000000080)=0x5) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:26 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x80000001, 0x0) 15:45:26 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r3, 0x0, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r4, 0x0, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r5, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="f0ca9a0000a927b18901", @ANYPTR=&(0x7f0000001480)=ANY=[@ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRESDEC, @ANYRESOCT=r3], @ANYBLOB="3564d892642451486625a07810abe91a1d4a45dfba8418269e128fc31792cae137fc9366b15260079308480e4120cba8c25760e5fb4348b71aa75a9a54476e22a6c0951b33effb8ba8fe6bbc312e34d5ea2832f41db11c06de7a71199f95d120daf20240bc7b4f96231290b1efbd1d0bf313e869821fa3942d132519368b247b29d6b8b3f24134e34d95dc877ea896795712a6c41fdb70f185bd1c1763867aba74150bccb99783e3b949762cbe413ab19f5585740ef69d9d9dddfc26aef22b031f9800471ea8980e703cff81ba3eb95c83cf9ed50bbc479288", @ANYRESHEX=r1, @ANYRESDEC, @ANYPTR=&(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYPTR=&(0x7f0000000180)=ANY=[@ANYRESDEC=r5], @ANYRES16=0x0, @ANYPTR, @ANYRESHEX]]], 0x12) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:26 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x80000001, 0x0) 15:45:26 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$binfmt_elf64(r5, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x0, 0x37, 0x3, 0x1, 0x2, 0x3e, 0x7ff, 0x15f, 0x40, 0x344, 0x90bb, 0x3c2, 0x38, 0x1, 0x800, 0x4, 0x9}, [{0x4, 0x8100, 0x0, 0x2, 0x2, 0x3, 0x7, 0x4}], "a4a76a455dbf46931624da73e997cfab2c36af2544ab4acd86fd7007fc3dd3c49b2db2a45dd0a8dc8db421c7e62c3b48ed56ec090910fb3bec17e5c0464631f2395f72eb80eab43d5c738148f54377c11855f9ec033b68f51817ae99f10b1f036a188d881faf7be858bbf76cf7665a099a459745fa43976eeeeff293b74a48b0efcf94720a242b1687eb07390c5ffeed", [[], [], [], [], [], [], []]}, 0x808) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r6, 0x110, 0x3) [ 1506.255060] *** Guest State *** [ 1506.265724] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1506.276313] *** Guest State *** [ 1506.276843] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1506.279732] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1506.279834] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1506.291492] CR3 = 0x00000000fffbc000 [ 1506.305897] CR3 = 0x00000000fffbc000 [ 1506.310382] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 1506.315757] RSP = 0x00000000000004cb RIP = 0x0000000000000000 [ 1506.316802] RFLAGS=0x00022142 DR7 = 0x0000000000000400 [ 1506.336689] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1506.337649] RFLAGS=0x00022142 DR7 = 0x0000000000000400 [ 1506.344457] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1506.359715] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1506.365273] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1506.369254] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1506.381083] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1506.385236] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1506.396603] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1506.402049] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1506.402081] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1506.402147] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1506.402232] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1506.402282] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1506.402363] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1506.402467] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1506.402500] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1506.402531] Interruptibility = 00000000 ActivityState = 00000000 [ 1506.402600] *** Host State *** [ 1506.402702] RIP = 0xffffffff8117a4e0 RSP = 0xffff88803b557998 [ 1506.402806] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1506.403061] FSBase=00007fc3fc826700 GSBase=ffff8880aec00000 TRBase=fffffe0000003000 [ 1506.403109] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 1506.403161] CR0=0000000080050033 CR3=000000005b5dc000 CR4=00000000001426f0 [ 1506.403227] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff868018e0 [ 1506.403379] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1506.403403] *** Control State *** [ 1506.403412] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000e2 [ 1506.403438] EntryControls=0000d1ff ExitControls=002fefff [ 1506.403531] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1506.403557] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1506.403632] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1506.403663] reason=80000021 qualification=0000000000000000 [ 1506.416874] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1506.420939] IDTVectoring: info=00000000 errcode=00000000 [ 1506.429369] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1506.438612] TSC Offset = 0xfffffcd689097539 [ 1506.451711] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1506.455679] EPT pointer = 0x00000000a0f6a01e [ 1506.475363] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1506.478021] Virtual processor ID = 0x0002 [ 1506.516956] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1506.604422] *** Guest State *** [ 1506.639963] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1506.645747] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1506.649739] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1506.657559] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1506.657578] CR3 = 0x00000000fffbc000 [ 1506.657584] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 1506.657658] RFLAGS=0x00022142 DR7 = 0x0000000000000400 [ 1506.657709] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1506.657742] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1506.657844] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1506.657913] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1506.657980] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1506.658701] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1506.682014] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1506.688245] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1506.693596] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1506.698798] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1506.712483] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1506.717497] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1506.729216] Interruptibility = 00000000 ActivityState = 00000000 [ 1506.733908] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1506.747172] *** Host State *** [ 1506.750563] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1506.750571] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1506.750581] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1506.750588] Interruptibility = 00000000 ActivityState = 00000000 [ 1506.750591] *** Host State *** [ 1506.750601] RIP = 0xffffffff8117a4e0 RSP = 0xffff88803b557998 [ 1506.750617] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1506.750625] FSBase=00007fc3fc826700 GSBase=ffff8880aec00000 TRBase=fffffe0000003000 [ 1506.750634] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 1506.750645] CR0=0000000080050033 CR3=000000005b5dc000 CR4=00000000001426f0 [ 1506.750657] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff868018e0 [ 1506.750666] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1506.750669] *** Control State *** [ 1506.750676] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000e2 [ 1506.750681] EntryControls=0000d1ff ExitControls=002fefff [ 1506.750692] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1506.750698] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1506.750704] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1506.750709] reason=80000021 qualification=0000000000000000 [ 1506.750714] IDTVectoring: info=00000000 errcode=00000000 [ 1506.750719] TSC Offset = 0xfffffcd64e3eed2e [ 1506.750730] EPT pointer = 0x000000009b6b101e [ 1506.750738] Virtual processor ID = 0x0002 [ 1506.964093] RIP = 0xffffffff8117a4e0 RSP = 0xffff88800ead7998 [ 1506.971128] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1506.979850] FSBase=00007f8194ae5700 GSBase=ffff8880aed00000 TRBase=fffffe0000003000 [ 1506.988223] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 1506.994521] CR0=0000000080050033 CR3=00000000484cb000 CR4=00000000001426e0 [ 1507.002109] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff868018e0 [ 1507.008839] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1507.015972] *** Control State *** [ 1507.019490] PinBased=0000003f CPUBased=b6a1edfa SecondaryExec=000000e3 [ 1507.026323] EntryControls=0000d1ff ExitControls=002fefff [ 1507.032101] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1507.039102] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1507.046030] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1507.053058] reason=80000021 qualification=0000000000000000 15:45:27 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040041}, 0x4000000) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000300)=""/70) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="88000000000000003a00000006000000b77f7727ada84be8835cc554ced0ab7bbea2ba700fe9cf0a1f18455215088d0b2d1491e1c79e489fd56a4c3812beae6b8caea219031f05461c4da1e2ec720aa4c64239aea16ca891f63a9ba047f1bcd964a907561ef54176beebd3511c567db1770e1f75b0cc4f6400ed59466d38000000000000001401000007000000c5ce8be5985f4fdd7c859b3e44c6dcf843796e18eb8dd4385fa12b27bf15d1245000"/192], 0xc0}, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r4, 0x0, 0x48c, &(0x7f0000000480)={0x0, 'veth1_macvtap\x00', 0x2}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/user\x00', 0x2, 0x0) r6 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f0000000540)=ANY=[], &(0x7f0000000400)) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r7, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x10, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) accept(r7, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc0205647, &(0x7f0000000440)={0x9a0000, 0x3, 0x3, r7, 0x0, &(0x7f0000000400)={0x9a0914, 0x7c0, [], @string=&(0x7f00000003c0)=0x8}}) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r8, &(0x7f0000000000)={0x1a, 0x10e, 0x0, 0x0, 0x0, 0xff, @remote}, 0x10) accept(r8, 0x0, 0x0) r9 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/dlm-control\x00', 0x3a800, 0x0) r10 = getpid() sched_setattr(r10, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x40}, 0x0) r11 = getpgrp(r10) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000500)={[], 0x6, 0x81, 0x1c7, 0x9, 0x7, r11}) r12 = fcntl$dupfd(r8, 0x406, r5) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000540)=ANY=[], &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r5, &(0x7f0000000180)='.//ile0\x00', r5, &(0x7f00000007c0)='./file0/f.le.\x00') r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r6, 0x0, 0x0) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000280)={0x7fffffff, 0x4, 0x4, 0x2000, 0xee95, {r3, r4/1000+10000}, {0x4, 0x0, 0x0, 0x0, 0x6, 0xe7, "5569f959"}, 0x7fff, 0x2, @fd=r5, 0x101, 0x0, r6}) setsockopt$CAN_RAW_JOIN_FILTERS(r7, 0x65, 0x6, &(0x7f0000000100)=0x1, 0x4) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r9 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r10, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f00) r11 = creat(&(0x7f0000000140)='./file0\x00', 0x42) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) r13 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r13, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r12, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, r14}, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r11, 0x84, 0x22, &(0x7f0000000180)={0x2, 0x6, 0x0, 0xffffffff, r14}, 0x10) getsockopt$inet_sctp6_SCTP_MAXSEG(r10, 0x84, 0xd, &(0x7f0000000300)=@assoc_value={r14, 0x7}, &(0x7f0000000340)=0x8) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r9, 0xc1205531, 0x0) write$uinput_user_dev(r9, &(0x7f00000003c0)={'syz0\x00', {0x7, 0x5, 0x4, 0x248}, 0x55, [0x0, 0xc00, 0x7b, 0x7fffffff, 0xda8, 0x8001, 0x8001, 0x6, 0x3, 0x5, 0x80, 0x5, 0x1, 0x0, 0x7ff, 0x9, 0x0, 0x5, 0x5496, 0x81, 0x3, 0x0, 0x4, 0x8, 0x0, 0x0, 0x5, 0x1f, 0x4, 0x7, 0x5, 0x0, 0x9, 0x20, 0x0, 0x22a7, 0x0, 0x2, 0x0, 0x4, 0x80000001, 0x9, 0x306e, 0x0, 0x7, 0x4, 0xfffffffe, 0xe8ef, 0x5, 0x6, 0x81, 0x401, 0x9, 0x9, 0x9, 0x114, 0x5, 0x0, 0x0, 0x9, 0x0, 0xffffff4c, 0x401], [0x0, 0x0, 0x7, 0x1, 0x8, 0xfe0c, 0x1, 0x7fff, 0x1faa7c2c, 0x2, 0x200, 0x40, 0x5, 0x5, 0x0, 0x3, 0x6, 0x7, 0xffffffff, 0x3, 0x1, 0xfffffffd, 0x4, 0x6b88, 0x8, 0x20, 0x8, 0x3, 0x10001, 0x10000, 0xb3d8, 0x0, 0x4000, 0xffffffe1, 0x3, 0x2, 0x2954, 0x8, 0x6045, 0xffffff4f, 0x8, 0x1, 0x4, 0x80000000, 0x1, 0xffffe16d, 0x2, 0xa8f, 0x2, 0x101, 0x4, 0x8, 0x1, 0x7, 0x100, 0x5, 0x6, 0x8000, 0x7, 0x8, 0x8001, 0x5fa3, 0x7, 0x5e], [0xffffffff, 0x9, 0xfffffffd, 0x26bc, 0x800, 0xffff7fff, 0x80, 0x7f, 0x892, 0x0, 0x0, 0x2, 0x9, 0x1ff, 0x10001, 0x9, 0x6, 0x8, 0x10001, 0x4, 0x3, 0x8aeb, 0xffffffff, 0x7, 0x80000000, 0x20, 0x1000, 0x23, 0x7, 0x101, 0x1, 0x10001, 0x8, 0x0, 0x4, 0x80000001, 0xc8, 0xfffff536, 0x736fd575, 0x1, 0x5, 0x7fff, 0x1, 0x0, 0x0, 0x1, 0x4, 0xa170, 0xe5, 0x27d4ff6c, 0x0, 0x3ff, 0xb2, 0x1ff, 0x8a, 0x3, 0x78, 0x1, 0x1d, 0x7f, 0x6, 0x7fc8a33f, 0x910, 0x1f], [0x5c, 0x7f, 0x7ff, 0xc4, 0x7fff, 0x7, 0x8, 0x81, 0x0, 0xfffffc00, 0x6, 0x5, 0x3, 0x0, 0x7, 0x0, 0x10000, 0xd1d, 0x80, 0x7fff, 0x800, 0x5e58, 0xffff019b, 0x8, 0x7, 0x4, 0x0, 0x0, 0x1, 0x2, 0x5, 0x80, 0xfff, 0x10001, 0x9, 0x0, 0x9, 0x401, 0xede8, 0x5, 0x10f, 0x1f, 0xffffffff, 0x2, 0x1f, 0x2, 0x9, 0x2, 0x3, 0x0, 0x8, 0x1, 0x6, 0x1, 0xfffffff8, 0x1, 0x8, 0xffff, 0x6, 0x1ffc00, 0x8, 0x0, 0x0, 0x6]}, 0x45c) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r15 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r15, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x22140}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$KVM_RUN(r15, 0xae80, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) 15:45:27 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 15:45:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, 0x0) ioctl$SG_SET_DEBUG(r1, 0x227e, &(0x7f0000000240)) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x80, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000080)=[@window={0x3, 0x7fff, 0x9ab3}], 0x1) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="d4000000", @ANYRES16=r5, @ANYBLOB="00032cbd7000fddbdf250c000000ac000580080001007564700014000280080002008100000008000200040000000800010065746800080001006574680014000280080001000400000008000100050000001c0002800800020006000000080003600700000008000300ff0700004400028008000300020000000800030003000000080004009702000008000300ff070000080001000a000000080001001300000008000300419b00000800020000cd000007000100696200001400068008000100010000800400020004000200"], 0xd4}, 0x1, 0x0, 0x0, 0xc000}, 0x800) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000280)={[0x0, 0x0, 0x3, 0x20, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2], 0x0, 0x22140}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 15:45:27 executing program 2: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) writev(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)="ee", 0xc}], 0x1) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x559302, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f00000000c0)=r3) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010002508000a0000000000000a0000008f9beb829f22b11800b4600070d87684b0", @ANYRES32=r6, @ANYBLOB="000000000000000008000a0018000000"], 0x28}}, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r8, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f00) r9 = creat(&(0x7f0000000140)='./file0\x00', 0x42) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="009efba1", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r10, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, r12}, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r9, 0x84, 0x22, &(0x7f0000000180)={0x2, 0x6, 0x0, 0xffffffff, r12}, 0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x66, &(0x7f0000000280)={r12, 0x80000000}, &(0x7f00000002c0)=0x8) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in6, @in6=@initdev}}, {{@in6=@ipv4}, 0x0, @in=@dev}}, &(0x7f0000000300)=0xe8) 15:45:27 executing program 0: futex(&(0x7f000000cffc), 0x180, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x200000, 0x0) futex(&(0x7f000000cffc), 0x85, 0x0, 0x0, &(0x7f0000048000), 0x5000000) [ 1507.059463] IDTVectoring: info=00000000 errcode=00000000 [ 1507.065108] TSC Offset = 0xfffffcd68e8063f6 [ 1507.069562] TPR Threshold = 0x00 [ 1507.073102] EPT pointer = 0x000000008092f01e [ 1507.077619] Virtual processor ID = 0x0003 15:45:27 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) [ 1507.139382] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 15:45:28 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="535e1fdfca24826514c717beaafc1637833f27132a7293002ff91ba9c96e5c75d48db99d12af9c39a0b4727916f808e9975c5eaed5eda53dd51137a6cb821b0c02eb67c359f51c8df995f878e6cedd7a6874c203fc"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:28 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) [ 1507.263754] *** Guest State *** [ 1507.267081] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1507.298518] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 15:45:28 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f2ca9aa9270000000000"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 1507.314181] CR3 = 0x00000000fffbc000 [ 1507.322977] RSP = 0x0000000000000004 RIP = 0x0000000000000000 [ 1507.334045] RFLAGS=0x00022142 DR7 = 0x0000000000000400 [ 1507.344493] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1507.352166] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 15:45:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r3, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f00) setsockopt$inet_dccp_int(r3, 0x21, 0x10, &(0x7f0000000000)=0x70000000, 0x4) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x40020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x22140}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) sched_setattr(r5, &(0x7f0000000180)={0x38, 0x3, 0x56, 0x400, 0x7fff, 0x8, 0x2, 0x8, 0x1, 0x5}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1507.375055] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1507.396117] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1507.404662] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 15:45:28 executing program 0: futex(&(0x7f000000cffc), 0x180, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") futex(&(0x7f000000cffc), 0x85, 0x0, 0x0, &(0x7f0000048000), 0x2) [ 1507.420264] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1507.434519] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1507.444181] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1507.453719] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1507.464250] IDTR: limit=0x0000ffff, base=0x0000000000000000 15:45:28 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a00890100000000"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 1507.475904] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1507.485030] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1507.492276] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1507.500646] Interruptibility = 00000000 ActivityState = 00000000 [ 1507.507343] *** Host State *** [ 1507.511347] RIP = 0xffffffff8117a4e0 RSP = 0xffff88804228f998 [ 1507.517797] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1507.527302] FSBase=00007fc3fc826700 GSBase=ffff8880aec00000 TRBase=fffffe0000003000 [ 1507.535653] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 1507.542313] CR0=0000000080050033 CR3=000000008f58e000 CR4=00000000001426f0 [ 1507.551596] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff868018e0 [ 1507.560410] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1507.567971] *** Control State *** [ 1507.573291] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000e2 [ 1507.581640] EntryControls=0000d1ff ExitControls=002fefff [ 1507.586044] *** Guest State *** [ 1507.588110] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1507.595972] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1507.598136] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1507.609962] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1507.614944] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1507.627184] CR3 = 0x00000000fffbc000 [ 1507.629716] reason=80000021 qualification=0000000000000000 [ 1507.633520] RSP = 0x00000000000004cb RIP = 0x0000000000000000 [ 1507.643966] IDTVectoring: info=00000000 errcode=00000000 [ 1507.652064] TSC Offset = 0xfffffcd5f3376a7e [ 1507.656732] EPT pointer = 0x0000000055c9e01e [ 1507.663738] RFLAGS=0x00022142 DR7 = 0x0000000000000400 [ 1507.669843] Virtual processor ID = 0x0002 [ 1507.675112] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1507.698231] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1507.717150] *** Guest State *** [ 1507.728957] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1507.736376] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1507.743819] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1507.755785] CR3 = 0x00000000fffbc000 [ 1507.759077] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1507.763336] RSP = 0x0000000000000004 RIP = 0x0000000000000000 [ 1507.771572] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1507.773840] RFLAGS=0x00022142 DR7 = 0x0000000000000400 [ 1507.786640] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1507.788424] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1507.796351] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1507.803099] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1507.816133] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1507.819323] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1507.827892] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1507.835876] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1507.848428] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1507.852228] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1507.860542] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1507.868373] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1507.878024] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1507.888726] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1507.891427] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1507.899279] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1507.907735] Interruptibility = 00000000 ActivityState = 00000000 [ 1507.919114] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1507.921661] *** Host State *** [ 1507.929679] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1507.933556] RIP = 0xffffffff8117a4e0 RSP = 0xffff88800ead7998 [ 1507.946108] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1507.947423] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1507.955500] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1507.962519] FSBase=00007f8194ac4700 GSBase=ffff8880aed00000 TRBase=fffffe0000003000 [ 1507.970479] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1507.976589] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 1507.988278] Interruptibility = 00000000 ActivityState = 00000000 [ 1507.990209] CR0=0000000080050033 CR3=0000000045a47000 CR4=00000000001426e0 [ 1508.004097] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1508.004432] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff868018e0 [ 1508.014721] *** Host State *** [ 1508.019657] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1508.026431] RIP = 0xffffffff8117a4e0 RSP = 0xffff88804228f998 [ 1508.029033] *** Control State *** [ 1508.036031] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1508.038605] PinBased=0000003f CPUBased=b6a1edfa SecondaryExec=000000e3 [ 1508.049061] FSBase=00007fc3fc826700 GSBase=ffff8880aed00000 TRBase=fffffe0000034000 [ 1508.052204] EntryControls=0000d1ff ExitControls=002fefff [ 1508.065688] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1508.066210] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 1508.073923] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1508.079310] CR0=0000000080050033 CR3=000000008f58e000 CR4=00000000001426e0 [ 1508.085957] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1508.097051] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff868018e0 [ 1508.099554] reason=80000021 qualification=0000000000000000 [ 1508.106367] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1508.112680] IDTVectoring: info=00000000 errcode=00000000 [ 1508.123017] *** Control State *** [ 1508.126639] TSC Offset = 0xfffffcd5cfa34824 [ 1508.132974] TPR Threshold = 0x00 [ 1508.136510] EPT pointer = 0x0000000093ffe01e [ 1508.139370] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000e2 [ 1508.146544] Virtual processor ID = 0x0003 [ 1508.153844] EntryControls=0000d1ff ExitControls=002fefff [ 1508.166709] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 15:45:29 executing program 5 (fault-call:8 fault-nth:0): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:29 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r5 = getuid() r6 = socket$kcm(0x29, 0x2, 0x0) close(r6) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r7, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x1}) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000440)=0x284) setuid(r8) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0xffffff0f00000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x318, 0x0, 0x0, 0x0, 0x1b0, 0x1b0, 0x280, 0x280, 0x280, 0x280, 0x280, 0x3, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0x190, 0x1b0, 0x0, {}, [@common=@inet=@recent0={{0xf8, 'recent\x00'}, {0x0, 0x0, 0x2, 0x0, 'syz1\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x378) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) r12 = msgget$private(0x0, 0x0) msgsnd(r12, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x0) msgrcv(r12, &(0x7f00000000c0)={0x0, ""/147}, 0x9b, 0xd6d0c418f59fe7d3, 0x0) r13 = msgget$private(0x0, 0x0) msgsnd(r13, 0x0, 0x0, 0x0) msgrcv(r13, &(0x7f00000000c0)={0x0, ""/147}, 0x9b, 0xd6d0c418f59fe7d3, 0x0) fsetxattr$system_posix_acl(r6, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000900)=ANY=[@ANYBLOB="0200000001000c00000000000200", @ANYRES32, @ANYBLOB="8cb5037124333ca70efcc21f9e50e48d8db26b81aa63b10a64527b77c1d953", @ANYRES32=r8, @ANYRESHEX, @ANYRES32, @ANYBLOB="bc75dcf8", @ANYRES32, @ANYPTR=0xfffffffffffffffd, @ANYRES32, @ANYBLOB="040003000000000008000000", @ANYRES32, @ANYBLOB="002200eeef8d73d06444ca074bc976ab2461b8d1a9658004af09cd557592c20138caa1b9f86d06461ea1e5b37e97d358b705381b45ce3ab4bb91a4996d8ebcdb31d86aa1f28a39ed2c368f4a0fd123fd1d948f5b2de69da993164aff581b90e5356eac82d3ae30f425c9d9747f476d390e55aa42c756de87d3850717a49f107ea5216ab50d6e805e1a33ac03b32025bba65e81", @ANYRES32=r10, @ANYBLOB="08000601", @ANYBLOB="080004", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYBLOB="9e146c82399e3e53c06e319c5feea15a7bd01ea19b40955de5b5de3f8800e4f7f4c0e91976e20fda20818053502903632b8a1c072695e150a72530258e239ec7b20ebde0cf91623ef4a3ceac", @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYPTR64=&(0x7f0000000b40)=ANY=[@ANYRESDEC=r9], @ANYPTR64=&(0x7f0000000480)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYRESOCT=r12, @ANYRES32=r13, @ANYPTR, @ANYPTR], @ANYPTR], @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="02000000", @ANYRES32, @ANYBLOB], 0x19, 0x0) r14 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r14, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r14, 0x0, 0x0) sendmsg$unix(r3, &(0x7f0000000300)={&(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000080)="533be15e628bdbeede0ff69e30e17a80ae8627ab08ea3f2cf4b12bb9f686", 0x1e}], 0x1, &(0x7f00000002c0)=[@cred={{0x1c, 0x1, 0x2, {r4, r5, r10}}}, @rights={{0x14, 0x1, 0x1, [r14]}}], 0x38, 0xc114}, 0x14) [ 1508.177407] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1508.186313] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1508.203893] reason=80000021 qualification=0000000000000000 [ 1508.212989] IDTVectoring: info=00000000 errcode=00000000 [ 1508.218460] TSC Offset = 0xfffffcd5b4b51f1c [ 1508.225429] EPT pointer = 0x000000005ce6f01e [ 1508.230674] Virtual processor ID = 0x0002 15:45:29 executing program 2: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x4e20, 0xfffffffd, @empty}, 0x80) writev(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)="ee", 0xc}], 0x1) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x559302, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f00000000c0)=r3) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$rtc(&(0x7f0000000240)='/dev/rtc#\x00', 0x65c5, 0x20000) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000005c0)={{{@in6, @in6=@initdev}}, {{@in6=@ipv4}, 0x0, @in=@dev}}, &(0x7f00000002c0)=0xca) [ 1508.279217] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 1508.316115] FAULT_INJECTION: forcing a failure. [ 1508.316115] name failslab, interval 1, probability 0, space 0, times 0 15:45:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r3, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f00) setsockopt$inet_dccp_int(r3, 0x21, 0x10, &(0x7f0000000000)=0x70000000, 0x4) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x40020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x22140}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) sched_setattr(r5, &(0x7f0000000180)={0x38, 0x3, 0x56, 0x400, 0x7fff, 0x8, 0x2, 0x8, 0x1, 0x5}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 15:45:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f00) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x42) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, r6}, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000180)={0x2, 0x6, 0x0, 0xffffffff, r6}, 0x10) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000280)={r6, @in6={{0xa, 0x4e20, 0x1ff, @rand_addr="930eea260d14ea51a7ad3b7ab4883447", 0x3ff}}}, 0x84) r7 = getpid() sched_setscheduler(r7, 0x5, &(0x7f0000000380)) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0)='NLBL_CIPSOv4\x00') r10 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000580)='keyring\x00', &(0x7f00000005c0)={'syz', 0x0}, 0x0, 0x0, r10) r11 = add_key$keyring(&(0x7f0000000800)='keyring\x00', &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, r10) r12 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r13 = add_key$keyring(&(0x7f0000000580)='keyring\x00', &(0x7f00000005c0)={'syz', 0x0}, 0x0, 0x0, r12) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, r13) r14 = add_key(&(0x7f0000000900)='big_key\x00', &(0x7f0000000940)={'syz', 0x0}, 0x0, 0x0, r13) keyctl$search(0xa, r11, &(0x7f0000000880)='cifs.spnego\x00', &(0x7f00000008c0)={'syz', 0x1}, r14) sendmsg$NLBL_CIPSOV4_C_REMOVE(r2, &(0x7f00000007c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000400)={0x354, r9, 0xa, 0x70bd27, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x158, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x69477a2b}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x43f2a79f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x36b208e0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x18030bd3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2c1241ae}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x47}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x61}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x380b829d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x765808db}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x18666802}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x31}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaa}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5a}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x31efe465}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x76}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x41a19c40}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6af472c2}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x21566779}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x227f6b33}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x749e9e70}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6bdce2a8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x84}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x69}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x50ca80d5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7bb73aab}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}, {0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xcc, 0x8, 0x0, 0x1, [{0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3b250e2a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1765ee81}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1b6d7cf5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x34052bbb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59987df5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc0}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4574d4d1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d982fe1}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1dfd47b6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x47e71356}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5a1f13e6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7bb1720d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xbc6fcb}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7d}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x11}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MLSCATLST={0x78, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9e40}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3ad43cf5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x265acc57}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8e00}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfeb0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xec93}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6e788b3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7f47b2c9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa2df}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8b18}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5991}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb38}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x58, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb4dc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4f57170b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4c24d725}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc216}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x514a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe597}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5d2b983b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x22258774}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbcde}]}]}]}, 0x354}, 0x1, 0x0, 0x0, 0x40050}, 0x4000800) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, 0x0) r15 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r15, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x22140}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_RUN(r15, 0xae80, 0x0) [ 1508.337743] CPU: 1 PID: 25705 Comm: syz-executor.5 Not tainted 4.14.167-syzkaller #0 [ 1508.345681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1508.355043] Call Trace: [ 1508.357646] dump_stack+0x142/0x197 [ 1508.361286] should_fail.cold+0x10f/0x159 [ 1508.365450] should_failslab+0xdb/0x130 [ 1508.369442] kmem_cache_alloc_node_trace+0x280/0x770 [ 1508.374563] ? release_sock+0x14a/0x1b0 [ 1508.378565] ? trace_hardirqs_on+0xd/0x10 [ 1508.382737] ? __local_bh_enable_ip+0x99/0x1a0 [ 1508.387337] __get_vm_area_node+0xf0/0x340 [ 1508.391572] __vmalloc_node_range+0x9f/0x6a0 [ 1508.396034] ? netlink_sendmsg+0x57c/0xc60 [ 1508.400253] ? __netlink_dump_start+0x740/0x740 [ 1508.405213] vmalloc+0x46/0x50 [ 1508.408397] ? netlink_sendmsg+0x57c/0xc60 [ 1508.412662] netlink_sendmsg+0x57c/0xc60 [ 1508.416755] ? netlink_unicast+0x650/0x650 [ 1508.420993] ? security_socket_sendmsg+0x89/0xb0 [ 1508.425748] ? netlink_unicast+0x650/0x650 [ 1508.429979] sock_sendmsg+0xce/0x110 [ 1508.433704] kernel_sendmsg+0x44/0x50 [ 1508.437518] sock_no_sendpage+0x107/0x130 [ 1508.441674] ? sock_kzfree_s+0x50/0x50 [ 1508.445576] ? perf_trace_lock+0x500/0x500 [ 1508.449680] *** Guest State *** [ 1508.449818] ? pipe_lock+0x63/0x80 [ 1508.453182] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1508.456629] kernel_sendpage+0x92/0xf0 [ 1508.456639] ? sock_kzfree_s+0x50/0x50 [ 1508.456653] sock_sendpage+0x8b/0xc0 [ 1508.466239] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1508.469388] ? kernel_sendpage+0xf0/0xf0 [ 1508.469401] pipe_to_sendpage+0x242/0x340 [ 1508.469412] ? direct_splice_actor+0x190/0x190 [ 1508.469425] __splice_from_pipe+0x348/0x780 [ 1508.469435] ? direct_splice_actor+0x190/0x190 [ 1508.469450] ? direct_splice_actor+0x190/0x190 [ 1508.469458] splice_from_pipe+0xf0/0x150 [ 1508.469471] ? splice_shrink_spd+0xb0/0xb0 [ 1508.469490] ? security_file_permission+0x89/0x1f0 [ 1508.469501] generic_splice_sendpage+0x3c/0x50 [ 1508.469510] ? splice_from_pipe+0x150/0x150 15:45:29 executing program 2: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) connect(r2, &(0x7f0000000740)=@ll={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x1, 0x13, 0x0, {}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "e3fef08864cf1eb6"}}, 0x48}}, 0x0) writev(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)="ee", 0xc}], 0x1) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x559302, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') prctl$PR_SVE_GET_VL(0x33, 0x1b8cf) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000002c0)={0x8001, 0xc, 0x4, 0x40000, 0x2, {r7, r8/1000+10000}, {0x1, 0x8, 0x7, 0x40, 0x77, 0x80, "1b0e53ea"}, 0x3, 0x4, @planes=&(0x7f0000000280)={0x6, 0xf0, @userptr=0x10000, 0x80}, 0x7fff, 0x0, r0}) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000480)={{{@in6=@empty, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f00000006c0)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r9, 0x8936, &(0x7f0000000700)={@dev={0xfe, 0x80, [], 0x11}, 0x9, r10}) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$TUNSETIFINDEX(r5, 0x400454da, &(0x7f00000000c0)=r11) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r14, @ANYBLOB="00f9ffffffffeeffff37b9c8876932314a7906136cfd7808040a000fba7748c17f17038fadc7ba5bb08b000000"], 0x28}}, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r15, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in6, @in6=@initdev}}, {{@in6=@ipv4}, 0x0, @in=@dev}}, &(0x7f0000000440)=0xe8) [ 1508.469521] SyS_splice+0xd92/0x1430 [ 1508.473688] CR3 = 0x00000000fffbc000 [ 1508.477125] ? __sb_end_write+0xc1/0x100 [ 1508.477148] ? compat_SyS_vmsplice+0x250/0x250 [ 1508.477158] ? do_syscall_64+0x53/0x640 [ 1508.477168] ? compat_SyS_vmsplice+0x250/0x250 [ 1508.477179] do_syscall_64+0x1e8/0x640 [ 1508.477189] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1508.477205] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1508.477217] RIP: 0033:0x45b349 [ 1508.487654] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 1508.490171] RSP: 002b:00007f8194ae4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1508.490184] RAX: ffffffffffffffda RBX: 00007f8194ae56d4 RCX: 000000000045b349 [ 1508.490191] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 1508.490196] RBP: 000000000075bf20 R08: 0000000080000001 R09: 0000000000000000 [ 1508.490201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 1508.490206] R13: 0000000000000b3e R14: 00000000004ccc7e R15: 0000000000000000 [ 1508.499550] syz-executor.5: [ 1508.505385] RFLAGS=0x00022142 DR7 = 0x0000000000000400 [ 1508.517150] vmalloc: allocation failure: 4224 bytes [ 1508.521814] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1508.526652] , mode:0x14000c0(GFP_KERNEL), nodemask= [ 1508.532030] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1508.541029] (null) [ 1508.544433] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1508.547667] syz-executor.5 cpuset= [ 1508.555900] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1508.573608] syz5 [ 1508.579563] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1508.586651] mems_allowed=0-1 [ 1508.593803] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1508.605414] CPU: 1 PID: 25705 Comm: syz-executor.5 Not tainted 4.14.167-syzkaller #0 [ 1508.608451] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1508.615194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1508.615198] Call Trace: [ 1508.615216] dump_stack+0x142/0x197 [ 1508.615234] warn_alloc.cold+0x96/0x1af [ 1508.615244] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 1508.615254] ? release_sock+0x14a/0x1b0 [ 1508.615264] ? trace_hardirqs_on+0xd/0x10 [ 1508.615275] ? __local_bh_enable_ip+0x99/0x1a0 [ 1508.615291] ? __get_vm_area_node+0x27f/0x340 [ 1508.615306] __vmalloc_node_range+0x3c3/0x6a0 [ 1508.615317] ? __netlink_dump_start+0x740/0x740 [ 1508.615331] vmalloc+0x46/0x50 [ 1508.615341] ? netlink_sendmsg+0x57c/0xc60 [ 1508.615350] netlink_sendmsg+0x57c/0xc60 [ 1508.615366] ? netlink_unicast+0x650/0x650 [ 1508.615379] ? security_socket_sendmsg+0x89/0xb0 [ 1508.615389] ? netlink_unicast+0x650/0x650 [ 1508.615402] sock_sendmsg+0xce/0x110 [ 1508.615414] kernel_sendmsg+0x44/0x50 [ 1508.615426] sock_no_sendpage+0x107/0x130 [ 1508.623101] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1508.629961] ? sock_kzfree_s+0x50/0x50 [ 1508.629973] ? perf_trace_lock+0x500/0x500 [ 1508.629994] ? pipe_lock+0x63/0x80 [ 1508.630009] kernel_sendpage+0x92/0xf0 [ 1508.630016] ? sock_kzfree_s+0x50/0x50 [ 1508.630027] sock_sendpage+0x8b/0xc0 [ 1508.630038] ? kernel_sendpage+0xf0/0xf0 [ 1508.630048] pipe_to_sendpage+0x242/0x340 [ 1508.630061] ? direct_splice_actor+0x190/0x190 [ 1508.630076] __splice_from_pipe+0x348/0x780 [ 1508.630086] ? direct_splice_actor+0x190/0x190 [ 1508.630101] ? direct_splice_actor+0x190/0x190 [ 1508.633675] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1508.639243] splice_from_pipe+0xf0/0x150 [ 1508.639258] ? splice_shrink_spd+0xb0/0xb0 [ 1508.639278] ? security_file_permission+0x89/0x1f0 [ 1508.639291] generic_splice_sendpage+0x3c/0x50 [ 1508.639300] ? splice_from_pipe+0x150/0x150 [ 1508.639310] SyS_splice+0xd92/0x1430 [ 1508.639320] ? __sb_end_write+0xc1/0x100 [ 1508.639341] ? compat_SyS_vmsplice+0x250/0x250 [ 1508.639352] ? do_syscall_64+0x53/0x640 [ 1508.639364] ? compat_SyS_vmsplice+0x250/0x250 [ 1508.639379] do_syscall_64+0x1e8/0x640 [ 1508.644764] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1508.651038] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1508.651059] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1508.651067] RIP: 0033:0x45b349 [ 1508.651073] RSP: 002b:00007f8194ae4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1508.651083] RAX: ffffffffffffffda RBX: 00007f8194ae56d4 RCX: 000000000045b349 [ 1508.651089] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 1508.651094] RBP: 000000000075bf20 R08: 0000000080000001 R09: 0000000000000000 [ 1508.651099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 15:45:29 executing program 2: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) writev(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)="ee", 0xc}], 0x1) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x559302, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f00000000c0)=r4) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r7}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000340)={{{@in6, @in6=@initdev}}, {{@in6=@ipv4}, 0x0, @in=@dev}}, &(0x7f0000000440)=0xe8) [ 1508.651104] R13: 0000000000000b3e R14: 00000000004ccc7e R15: 0000000000000000 [ 1508.659400] Mem-Info: [ 1508.665998] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1508.666756] active_anon:317218 inactive_anon:205 isolated_anon:0 [ 1508.666756] active_file:17693 inactive_file:19754 isolated_file:0 [ 1508.666756] unevictable:0 dirty:175 writeback:0 unstable:0 [ 1508.666756] slab_reclaimable:15960 slab_unreclaimable:136996 [ 1508.666756] mapped:60731 shmem:252 pagetables:4823 bounce:0 [ 1508.666756] free:1017769 free_pcp:227 free_cma:0 [ 1508.675276] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1508.682878] Node 0 active_anon:1268872kB inactive_anon:820kB active_file:70628kB inactive_file:79016kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:242924kB dirty:696kB writeback:0kB shmem:1008kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 524288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1508.687246] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 15:45:29 executing program 0: futex(&(0x7f000000cffc), 0x180, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r1, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$TCSETX(r2, 0x5433, &(0x7f0000000000)={0x1, 0x1, [0x6, 0x16, 0x2, 0x7ff, 0x1000], 0x8001}) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f0000000040)=""/28) futex(&(0x7f000000cffc), 0x85, 0x0, 0x0, &(0x7f0000048000), 0x5000000) [ 1508.699626] Node 1 active_anon:0kB inactive_anon:0kB active_file:144kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1508.707122] Interruptibility = 00000000 ActivityState = 00000000 [ 1508.726060] Node 0 [ 1508.739606] *** Host State *** [ 1508.744274] DMA free:15908kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1508.757640] RIP = 0xffffffff8117a4e0 RSP = 0xffff8880585ef998 [ 1508.763225] lowmem_reserve[]: [ 1508.781591] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1508.784023] 0 [ 1508.788306] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1508.792452] 2569 [ 1508.808327] FSBase=00007fc3fc805700 GSBase=ffff8880aec00000 TRBase=fffffe0000003000 [ 1508.809218] 2569 [ 1508.816653] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 1508.822934] 2569 [ 1508.827542] CR0=0000000080050033 CR3=00000000a64fd000 CR4=00000000001426f0 [ 1508.830169] 2569 [ 1508.836794] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff868018e0 [ 1508.841772] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1508.845557] Node 0 [ 1508.852363] *** Control State *** [ 1508.854015] DMA32 free:270304kB min:36380kB low:45472kB high:54564kB active_anon:1271056kB inactive_anon:820kB active_file:70628kB inactive_file:79016kB unevictable:0kB writepending:688kB present:3129332kB managed:2634340kB mlocked:0kB kernel_stack:12544kB pagetables:19188kB bounce:0kB free_pcp:752kB local_pcp:676kB free_cma:0kB [ 1508.858976] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000e2 [ 1508.863009] lowmem_reserve[]: 0 0 0 0 0 [ 1508.863036] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1508.863056] lowmem_reserve[]: 0 0 0 0 0 [ 1508.863081] Node 1 Normal free:3781820kB min:53508kB low:66884kB high:80260kB active_anon:0kB inactive_anon:0kB active_file:144kB inactive_file:0kB unevictable:0kB writepending:4kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:0kB pagetables:104kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1508.863103] lowmem_reserve[]: [ 1508.872476] EntryControls=0000d1ff ExitControls=002fefff [ 1508.881542] 0 0 0 0 0 [ 1508.881568] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 1508.881649] Node 0 DMA32: 1610*4kB (UME) 680*8kB (E) 417*16kB (UME) 965*32kB (UME) 1353*64kB (UME) 136*128kB (UME) [ 1508.905731] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1508.908370] 32*256kB [ 1508.915786] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1508.917212] (UME) [ 1508.926970] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1508.929936] 12*512kB 15:45:30 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="f0ca9a0000a927b189016e39cbba87f099f9c541d4357f59803e168b1598d9107b34e87b44088339784c3fff1e33e85535c8e873a72cbc5b533c80e1a662cd24c843283ddf17e10000c4c05550659bd819fd017c4cc2cc97a99f7eda444bd282045f8141d4fc52438f4ae0fb0467384ab8f210775bc2b54738cab36b009e8fbd584c3eba00c445deba44a6725fbbe3074ba84450fa58ad0983d36379fca2846cbf1cb53e6e166be27ed832"], 0xa) close(r2) r3 = socket(0x4, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r4, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f00) r5 = creat(&(0x7f0000000140)='./file0\x00', 0x42) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f00000002c0)=ANY=[@ANYBLOB="01006d74dffaf9246faa30bde57773ef6360db7a7644e19d67702b6d0e8050e0fc5036923b2be9e94edc758b29bae1e34eabb21f461cdef34bff3bf0a2d8c56804e164611e10d0f83252bd9972b738c514d680fe6efee89b6a931becbb5f7a6cbbecbdbcaa548405d775fc916a2862514fd8346300"/131, @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, r8}, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000180)={0x2, 0x6, 0x0, 0xffffffff, r8}, 0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000080)={r8, 0x100}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f00000001c0)={r9, 0xc000}, 0x8) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = fcntl$dupfd(r10, 0x0, r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) r12 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r12, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r12, 0x0, 0x0) r13 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r13, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r13, 0x0, 0x0) r14 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r14, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r14, 0x0, 0x0) r15 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r15, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r15, 0x0, 0x0) r16 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r16, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r16, 0x0, 0x0) r17 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r17, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r17, 0x0, 0x0) poll(&(0x7f0000000380)=[{r12}, {r13, 0x111}, {r1, 0x8000}, {r14, 0xb492}, {r15, 0x80}, {r16, 0x400}, {r17, 0x8006}], 0x7, 0x8) r18 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r18) ioctl$KVM_DEASSIGN_PCI_DEVICE(r11, 0x4040ae72, &(0x7f0000000240)={0x0, 0x9, 0x641, 0x8, 0x4}) [ 1508.938636] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1508.943210] (M) 14*1024kB (UME) 19*2048kB (UM) 12*4096kB (M) = 270168kB [ 1508.943244] Node 0 Normal: 0*4kB 0*8kB 0*16kB [ 1508.953651] reason=80000021 qualification=0000000000000000 [ 1508.959848] 0*32kB [ 1508.987765] IDTVectoring: info=00000000 errcode=00000000 [ 1508.992530] 0*64kB [ 1509.003325] TSC Offset = 0xfffffcd55075e43a [ 1509.008152] 0*128kB [ 1509.046477] EPT pointer = 0x0000000093ba801e [ 1509.049259] 0*256kB [ 1509.085552] Virtual processor ID = 0x0002 [ 1509.119017] 0*512kB [ 1509.148072] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 1509.153859] 0*1024kB [ 1509.245621] *** Guest State *** [ 1509.282795] 0*2048kB [ 1509.466726] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1509.468269] 0*4096kB [ 1509.470837] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1509.478818] = 0kB [ 1509.491984] Node 1 Normal: 25*4kB (UM) 369*8kB (UE) 285*16kB (UE) 64*32kB (UM) 16*64kB (UME) 10*128kB (U) 4*256kB (UM) 3*512kB (U) 1*1024kB (M) 5*2048kB (UME) 917*4096kB (M) = 3781820kB [ 1509.502709] CR3 = 0x00000000fffbc000 [ 1509.513009] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1509.518549] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 1509.522343] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1509.528758] RFLAGS=0x00022142 DR7 = 0x0000000000000400 [ 1509.537304] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1509.549500] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1509.559260] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1509.568772] 37710 total pagecache pages [ 1509.573218] 0 pages in swap cache [ 1509.576822] Swap cache stats: add 0, delete 0, find 0/0 [ 1509.582893] Free swap = 0kB [ 1509.586166] Total swap = 0kB 15:45:30 executing program 2: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) writev(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)="ee", 0xc}], 0x1) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x559302, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f00000000c0)=r4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0)='nl80211\x00') sendmsg$NL80211_CMD_DEL_INTERFACE(r1, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)={0x78, r5, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0x4}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'dummy0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1_virt_wifi\x00'}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0x3}}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'bond0\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x804) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) setsockopt$inet_msfilter(r9, 0x0, 0x29, &(0x7f0000000540)={@rand_addr=0x5, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x3, [@dev={0xac, 0x14, 0x14, 0xf}, @empty, @empty]}, 0x1c) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in6, @in6=@initdev}}, {{@in6=@ipv4}, 0x0, @in=@dev}}, &(0x7f0000000440)=0xe8) r11 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r11, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r11, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r12, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f00) getsockopt$EBT_SO_GET_INIT_INFO(r12, 0x0, 0x82, &(0x7f00000005c0)={'broute\x00'}, &(0x7f0000000640)=0x78) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000240)={'batadv0\x00'}) [ 1509.594783] 1965979 pages RAM [ 1509.601409] 0 pages HighMem/MovableOnly [ 1509.609968] 335869 pages reserved [ 1509.617500] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1509.618760] 0 pages cma reserved [ 1509.633061] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 15:45:30 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r3, &(0x7f0000000180)='.//ile0\x00', r3, &(0x7f00000007c0)='./file0/f.le.\x00') syz_mount_image$nfs4(&(0x7f0000000000)='nfs4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)='tcp\x00') ioctl$UI_BEGIN_FF_ERASE(r3, 0xc00c55ca, &(0x7f0000000180)={0x0, 0x0, 0x9}) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0xa0003, 0x0) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r3, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f00) setsockopt$inet_dccp_int(r3, 0x21, 0x10, &(0x7f0000000000)=0x70000000, 0x4) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x40020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x22140}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) sched_setattr(r5, &(0x7f0000000180)={0x38, 0x3, 0x56, 0x400, 0x7fff, 0x8, 0x2, 0x8, 0x1, 0x5}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1509.645796] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1509.655620] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1509.668324] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1509.678434] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1509.688257] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1509.706969] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1509.726391] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1509.739729] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1509.748571] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1509.756051] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1509.767749] Interruptibility = 00000000 ActivityState = 00000000 [ 1509.775919] *** Host State *** [ 1509.786900] RIP = 0xffffffff8117a4e0 RSP = 0xffff8880585ef998 [ 1509.799130] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 15:45:30 executing program 0: futex(&(0x7f000000cffc), 0x81, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080d5e0bcff96970710000") socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r3, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f00) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000040)={{{@in=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@dev}}, &(0x7f0000000180)=0xe8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer\x00', 0x20000, 0x0) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000200)={@dev={0xfe, 0x80, [], 0x2c}, r4}, 0x14) sendmsg(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) setsockopt$netrom_NETROM_IDLE(r2, 0x103, 0x7, &(0x7f0000000000)=0x1, 0x4) futex(&(0x7f000000cffc), 0x85, 0x0, 0x0, &(0x7f0000048000), 0x5000000) 15:45:30 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9ae800a9f8253fec"], 0xa) close(r2) socket(0x10, 0x3, 0x4) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 1509.810642] FSBase=00007fc3fc805700 GSBase=ffff8880aec00000 TRBase=fffffe0000003000 [ 1509.825568] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 1509.833833] CR0=0000000080050033 CR3=00000000a64fd000 CR4=00000000001426f0 [ 1509.845097] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff868018e0 [ 1509.854624] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1509.861845] *** Control State *** [ 1509.867288] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000e2 [ 1509.874849] EntryControls=0000d1ff ExitControls=002fefff [ 1509.881363] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1509.888475] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1509.896009] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1509.905953] reason=80000021 qualification=0000000000000000 [ 1509.918284] IDTVectoring: info=00000000 errcode=00000000 [ 1509.922727] selinux_nlmsg_perm: 245 callbacks suppressed [ 1509.922738] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=25770 comm=syz-executor.5 [ 1509.928515] TSC Offset = 0xfffffcd4e329d67b [ 1509.937664] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=25770 comm=syz-executor.5 [ 1509.942417] EPT pointer = 0x00000000a9f0d01e 15:45:30 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x22140}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 1509.948274] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=25770 comm=syz-executor.5 [ 1509.959183] Virtual processor ID = 0x0002 [ 1509.968842] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=25770 comm=syz-executor.5 [ 1510.001007] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=25770 comm=syz-executor.5 [ 1510.018177] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=25770 comm=syz-executor.5 [ 1510.041143] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=25770 comm=syz-executor.5 [ 1510.058240] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=25770 comm=syz-executor.5 [ 1510.072553] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=25770 comm=syz-executor.5 [ 1510.086661] *** Guest State *** [ 1510.089981] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1510.091344] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=25770 comm=syz-executor.5 15:45:30 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x200, 0x0) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)={0x64, 0xb, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_DATA={0x50, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x1}, @IPSET_ATTR_COMMENT={0xf, 0x1a, '/dev/nvram\x00'}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xdf84}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x81}}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x64}, 0x1, 0x0, 0x0, 0xc050}, 0x4000) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r3) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000080)=0x1, 0x4) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r4, 0x0, 0x0) ioctl$VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f00000002c0)={0x3, 0x3f404b56db2ba4a3, 0x4, 0x200000, 0x7, {0x0, 0x7530}, {0x2, 0x8, 0x0, 0x5, 0x1, 0xff, "c85106a5"}, 0x6, 0x2, @userptr=0x200, 0x1, 0x0, r4}) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x3) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0) [ 1510.099834] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1510.121500] CR3 = 0x00000000fffbc000 [ 1510.125421] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 1510.131887] RFLAGS=0x00022142 DR7 = 0x0000000000000400 [ 1510.138560] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1510.145858] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1510.154773] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1510.163331] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1510.172397] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1510.180740] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1510.188911] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1510.197073] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1510.206045] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1510.214251] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1510.223506] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1510.232991] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1510.240170] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1510.249672] Interruptibility = 00000000 ActivityState = 00000000 [ 1510.257151] *** Host State *** [ 1510.260681] RIP = 0xffffffff8117a4e0 RSP = 0xffff888087047998 [ 1510.267088] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1510.274033] FSBase=00007fc3fc826700 GSBase=ffff8880aec00000 TRBase=fffffe0000003000 [ 1510.282234] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 1510.288509] CR0=0000000080050033 CR3=00000000a64fd000 CR4=00000000001426f0 [ 1510.295762] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff868018e0 [ 1510.302587] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1510.308726] *** Control State *** [ 1510.312588] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000e2 15:45:31 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB], 0xa) close(r2) socket(0x10, 0x3, 0x4) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000080)=0x5) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:31 executing program 3: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000080), &(0x7f0000000180)=0x4) write$6lowpan_control(r1, &(0x7f00000001c0)='disconnect aa:aa:aa:aa:aa:11 1', 0x1e) [ 1510.319328] EntryControls=0000d1ff ExitControls=002fefff [ 1510.324979] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1510.353354] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1510.360269] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1510.366999] reason=80000021 qualification=0000000000000000 [ 1510.374516] IDTVectoring: info=00000000 errcode=00000000 [ 1510.382355] TSC Offset = 0xfffffcd470d8a409 [ 1510.386980] EPT pointer = 0x000000003d5ed01e [ 1510.392644] Virtual processor ID = 0x0002 15:45:31 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 1510.470976] *** Guest State *** [ 1510.474322] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1510.483986] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1510.493089] CR3 = 0x00000000fffbc000 [ 1510.510451] RSP = 0x0000000000000000 RIP = 0x0000000000000000 15:45:31 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9b0000a927b18901"], 0xa) close(r1) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0xfef0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r4, 0x0, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r5, 0x0, 0x0) splice(r5, 0x0, r1, 0x0, 0xffffffffffffffd0, 0x0) [ 1510.516978] RFLAGS=0x00022142 DR7 = 0x0000000000000400 [ 1510.545425] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1510.571029] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1510.585018] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 15:45:31 executing program 2: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) writev(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)="ee", 0xc}], 0x1) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x559302, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f00000000c0)=r3) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r6, @ANYBLOB="00001500000000000800b07a2a0a000f0000002d81b47fd376e24ae18439d3eb533a87c6ee255450a0cc4a448c03c6b92b4f77ed1db38c0946463ef5b0fb7139aa7cc7299e3eda5fa51f40aa620b91fdcdcec15708a39f207cb73f26b7eb5281272ec0a4e7b5860928487f97b8d81b3e5064fb92c373c2a27c482b2593b16df65291330408c581aae048810a9d8a3a3761d3006ff758b256dbc0"], 0x28}}, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in6, @in6=@initdev}}, {{@in6=@ipv4}, 0x0, @in=@dev}}, &(0x7f0000000440)=0xe8) 15:45:31 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x608140, 0x0) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 1510.594404] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1510.610798] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1510.619206] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 15:45:31 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 1510.645590] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1510.673759] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1510.699611] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1510.717301] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1510.736507] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1510.750969] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1510.757982] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1510.765902] Interruptibility = 00000000 ActivityState = 00000000 [ 1510.796337] *** Host State *** [ 1510.803062] RIP = 0xffffffff8117a4e0 RSP = 0xffff888087047998 [ 1510.810793] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1510.817462] FSBase=00007fc3fc826700 GSBase=ffff8880aed00000 TRBase=fffffe0000034000 [ 1510.825972] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 1510.832237] CR0=0000000080050033 CR3=00000000a64fd000 CR4=00000000001426e0 15:45:31 executing program 1 (fault-call:5 fault-nth:0): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) [ 1510.840599] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff868018e0 [ 1510.847290] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1510.853571] *** Control State *** [ 1510.857033] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000e2 [ 1510.864569] EntryControls=0000d1ff ExitControls=002fefff [ 1510.870201] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1510.877236] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1510.885096] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1510.892293] reason=80000021 qualification=0000000000000000 [ 1510.898894] IDTVectoring: info=00000000 errcode=00000000 [ 1510.904504] TSC Offset = 0xfffffcd43b4c0016 [ 1510.908832] EPT pointer = 0x000000005553501e [ 1510.913392] Virtual processor ID = 0x0002 15:45:31 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r3, 0x0, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r4, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$TUNSETIFINDEX(r5, 0x400454da, &(0x7f00000000c0)=r7) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000080)={'team0\x00', r7}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'veth0_macvtap\x00', r8}) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:31 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000001540)=[{&(0x7f0000000240)="df1bda2776874bf1c29df1762fc7ba2cafe4685065a07ee4e8f271f1d5"}, {&(0x7f0000000440)="0f43319fcea134558bb9a7d69bb8d40f6607ed0ed5010a1f0d660e49bf7b0c1d6ffe426e4f721a717797d7e4e69ba3f4e3c135c139401f03181f527937359107b54aa8f1345a127120ff54b200207d6ae1834e0ead3edb0ddabaa1a83dbe980255139bcf1d2a636d7f066466ace9638bea97fde2f8865c85a2b92153b1bff5e85fa330034ef7b3ea236f07f90053829f74ec842e86cc1423a64c8871787a27a9598ce3890638a894fdebbd445dd313bb82d3366168ddbe5bc0fb73ba6d216cffced89b14ba263a23135d213318782a2858474768f9e9b0378280027a00d16304f298c0792570f23acdef7c85893c5bd0505b4fe252498f7d6f7f31241d6fecbc0539a4af716d38a04b950850f1ad815b1ddaa71b8cf1608b5df724de5f73fdf24eba7c97c55da055157deba58d716979c8524c0c7c1c1bd28a0868c925a67da334a39bfcc280f2b2e7f43f8f49249e0b7e03efb8c57ad51359bb1bc2fba95d27bea0861660fad2aff8c1a29307a6b8bfe37849c6eaf16062068d961999ce8eed9db662103a06c915c6f81387eb0ad7e94bb0c83958cd7599c9980ff34fb0c487aa84d6564f48e4b083fffcf91257ac214bd4f7337fa56bbf3dae21c70516784ec5ae20e73d6928b03afcfddb5df449fff08fdbd0db32ca8b39d229cfdd725b6e85a947eb309dc9897d646ece858bb7ea4e12934857a43ce5ec467de94a1967dcdd970c1e047e244fa572e6973f9b1aa097508829d676f5a3421f3590d7a852d8a19602814c56efa4f41bc05796b8a0384f7e939977e038c7cb9cc9dd682a62dfa8900d78bb60856b372a874db217186e79b3111e4c7f2b8b0660accef7b59eae4eb0a2bd5afacf61cc0192b77bcfb8c42facae5b176b19e016060b620e13c328be25e699380462d7f9dd727db53dc272afd3779b505909e13519724bbd7c118c33f3a2fd936a3e96991e4b1013cd1aa60bf89383952b56be6b24a739b7aa5a0134e7a4145ee212eac5a215ceb068a162e5c290196e9aefcb695c50af9a52dda8a3219229c88f1cedfa41cb29225f11d05b0ad7ceb845c170d505d6e648ad341177329b9981ff383ad1aa8adabc5dd4eab014f975fbc3d9e44a192d54b8ab9be8783264424f119a090164534e0902d0ab20e8fefb6bfc8d7225f796c028fabd92d010f8b90a6a1b06b748225219c3fab33af8735fc14adef4eb684fa4bc9ed31ea81e63838c851f76200eb09d7c7910bc88f6cb2eaeba852d58f1e0f22a78c2077eab4474b9b7c02f5e02ac98d3788c8b7a0a3162b554d7ece062a7972333e0f6164ad0391c420cf1d574a8bb6f5c87909022ac6777697d9852b4e047b971f4d947910ef47e68db4e800db7afdf6f6a3d797eae8e06be4419785cbcaf9c3f563f1947d3ca1f37b0b5c47de33bb9713b28596b5aebf63e28e6860a341bd9e7e7bc55316127169cf6446fd2fee83ef4ce80e56e651a3fecbf76e9f3728ff035ac9a98d0fb36de237314e148f48a4901ab8b78540340751a9dd3db2a3431c16471565467d42f9834860ad693c51c4be0e50ca464594f5d474f084c34326d6b81a0d84b471677dee69a8466d2ff8f3fd73e6a6e31473af981286296569f8846cf52b2538a7717849e5e7a49194876abcbb112851245bb55f17f8ccb27df14c23657351b8882edc33bc00e1767af59af3ca25aaa28691cb947ce135182439f710e0ad64132e0066146ca4a99e56c5b1772352485f6ec265f9749f1558b6fc6c2a39728636018e79368963ef7ead971ec5fb2051390e324242819e5cf36c8a1b8cbfe6f1bfb68ee5535d4c104d21a48e9f48ef2b4e8b5f7536c5a6168170bb69398f603688a83c3fd52d78518ffc123f89298915c28ea6ad1cdeedd7031f88fdc26a94ead0b7dcbcf91079714a7545791d335cc612c358c745aa45c0fac7a0ec980f15c3e40feda4f968221b3d60eeecb406b50ec44bc113ab8cbe59d9426b83adabfb79dd373974b938b29c7eaa4a88a177a729a5185e21411108371dfd97071695d82227dcb502571f737d5ed7af8d8bdea922e8ee74437a12fab77660c6cf8835a4b780eabf5a1d9beee21021fc01981ca92cc0c618ec0e774233b79d897d4d97ab4d0c96aa5de1fc6a7f30123433e4f2e123394c3cd3b6a5576a09e82fda4cc56c84fe3c900663019ef5977f238fd405b8e91c763e057d2cd2776e419d4b9ddcdd583c3dc345f2ebbdb6e20c6ea25fed6708217198982426b50e1d4ae5e624ed1b1d92ff309a28183b25a546db101184e02ba08f67409f7778ea149c22e3e788f8afec3544c286b9e142e0e94b9029701d7cba35b3dc70e0c6c142566ff2477da0321e87b9b35adcdac2e921e6fb9e666370ba113e8b1e8676654fb1b660dfc6dceda6e811e179b1be61736fc2550567502e67ccd29987579436b075ae67a789535d94506c52ad225967e76f54b4336eec97cc048a577ca3c5445c18a668f6b331d1d4424e52c1f61bd3c83f0836285eb00c71685c0975eac92cfd216e57996854a9ab5828609fb796cdd4ff8323a472600f1b800834735446b719d17634607169dc171cec526221d660de3403047ef0253cc70e93bcca9201166dee7898ebd2639d09afeacf21880623aba469bbd1554e542bd531832bb6652e923f6267d00876afe23f64ba9deb97c60bc91ac22cc6a4372b4baa7b983cc072b39c42852f99a6a614e6758909f93256bd5485e91bd08372c0b524c69248a3ede2622fb9563351343896ce27ab9807b0da852ac3942c8cffb10faf679bcf72b929244c5a642b3b342e5571cc01a962d1a79f62526e5c9817a9656407ef5b7c32aa42e302602ee8c9cef57943802f4033eea69157d09ddce6fa22739f73da3d39d16f461edbf080e7e9366aa318f9581804acbeea36328b4d982fab92838a7f0d2e9bbf0b594929f0e9caea15d0523656e915d30e4119ae3a922008eac9b4558e0e57a1509c1a4d21d3716c85b92511312892126d9bcd05ace93683a17478e2000bdb8eb6714dea3c80cbdba494caac0c9db5bf366d88e193261034d1e760630617a914b89f0a2ee074ee81ad6755e3b28f224ea2628691c817ad8e99afbef74fa1a34abad636fe2672015f4ceecd6e5924cd82313e365f01c39fd76daf24722c4d0d69025c8cdc7924f5d236117d02639274c475ca7197f579d231e2bcc86ab5280791b9d01e9ea69f6318cee4ba2e5564914e8178c3af92dafd8097d9f6848fe5a507712ebd8b83cf1c13ed41323bb0a993c44b863c1ee8a4bbcff1fabd30089db304567389902f9df48258c4dcf2566c835fe26a45d0e5f5742256b995a6826f9f7ec9b182fb728ce072dae0e5882dcd069dc9bf5c26be8a2f7ae26082520e6296f9abc5e076b0f501a713690b36b6ff9f0f2328e14cf5cc88f04ef8db71b5de13ea2fb7d75508b00262a703bdd1314a2aad83a8c446e5ff18ab4c3f686c5190f7bb3a74d613ab67f27ca021a5e2a2f40b5f1c00148b19fbb3947af353fc008897255239b4e63131284a655946ea8df567cf95d900c3f7c4cf716a62e1ffc60fd509e41f7127acdbef6b3bebef2f2819bdf0ad8a53816f6bc439ab07989800c7844a94b4ca07d82999252c3fd1b76f0500689b9dbbad3c837e73afacc3eb64d4f5ee2866c1604d4e1687c19b6d9ed7a7f01572b30b914984f20c61b4311faca95f95b011430f9feb6eb7a275f9c9852900e74f579e79e5a4f08ff6a51e1f599d032569ca30340fe4f4d293dbb89a66bb21812fee412e1ed0a0a42aadd8086552be9a686c52d236c0a6aec0a13f325adba1123b395611f728c8fd3c5b694bdf88eb7b49adf5e61a575b9e647140a994f3a35547078a72fce1eba3e12903b5fe8e72c1d059ea511bd5c7583935af6099b647cd92eb2b580c51660a31d5bc5cf2270a106ea007e138e6467ce8b056947ee85e876c6ab1393f5a6a891afad33ec0cb5478d6e47879f360bb01187875f1ccde49b588db03cbdb67f106c450b20e047c7e12b5287a24d23255a4952cbf278dd9997bb8aa0eb6ea1f7009349a0612c6ef39a9e58141b230acadc0f11bd296743de7e10e83c0e5da9d7c0681a90a89bf2a3072060cd32238f1b8edc128e0cec8ed615eab95e928d8bbb4e6cd510bc12819bf87f4b98e60bc1362f96907903e74f8a2a0f4ae4d38d7aae30d686657c1a1ea4a7ad3ce24c89ee7ab93de11d38708e616b53a95c4b47049d23dfee6d35f0c2bed5f1b377e4b77fe890f0cfc6fcab58d8da5eac1a6e01d94c6165104b7653ead9067856a3024080eb41d1dffb6ed971cd49dc932e6fde0419192ac512ca83576a3890c328e5ca131c71aaab0dd8632dc2a7078eb6f8265a70536046c74767a53f39bff3db1450d03b266501b3b4ff36c4c13fbb5fc71e9a1a3c017771c752762d38d8b29c1ab92d98abbe523c93e3c74dfe7243912a11df4d658c899b3e35df8887c95c89ba90f73b2a8465350799ecf92cc1fb1ba0fb5a775689a951445a3bedb99c56d062666ff3386822aefe379282f223af04ac7f5be1fc4ad9a173cd7d48e62c247bded2436629573623fecfaa2d199c272381a6d8f679248ec313d241c0b807f7ad9c4a9651c6619b7813a0a3dad1d4d6c658d2c18a2b3ace504c52d6417e6123da3eda0c44396c790371230efcfdb90db8c374cc0fbf068774b866682982e3bbf2901554beff603fcfab19be8cbfa8086a57b4e9cd5b833ae66cc04b59dfada634c7b583d0f3e6ba3cd0e2cc22186772a95cd96730df43c0c683d66fd7cbab3f3a73558301e9c807e1b9b6d85ea4fe83c6300f5fd5295a6c8628a0980eda6cbacb31611d905eed13e8b70b197be0157a9946701008a86f8f85164e60cd257f489e68c420b5c0a9549bca22f4d2a8433c413f045e7087820984da6d2a2c204b37cb28b64a38f10e080209b7abfb58cf6832d988a904ce43e7debef172b24e7969594610c267d38cb29bafa2a856aa7166893a2806e5be9c72578a943c9b5a1c6cbdd21a08f020bbb3d1379cdc0151c845f767b9883c1abfd1f61e8fc8b6a9399b5a41b2ef864da024c0e446c8d37d2c40073994b2789deecd75c06dd8937e7220ec21d79d79bd2b493791c49825b78bc71436a102e43604323190babcd29a6f0b75e9ddc5a801bf3e2fa0f5a4b8b35ed9ae19786f9c2caedad164102010ee67266990432cd080d56744e955623f166923b2f28bd170f0a5b45a505c4b523bd4f18fe916ac366daa2343854c13220ce1de0fbd02df5db7371b1cee41502caa5be057fa6c9c0a2fd9be9c67a2ba299f64dc62dc0804afc47aa94637e93f33c4b55822c3d0c3d4883479ef77aaea9f744a950a54a18719f07cdef6f6ea9061f30042c8f0aa1b3e4de14a718e1d172ebe0a21193c2efc053bfa5d279fb5e4c32d754324caab1fb19451e2cfc5c9bde152d15c1d011aa868abdc643892260680db74d9dd51d0e679d93866e0166448a967553978bfe361c8b38c7b968968051687db6506ee42e63b50b007a3549fb6b98ba827cfeab6ec84af8933f796081e279c6f506ac36d366efd6b7e85ea239ddfb8f7d27e1d79108854bbbcd40435ae41ecbc9dea68755cc557abe1843d1c7f63baae7d4d6851478c7a2e71a61af423decd4c1c52654104c825be18d4d2c69ff42a2e2110675a41c5649b5fe73c00b0959559300dc3f998639dd8636152516420483f4f9f93d4d96c4318ba8f3dd878101fbde9fdcf755748c24518a819eabd38a52f4281cc4f1aa2c1566525deb9493779f6d54ad087"}, {&(0x7f00000002c0)="1cac73afedf57c2fa1c0387b0c5bbc2ba32dc3817cf55d7713da3b7db1f241fe140557b5a4154c90f17552ffa2c6d4120b93c7d38283675eb232666a57dfccd3cdbf777f00fb22a626331d5560f327026881d93d3a25d449183e5edc9c54dd768aff76e5d35ccae13ff2c3b61c52d8e4f456bbf3ceb39df24e989d5b66cdb4d1d48c6b5a92c989dc723ffaee1ad3c523672a2ef9494bb95e119bbfadd73da7fb35cad4dd3077008f"}, {&(0x7f0000001440)="d68e5c5198b153932bc19bcce0493d9f40c7ffb80c2299956a88085133b3be9da3a0f43ace39b5400a4716665b3fdb51fa85f1fecda600aed30f7fdd6106e96916679386863ded6959497c80f3cdc798e2e89c5658b152d4362b68bd8a344f1e7e75f2ebb86ced704838226e6ba74cabd8f056f1c78045b5dc72f8d3546dfe6b9d70b2350aefbe2196028660bd1e0e8c80beade8ed4f398fcd0e7ce08efd68172997cc23f19d78de291451def16ceff0ffa8314f4404832a42e816890cdb3e45dfb7102dbac85ae5efbf0cc3abf7a33b6d1e718b51a3d7b783a75b2e347bb69eb3e24233bac01672a7ab43d12c3111f6b37ac2"}, {&(0x7f0000000380)="1e17b2a8d27eb0f41abae74a46"}], 0x14) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r3, 0x0, r3) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000080)={0x0, 0x2, [@random="e838715d5934", @broadcast]}) r5 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, &(0x7f0000000540)=ANY=[], &(0x7f0000000400)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0xffffffff00000004) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:31 executing program 2: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) writev(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)="ee", 0xc}], 0x1) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x559302, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f00000000c0)=r3) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000a0000000a000000", @ANYRES32=r6, @ANYBLOB="000000000000000008000a000f000000"], 0x28}}, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in6, @in6=@initdev}}, {{@in6=@ipv4}, 0x0, @in=@dev}}, &(0x7f0000000440)=0xe8) 15:45:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r4, &(0x7f0000000180)='.//ile0\x00', r4, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x22140}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 15:45:31 executing program 0: futex(&(0x7f000000cffc), 0x180, 0x0, 0x0, 0x0, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x80, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") futex(&(0x7f000000cffc), 0x85, 0x0, 0x0, &(0x7f0000048000), 0x5000000) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r3 = add_key$keyring(&(0x7f0000000580)='keyring\x00', &(0x7f00000005c0)={'syz', 0x0}, 0x0, 0x0, r2) r4 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, r3) r5 = add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, r4) keyctl$invalidate(0x15, r5) r6 = add_key(&(0x7f0000000040)='.dead\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)="3fa87bd52238ee4e5e00fe0e1848f9801800dba16b1257a821cc23b5499af8fa578994432bde61423d", 0x29, r5) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000100)='keyring\x00', &(0x7f0000000140)=@builtin='builtin_trusted\x00') 15:45:31 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) [ 1511.030999] *** Guest State *** [ 1511.034406] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1511.053763] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1511.064641] CR3 = 0x00000000fffbc000 [ 1511.068853] RSP = 0x0000000000000000 RIP = 0x0000000000000000 15:45:31 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) connect$nfc_raw(r1, &(0x7f0000000080)={0x27, 0x1, 0x1, 0x4}, 0x10) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 1511.089577] RFLAGS=0x00022142 DR7 = 0x0000000000000400 15:45:31 executing program 2: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) writev(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)="ee", 0xc}], 0x1) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x559302, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f00000000c0)=r3) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r6, @ANYBLOB="0000ffff0000000028000a000f000000"], 0x28}}, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$vivid(&(0x7f00000002c0)='/dev/video#\x00', 0x3, 0x2) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000280)=0x15, 0x4) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-control\x00', 0x408000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000000340)={{{@in6, @in6=@initdev}}, {{@in6=@ipv4}, 0x0, @in=@dev}}, &(0x7f0000000440)=0xe8) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r8, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f00) bind$bt_hci(r8, &(0x7f0000000300)={0x1f, 0x3, 0x3}, 0x6) [ 1511.132025] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1511.164972] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1511.192742] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1511.209678] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1511.231521] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1511.283410] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1511.300699] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 15:45:32 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca00a927b18901"], 0xa) close(r2) lseek(r2, 0xffffffff, 0x4) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) r4 = syz_open_dev$mouse(&(0x7f0000000240)='/dev/input/mouse#\x00', 0x6, 0x200000) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f00000002c0)=@assoc_value, &(0x7f0000000300)=0x8) accept(r3, 0x0, 0x0) splice(r3, &(0x7f0000000180)=0x7f, 0xffffffffffffffff, &(0x7f00000001c0)=0xfffffffffffffffb, 0x9, 0x2) r5 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, &(0x7f0000000540)=ANY=[], &(0x7f0000000400)) ioctl$TUNGETSNDBUF(r5, 0x800454d3, &(0x7f0000000080)) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r6, 0xc1205531, 0x0) r7 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r7, 0x84, 0x1b, &(0x7f0000000540)=ANY=[], &(0x7f0000000400)) r8 = syz_open_dev$mice(&(0x7f0000000340)='/dev/input/mice\x00', 0x0, 0x200000) ioctl$VIDIOC_DQBUF(r6, 0xc0585611, &(0x7f0000000380)={0x1b83, 0x4, 0x4, 0x4, 0x5, {0x0, 0x7530}, {0x2, 0x1, 0x6, 0x2, 0x5, 0x1, "db3665c1"}, 0x1f, 0x4, @fd=r7, 0x0, 0x0, r8}) 15:45:32 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r2, 0x0, 0x0) r3 = dup2(0xffffffffffffffff, r2) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {&(0x7f0000000040), 0xffffffffffffffff, r3}}, 0x18) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) [ 1511.385791] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1511.407516] GDTR: limit=0x0000ffff, base=0x0000000000000000 15:45:32 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f0000000180)) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, &(0x7f00000001c0)={0x5, 0xcb, 0x72f, 0x6, 0x7fffffff}) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 1511.447102] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1511.468321] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1511.520235] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 15:45:32 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r3, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r4, 0x7706, &(0x7f0000000080)) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:32 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) r3 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000080)={0x0, r3, 0x80, 0x7, 0x6, 0x5}) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000500)={0x0, 0xffffffffffffff98, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r5, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_MTU={0x6}]}, 0x30}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f0000000500)={0x0, 0xffffffffffffff98, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r7, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_MTU={0x6}]}, 0x30}}, 0x0) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x88, r7, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, [], 0x3a}}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'macvlan0\x00'}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xffe0}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x20004045}, 0x4008800) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000540)={0xf510004, 0x1, 0x7, r1, 0x0, &(0x7f00000004c0)={0x9c0905, 0x2cf, [], @p_u8=&(0x7f0000000480)}}) recvmsg$kcm(r11, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xd2, &(0x7f0000000400)=[{&(0x7f0000000580)=""/165, 0x97}], 0x1, &(0x7f00000001c0)=""/4, 0x4, 0x7301}, 0x3f00) r12 = creat(&(0x7f0000000140)='./file0\x00', 0x42) r13 = socket$inet6_sctp(0xa, 0x5, 0x84) r14 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r14, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r13, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, r15}, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r12, 0x84, 0x22, &(0x7f0000000180)={0x2, 0x6, 0x0, 0xffffffff, r15}, 0x10) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r10, 0x84, 0x13, &(0x7f0000000380)={r15, 0x80000000}, &(0x7f00000003c0)=0x8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 1511.565515] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1511.607704] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1511.629806] Interruptibility = 00000000 ActivityState = 00000000 [ 1511.647529] *** Host State *** 15:45:32 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x489) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000540)=ANY=[], &(0x7f0000000040)) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, &(0x7f0000000000)={0x0, 0xfff7, 0x83a9}) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) [ 1511.654212] RIP = 0xffffffff8117a4e0 RSP = 0xffff88808830f998 [ 1511.672387] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1511.679049] FSBase=00007fc3fc826700 GSBase=ffff8880aec00000 TRBase=fffffe0000034000 [ 1511.697987] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 15:45:32 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[], 0x0) close(r2) socket(0x10, 0x3, 0x4) process_vm_readv(0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/59, 0x3b}], 0x1, &(0x7f0000000240)=[{&(0x7f00000004c0)=""/133, 0x85}], 0x1, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000b40)='./file0\x00', &(0x7f0000005140)='trusted.overlay.nlink\x00', &(0x7f0000005180)={'L+', 0xcffb}, 0x16, 0x3) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f00000051c0)) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000080)=@urb_type_bulk={0x3, {0x4}, 0x7, 0x6, &(0x7f00000002c0)="1302db564c76f6edbcc8b926fc69a4a37c4c9407b171c5279cf940fdd802727a9a539ea6cd50d142ffbbdff590b256c7043e8d0a2ce42ea964cf29616d7f27083eacccb7d0f083781fe1113f221908bd322c4df167140a3491845ebb6d070172bdfc236603cce673591f411274a990b753bbb0955f0e73994450635ed9cbd9b160d9dbc7cef1b03b09edbea13cc31a5b62c38bf582b4e16d7f9c31f31ae76c9ffa5345d016724dfbbc55b2b1cc2849a1aaf2f239cff0bba17e5fb2be823a749e6d85e673bffda35613ba7593c7e86b4b", 0xd0, 0x8, 0x52, 0x9, 0x1, 0x1, &(0x7f00000003c0)="2c3e55b734623c7b50311d1c4a794b432c63cf6d2e562033d3d8b823cc2728b3b5ddca90411c3d18116a9718890b0009e5bceb47be423283dd67a445e8d88192f03f7548a6ea13b7968024b9494aa0ba9d3624b404638f7dcf4bc2cd14f224444bc21b363adceef5fd8e688a398f06df36f63fc605f54a69cb46a6db40f5ddf63c71a2d7e8d5aa6ec94a19dec584cce8cadbb92cbb917a8170069a8fbb199d35d6d99b9decf3b423e699160d2f5baf067458aa8599e7eb17ba897614199a62ba840dc020b59c3a478d4bef9daf460ea4fdaaa6d26ce3e1bf01b4f3ba99070dd1540f1a95adee16574036"}) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r3, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000050c0)={0x0, 0x0}) recvmmsg(r3, &(0x7f0000004f00)=[{{&(0x7f0000000580)=@x25, 0x80, &(0x7f0000000780)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000600)=""/204, 0xcc}, {&(0x7f0000000700)=""/78, 0x4e}], 0x3, &(0x7f00000007c0)=""/172, 0xac}, 0x401}, {{&(0x7f0000000880)=@phonet, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000900)=""/185, 0xb9}], 0x1, &(0x7f0000000a00)=""/117, 0x75}, 0x40}, {{&(0x7f0000000a80)=@isdn, 0x80, &(0x7f0000001000)=[{&(0x7f0000000b00)=""/26, 0x1a}, {&(0x7f0000000b40)}, {&(0x7f0000000b80)=""/95, 0x5f}, {&(0x7f0000000c00)=""/245, 0xf5}, {&(0x7f0000000d00)=""/74, 0x4a}, {&(0x7f0000000d80)=""/43, 0x2b}, {&(0x7f0000000dc0)=""/36, 0x24}, {&(0x7f0000000e00)=""/238, 0xee}, {&(0x7f0000000f00)=""/209, 0xd1}], 0x9, &(0x7f00000010c0)=""/50, 0x32}, 0x6}, {{&(0x7f0000001100)=@rc, 0x80, &(0x7f0000002300)=[{&(0x7f0000001180)=""/81, 0x51}, {&(0x7f0000001200)=""/4096, 0x1000}, {&(0x7f0000002200)=""/199, 0xc7}], 0x3, &(0x7f0000002340)=""/198, 0xc6}, 0x7ff}, {{0x0, 0x0, &(0x7f0000003440)=[{&(0x7f0000002440)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000003840)=[{&(0x7f0000003480)=""/24, 0x18}, {&(0x7f00000034c0)=""/142, 0x8e}, {&(0x7f0000003580)=""/175, 0xaf}, {&(0x7f0000003640)=""/37, 0x25}, {&(0x7f0000003680)=""/248, 0xf8}, {&(0x7f0000003780)=""/123, 0x7b}, {&(0x7f0000003800)=""/13, 0xd}], 0x7, &(0x7f00000038c0)=""/17, 0x11}, 0x8}, {{&(0x7f0000003900)=@caif, 0x80, &(0x7f0000004dc0)=[{&(0x7f0000003980)=""/216, 0xd8}, {&(0x7f0000003a80)=""/190, 0xbe}, {&(0x7f0000003b40)=""/95, 0x5f}, {&(0x7f0000003bc0)=""/161, 0xa1}, {&(0x7f0000003c80)=""/4096, 0x1000}, {&(0x7f0000004c80)=""/80, 0x50}, {&(0x7f0000004d00)=""/156, 0x9c}], 0x7, &(0x7f0000004e40)=""/161, 0xa1}, 0x1}], 0x7, 0x20, &(0x7f0000005100)={r4, r5+10000000}) [ 1511.706278] CR0=0000000080050033 CR3=0000000059666000 CR4=00000000001426f0 [ 1511.718958] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff868018e0 [ 1511.743450] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1511.767149] *** Control State *** [ 1511.774898] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000e2 [ 1511.786379] EntryControls=0000d1ff ExitControls=002fefff [ 1511.801402] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1511.822627] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1511.849124] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1511.867618] reason=80000021 qualification=0000000000000000 [ 1511.878228] IDTVectoring: info=00000000 errcode=00000000 [ 1511.885124] TSC Offset = 0xfffffcd3eebaf009 [ 1511.889739] EPT pointer = 0x000000009f92f01e [ 1511.898536] Virtual processor ID = 0x0002 [ 1511.962385] *** Guest State *** [ 1511.965742] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1511.976057] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1511.985581] CR3 = 0x00000000fffbc000 [ 1511.990236] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 1511.996503] RFLAGS=0x00022142 DR7 = 0x0000000000000400 [ 1512.003136] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1512.009940] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1512.018669] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1512.026813] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1512.035041] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1512.043361] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1512.051528] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1512.059696] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1512.067907] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1512.076728] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1512.084964] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1512.093940] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1512.098872] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1512.100564] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1512.116999] Interruptibility = 00000000 ActivityState = 00000000 [ 1512.123521] *** Host State *** [ 1512.126791] RIP = 0xffffffff8117a4e0 RSP = 0xffff88808830f998 [ 1512.132909] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1512.139395] FSBase=00007fc3fc826700 GSBase=ffff8880aec00000 TRBase=fffffe0000003000 [ 1512.147353] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 1512.153893] CR0=0000000080050033 CR3=0000000059666000 CR4=00000000001426f0 [ 1512.161136] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff868018e0 [ 1512.167939] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1512.174138] *** Control State *** [ 1512.177666] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000e2 [ 1512.184527] EntryControls=0000d1ff ExitControls=002fefff [ 1512.190176] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1512.197129] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1512.204108] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 15:45:33 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) accept4$inet(r1, &(0x7f0000000000)={0x2, 0x0, @initdev}, &(0x7f0000000040)=0x10, 0x1000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) 15:45:33 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a9f7b18901"], 0xa) close(r0) socket(0x10, 0x3, 0x4) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfef0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r2, &(0x7f0000000000)='./file0/f.le.\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00') r3 = accept$inet(r2, &(0x7f0000000100), &(0x7f0000000140)=0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f0000000240)={'filter\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000080)={'ip6gre0\x00', @dev={[], 0x27}}) r4 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x80000001, 0x0) 15:45:33 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) ioctl$FBIOPAN_DISPLAY(0xffffffffffffffff, 0x4606, &(0x7f00000002c0)={0x30, 0x258, 0x1000, 0x640, 0x200, 0x6, 0x1, 0x1, {0x7, 0xffffffff, 0x1}, {0x0, 0x25d3fb4d}, {0x1, 0x1, 0x1}, {0x5, 0xf0}, 0x1, 0xd8ed997bce3c819f, 0x3ff, 0x3c, 0x0, 0xfff, 0xffffffff, 0x10001, 0x7f, 0xd8d7, 0x6, 0x2, 0x3, 0x2, 0x2, 0x6}) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x2000, 0x3}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:33 executing program 0: futex(&(0x7f000000cffc), 0x180, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x26, 0x800, 0x9) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x34283, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, &(0x7f0000000040)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000080)=0x28) socket$inet6_udplite(0xa, 0x2, 0x88) futex(&(0x7f000000cffc), 0x85, 0x0, 0x0, &(0x7f0000048000), 0x5000000) write$UHID_GET_REPORT_REPLY(r1, &(0x7f00000000c0)={0xa, {0x2, 0x6, 0x6}}, 0xa) 15:45:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0xfffffffffffffffc, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4bb2, 0x0, 0x6, 0x0, 0x2], 0x0, 0x22140}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 15:45:33 executing program 2: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000300)='/dev/qat_adf_ctl\x00', 0x80040, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @rand_addr="0b60c976dd9f91c40b86efd97d787eba"}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x2}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c4}, 0x4000000) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) writev(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)="ee", 0xc}], 0x1) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x559302, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f00000000c0)=r4) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r7}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in6, @in6=@initdev}}, {{@in6=@ipv4}, 0x0, @in=@dev}}, &(0x7f0000000440)=0xe8) [ 1512.210911] reason=80000021 qualification=0000000000000000 [ 1512.217304] IDTVectoring: info=00000000 errcode=00000000 [ 1512.223772] TSC Offset = 0xfffffcd36ed8e738 [ 1512.228183] EPT pointer = 0x0000000048c9c01e [ 1512.233084] Virtual processor ID = 0x0002 15:45:33 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x3, 0x2, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:33 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r3 = getpgrp(0x0) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000040)=r3) r4 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="f0ca9a0000a927b1890104642198b9a3a1a43b7b0405cfb26e8a1025d07d1c67cffe6b459572c889ba7c66ec7e1c1db4527e2df4f96bf1381c3f8bcecdbd6a61acab964d44eb0a16bd96528c5638c1c06c19fd2bef873ef81f8aa43740315fef692114cb07dfef08007f5bef1a721256c90cd38a3568084fda7a8b718cd31ac71d35812ca9c66be3feaf9a4c3cc5120cda1b1b87d0a25045c0"], 0xa) close(r4) socket(0x10, 0x3, 0x2) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, 0x0) ioctl$MON_IOCT_RING_SIZE(r5, 0x9204, 0x454fd) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$VIDIOC_PREPARE_BUF(r7, 0xc058565d, &(0x7f0000000180)={0x2, 0x4, 0x4, 0x800, 0xffad, {}, {0x5, 0xc, 0x1, 0x8, 0x2, 0x20, "e630ec56"}, 0x4, 0x4, @offset=0x40, 0x401, 0x0, r8}) r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x80002, 0x0) ioctl$sock_SIOCADDDLCI(r9, 0x8980, &(0x7f00000002c0)={'vlan0\x00', 0x3f}) r10 = fcntl$dupfd(r6, 0x0, r6) r11 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r11, 0x84, 0x1b, &(0x7f0000000540)=ANY=[], &(0x7f0000000400)) ioctl$DRM_IOCTL_DROP_MASTER(r11, 0x641f) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) splice(r0, 0x0, r4, 0x0, 0x80000001, 0x0) 15:45:33 executing program 2: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) writev(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)="ee", 0xc}], 0x1) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x559302, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r3, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f00) getsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000300), &(0x7f0000000480)=0x4) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f00000000c0)=r4) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010002508000000000000000002000000", @ANYRES32=r7, @ANYBLOB="00ee00000000000208000a000f0000001298a4bea088e6bbf531ca68f363db7df35865367287d0699274de131b79fe78c20454151c5f76a9d2a5e214102fbbbd82592d7dcc28aad3a539048f14bf6683154db192d0aac44e3c4449ff2903e8ad6ce8904b8c308d2892a07eb679794a"], 0x28}}, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in6, @in6=@initdev}}, {{@in6=@ipv4}, 0x0, @in=@dev}}, &(0x7f0000000440)=0xe8) 15:45:33 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="f0ca9a0000a927b189012bfd3142165ed3a9b6bcba8b3f736aeee592b5ffa0bf33a2d988fcd9acc8e05756c477f5f3e2244e188be57bf3354e245d9ffe7c8895862dd995931e985f2422c16d9c4eb74c4bafee254c016348c725ef08c7075f85e3a4e642c115d48af78740626afe3a"], 0xa) close(r2) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000440)=0x1ff, 0x4) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000240)='/dev/input/mouse#\x00', 0x3, 0x200002) r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r5, &(0x7f0000000180)='.//ile0\x00', r5, &(0x7f00000007c0)='./file0/f.le.\x00') write$rfkill(r5, &(0x7f0000000040)={0xfffffffd, 0x8, 0x0, 0x1, 0x1}, 0x8) ioctl$KVM_GET_CPUID2(r4, 0xc008ae91, &(0x7f00000002c0)={0x9, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}) connect$llc(r3, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r3, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_RESET(0xffffffffffffffff, 0x4141, 0x0) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r6, 0xc1205531, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r6, 0xc0585605, &(0x7f0000000180)={0x1, 0x0, {0xc881, 0x2, 0x1011, 0x5, 0xd, 0x7, 0x0, 0x2}}) ioctl$sock_SIOCGSKNS(r3, 0x894c, &(0x7f0000000080)) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:33 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="f0ca9a0000a927b189010bd38dc0a27a48e99999cd4d4fefa683ac93680db4718a6e242a10aa6b76f5ad6c2ccc515a5c66a751bc0222d72027ac4ad3a20f1ea1469c71cbcc5a78830d09382e90aa39ac8add5f0a34b54839"], 0xa) close(r2) socket(0x10, 0x3, 0x4) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) r4 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000540)=ANY=[], &(0x7f0000000400)) write$UHID_INPUT(r4, &(0x7f0000000240)={0x8, {"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", 0x1000}}, 0x1006) accept(r3, 0x0, 0x0) writev(r3, &(0x7f0000000280), 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:33 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, 0x0) perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r2 = add_key$keyring(&(0x7f0000000580)='keyring\x00', &(0x7f00000005c0)={'syz', 0x0}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, r2) add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, r3) r4 = request_key(&(0x7f0000000040)='.request_key_auth\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)='/dev/snapshot\x00', r3) keyctl$set_timeout(0xf, r4, 0x80) 15:45:33 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r4, 0x0, 0x0) r5 = dup(r4) splice(0xffffffffffffffff, &(0x7f00000002c0)=0xc1, r5, &(0x7f0000000300)=0xc5, 0x9, 0x6) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000000)={0x0, 0x1e0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {0x0, 0x3}, 0x5}) socket(0x10, 0x80000, 0x3f) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e21, 0x1, @rand_addr="8b29cd024409e509ad5418d2a7ed93ae", 0x7fffffff}}, [0xff, 0x7ff, 0x3, 0x200, 0x2, 0x6, 0xfffffffffffffc01, 0xffffffffffffe294, 0x8, 0x0, 0xa6, 0x3, 0xe7, 0x6, 0x8b7]}, &(0x7f0000000440)=0x100) faccessat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x1, 0x800) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000480)={r6, 0xd2, "2d76a9118aedee962f8943816d573045431726b984f80a067538482971bb6457d0d0526e6620e64e8c838ad66a56f131d487b902bc9d7acf347d87f36c3f4e552e1fbf74ff57f8dda42a5da2601b8703595a18441c432f67ac638a591bb72bc9eabb82901305502763fae2cd82d6857c889c05012ee02a01a83cd74bf965a612b301e596d125055cc5d9bec65f6d3eb44c435ea468120e5763d6cd814def25a43c1f27929391f478f19ecd6382bd57fe15220ead41b17270e28324b1a00a9fbad7993b6cab9811a554d3679926d2b6f72e4a"}, &(0x7f0000000580)=0xda) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f0000000240)={0x0, 0x1, 0xf79, [], &(0x7f00000001c0)=0x40}) 15:45:33 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="f0ca9a0000a927b18901907e962381266ac682f7f8d5559e3dc5b22afdc2ff6c5437034376905a49707d88e436b2d4996abc6883"], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r6, 0x0, 0x0) fcntl$F_GET_RW_HINT(r6, 0x40b, &(0x7f0000000180)) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, &(0x7f0000000080)={0x0, 0x1, [0x1000, 0xffffffff, 0x5ac, 0x4, 0x80, 0x7fe000, 0x5, 0x7]}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') write$FUSE_INTERRUPT(r0, &(0x7f0000000380)={0x10, 0x9be5cd5094662182, 0x3}, 0x10) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r7, 0x408, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40048c4) 15:45:33 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000000000000"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f00000000c0)=r5) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x10, 0x2, 0x2, 0x20, 0x0, 0x1, 0x1, [], r5, r1, 0x2, 0x1}, 0x3c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:34 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r3, 0x0, 0x0) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000300)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000080)) ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f0000000180)={0x0, 0xc000000000000, 0xffff, 0x1, 0x4, 0x9}) r6 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 1513.264512] *** Guest State *** [ 1513.268205] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1513.293208] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1513.309726] CR3 = 0x00000000fffbc000 [ 1513.320574] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 1513.326982] RFLAGS=0x00022142 DR7 = 0x0000000000000400 [ 1513.343337] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1513.356871] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1513.365647] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1513.374282] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1513.383309] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1513.392407] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1513.400996] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1513.409073] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1513.417598] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1513.425743] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1513.434352] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1513.442463] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1513.448900] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1513.456499] Interruptibility = 00000000 ActivityState = 00000000 [ 1513.462916] *** Host State *** [ 1513.466109] RIP = 0xffffffff8117a4e0 RSP = 0xffff888040cd7998 [ 1513.472272] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1513.478679] FSBase=00007fc3fc826700 GSBase=ffff8880aed00000 TRBase=fffffe0000034000 [ 1513.486582] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 1513.492623] CR0=0000000080050033 CR3=0000000047a0a000 CR4=00000000001426e0 [ 1513.499641] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff868018e0 [ 1513.506426] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1513.512669] *** Control State *** [ 1513.516116] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000e2 [ 1513.533748] EntryControls=0000d1ff ExitControls=002fefff [ 1513.539242] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1513.546321] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1513.553091] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1513.559654] reason=80000021 qualification=0000000000000000 [ 1513.566076] IDTVectoring: info=00000000 errcode=00000000 15:45:34 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:34 executing program 0: futex(&(0x7f000000cffc), 0x180, 0x0, 0x0, 0x0, 0x0) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000000)) r0 = socket(0x18, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") futex(&(0x7f000000cffc), 0x85, 0x0, 0x0, &(0x7f0000048000), 0x5000000) 15:45:34 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$inet6(0xa, 0x3, 0x6) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, 0x0) r1 = socket$kcm(0x2c, 0x3, 0x0) close(r1) recvmsg(r1, &(0x7f0000001500)={&(0x7f0000000f00)=@can={0x1d, 0x0}, 0x80, &(0x7f0000001400)=[{&(0x7f0000000f80)=""/220, 0xdc}, {&(0x7f0000001080)=""/190, 0xbe}, {&(0x7f0000001140)=""/130, 0x82}, {&(0x7f0000001200)=""/220, 0xdc}, {&(0x7f0000001300)=""/135, 0x87}, {&(0x7f00000013c0)=""/40, 0x28}], 0x6, &(0x7f0000001480)=""/66, 0x42}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_pid(r3, &(0x7f0000000000), 0x10000000d) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$TUNSETFILTEREBPF(r4, 0xc0096616, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d40)={0xffffffffffffffff, 0xc0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80), 0x0, 0x0, &(0x7f0000000bc0)={0x6, 0xffffffff, 0x5, 0x80000000}, &(0x7f0000000c00)=0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=r5, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={r4, 0x10, &(0x7f0000000040)={&(0x7f0000000400)=""/227, 0xe3, r5}}, 0x10) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000015c0)={0xffffffffffffffff}, 0xc) ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000000100)) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) r8 = creat(&(0x7f0000000140)='./file0\x00', 0x42) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r9, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, r11}, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000000180)={0x2, 0x6, 0x0, 0xffffffff, r11}, 0x10) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r7, 0x84, 0x78, &(0x7f0000000180)=r11, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x0, 0x1d, &(0x7f0000000280)=ANY=[@ANYBLOB="14b200000400000095000000000000002259a25613b6180f9810c16ee0ad57a41c0ed920df4d2c6e726db9d0569ce3960c56c54d2d011aa093fcf1b0fc48c47ab1765812e29e44c186972f633b43975d9ed6e7687e5c7e52950be884d57ebbd550f89244dc4257791bf2ab6ae6f15a80d699d0dcf633a1abe352c91ba45d80269fe7ccac618348231818f3c5653083e29359cdaf5a2e77c4f4043514b9d9c2ef2604197366f5171063980ac9d6a87bc041051990bf49075788610edd42abeb6650e3f44bf9415f25c3255e09ed98c226984996553b337e8341b908c2f7a5735c66724c7a6f2b000000000000"], &(0x7f0000000840)='syzkaller\x00', 0x5, 0xa, &(0x7f0000000880)=""/10, 0x41000, 0xb23b053f2adf3d86, [], r2, 0x12, r3, 0x8, &(0x7f0000001540)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000001580)={0x2, 0xe, 0x7, 0x3}, 0x10, r5, r6}, 0x78) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r5, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xfa}, 0x0, 0x0, 0x1, 0xc}, 0x0, 0x2, 0xffffffffffffffff, 0x2) sendmmsg(r0, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) 15:45:34 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)="58901c00000000", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:34 executing program 2: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) writev(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)="ee", 0xc}], 0x1) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x559302, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x3}, 0x2) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f00000000c0)=r3) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in6, @in6=@initdev}}, {{@in6=@ipv4}, 0x0, @in=@dev}}, &(0x7f0000000440)=0xe8) 15:45:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0xbd22d54e40a13133, 0x70, 0x0, 0x8, 0xff, 0x0, 0x0, 0x41c1, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa, 0xa2}, 0x10201, 0x0, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, 0x0) r2 = gettid() write$cgroup_pid(r1, &(0x7f0000000000)=r2, 0x12) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r3, &(0x7f0000000180)='.//ile0\x00', r3, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000300)={0x0, 0x0}) perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x7, 0xdd, 0x2, 0x40, 0x0, 0x7, 0x80000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x9, 0x4158}, 0x1, 0x2, 0x7f6e, 0x4, 0xdc8c, 0x8, 0x8}, r5, 0x5, 0xffffffffffffffff, 0x0) r6 = getpid() r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000780)='/dev/snapshot\x00', 0x420405, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r7, &(0x7f0000000980)={0xc, 0x8, 0xfa00, {&(0x7f0000000800)}}, 0x10) sched_setscheduler(r6, 0x5, &(0x7f0000000380)) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x22140}) r10 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r10, 0xc1205531, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r10, 0x80082102, &(0x7f0000000740)=r4) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) r11 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) socket$caif_seqpacket(0x25, 0x5, 0x0) setuid(r12) syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000003c0)='./file0/f.le.\x00', 0x9, 0x3, &(0x7f0000000640)=[{&(0x7f0000000400)="eb2f5932ca46ef35984580608257b441d93612c9f84f01294c0da351bde34babb4d522b9d3df12843377499702f1e7c5cae0135e11c9b0dcd97acdb5dd7a3dc813a4c908900e5eb83f7626268ad44fb8c95139f90f8c9f860ae4e163fd8effdcd1387fbc6930ff1c9a0dea4f971dce996f483a213a841072b57142eb781e839107749d4de89569f09fe59d7cfab81603b4b224525789673b98ac0d86b7177f631c8177529f952b4476b39f1c3fbe0033aeea269d161d11a3c8e491bba0222500ffbe3426c3ec7cb97add97846502c257dc8026bd739d4be7220503dd32a2f125aa16c2ad33053a46995de1be3f", 0xed, 0x1}, {&(0x7f0000000500)="61110e804a3864650a3c5da40d561b31d267dd51178633e34bbb7b563346c3a065347c44c7a378285070f1ee1243f96c6f895b07dea8d737c77df45fecc7413dd1d9fea022cf1b6bacb3410f1c8f059b2d14b3f24fff77340985da96acc6c55f37a225aeb69778a15ece078301c7027aca8b4bd07f82e9afe452791d450b56", 0x7f}, {&(0x7f0000000580)="80227bab470da38862aa2ad38b627997caa9ca74d922ad1fee2e6949b64f29fd1511a837119f066368438af3fe3c019f03efde581ee8d577bb0251c6e81de89d66f89d6cd1689ed6d9230ccd92b2aace018eb9d302808d9bcc9dbc20ca6519aa4283aae37eb54b56393ac8d85318dd9e184c9443803948967fdef7a58a2cec004f", 0x81, 0xc536}], 0x800000, &(0x7f00000006c0)={[{@fat=@nocase='nocase'}, {@dots='dots'}, {@nodots='nodots'}, {@fat=@nfs='nfs'}, {@dots='dots'}, {@nodots='nodots'}, {@fat=@umask={'umask', 0x3d, 0x40}}, {@fat=@sys_immutable='sys_immutable'}], [{@subj_user={'subj_user', 0x3d, '/dev/nullb0\x00'}}, {@uid_eq={'uid', 0x3d, r12}}]}) ioctl$KVM_RUN(r9, 0xae80, 0x0) [ 1513.571828] TSC Offset = 0xfffffcd30472c50a [ 1513.576146] EPT pointer = 0x0000000091b9701e [ 1513.580710] Virtual processor ID = 0x0002 15:45:34 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv4_getnetconf={0x2c, 0x52, 0x300, 0x70bd26, 0x25dfdbff, {}, [@NETCONFA_FORWARDING={0x8, 0x2, 0x80000001}, @NETCONFA_IFINDEX={0x8, 0x1, r4}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000004}, 0x24004815) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:34 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x81, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmmsg(r0, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) 15:45:34 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r5, 0x800443d3, &(0x7f0000000080)={@none, 0x3, 0xfff8, 0x2}) 15:45:34 executing program 2: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) writev(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)="ee", 0xc}], 0x1) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x559302, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f00000000c0)=r3) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300)={0x0, 0x0}) rt_sigqueueinfo(r6, 0x1c, &(0x7f00000004c0)={0x3a, 0xbe, 0x9}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r7, @ANYBLOB="000a000f000000"], 0x28}}, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r9, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f00) getpeername$netrom(r9, &(0x7f0000000240)={{0x3, @null}, [@remote, @default, @netrom, @remote, @remote, @default, @netrom, @default]}, &(0x7f00000002c0)=0x48) socket$netlink(0x10, 0x3, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r10, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f00) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r11, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f00) getsockopt$inet6_IPV6_IPSEC_POLICY(r11, 0x29, 0x22, &(0x7f0000000340)={{{@in6, @in6=@initdev}}, {{@in6=@ipv4}, 0x0, @in=@dev}}, &(0x7f0000000480)=0xe8) 15:45:34 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="f0ca9a0000a927b18901c92e3e60f65dc776f773973cb7c1dc71eed3a23db9c75d4bfca23d3ebaa9fd1cee08ad4c0a55a9bbb9c9630e2f8d5c0294ead00f219d20b07fa090443cd0d75310d469560992e7e578ca4e072b84ea746488d6d8441de7635d806317e5afaf3a0f9a907aa1adaaf49466fdc9ccb4b3bb6edd1d18ef9953db72f7503daa584975fa9000c798a1700ac05027f866ba02"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:34 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r1, 0x8010500c, &(0x7f0000000000)) bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, 0x0) prctl$PR_GET_FP_MODE(0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xd6f, 0x7, &(0x7f00000004c0)=[{&(0x7f0000000140)="7e53230ed606d1d05c9729f14481b1c805f2eb07971bbe9a0ceb0a1a629c8369ac2cc3489bb7a1f1251ae48fa9294919bcf3aca4d92c4af1da141d7344081ada82a9cac1705ba7f9e5c452f87b7c6d401c1962221257e01ef1f88a36613a4edbfe435707b9b1829d9f670eb728aba5b21218681a07c1dc0559cce6af3bd814d89076b2657da3e4445c3a89c7d80e61594e5defbabbbf86898653ff20fbe56c9f8cfe536177fb88cddc3d9e82ecd0fc90001bbd886a671fddfa09e8d899e97b427a276a9cf33dbd931a4ee930672f9039ac731220408122e41ceb1d1dfe532a9bb2b02f5b355e56c035c0a73c81865c4ccc91", 0xf2, 0x8001}, {&(0x7f0000000240)="afcb91e7a27b0d1cc5d5d43acfc9ff43fe87eafd57fef5fab8159e2dc6e9f2239df90f9906ef8a4151cd57676a2806dc3c055a22e2f7339b5b6e8456e38a6b135be5ee45ed00eef208b73d", 0x4b, 0x1}, {&(0x7f00000002c0)="b5f0dcaf35c7fbf0e9bce707fb88c54ae1458c7b3996249c3bceba7cdac684894d4ab6d77cc122ee44773478ead39f017fc5219e5be9e45bad6cabfcf414b3a41201bcc250ef", 0x46, 0x4}, {&(0x7f0000000340)="9bc67928e5a821ac7bb6d8638ac21e21ef23fed3f3495a2b89640a8e0e2dec363589954e314c3ea500ee5494a9e667246b4293ef956c3fcb067d16bb91d7b940cc8a", 0x42, 0x1}, {&(0x7f00000003c0)="016bd424d993a94868b9c275db59e95d80e96394106114644cc9e1c8e56291a1546c6ccf388c5f8d3783e6bf3d44ee9a3575b66b08901c3afba00ff487334f4488f9021faac997b89607079d0286b2cf90a5020b0e31d8294d09093d7711e89fec54f9b8a8a7d263a9791f534875644c5e6d05993614bcee57c6b8a86e2fd2439d01c2b9187e30eccc46fca94a7e66412e3f5bd5dba686f528210db7f6e29ac55cda90359c4f5c797dc84b9882154a00c210a69f47bf196759bcbeec83", 0xbd, 0xdb5d}, {&(0x7f0000000480)="1642e76902c284ce8d0db8827bbba858505e4caff18cb13243158d2bad95fbee5e343a014364a7c008af319903b34dd4a61aa8c825e2f2318420", 0x3a, 0x1}, {&(0x7f0000000740)="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", 0x1000, 0x400}], 0x44051, 0x0) sendmmsg(r0, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) 15:45:34 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f00000002c0)={0x0, @bt={0x400, 0x5b, 0x0, 0x2, 0x7, 0x5, 0x40, 0x8, 0x5, 0x7fffffff, 0x6, 0x9, 0x400, 0x9, 0x8, 0x21, {0x1, 0x1}, 0x40, 0x6}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 1513.896725] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1513.961349] *** Guest State *** [ 1513.964678] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1513.975759] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1514.004891] CR3 = 0x00000000fffbc000 [ 1514.013792] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 1514.026785] RFLAGS=0x00022142 DR7 = 0x0000000000000400 [ 1514.036471] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1514.048032] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1514.056975] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1514.077367] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1514.096276] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1514.112080] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1514.121864] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1514.130773] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1514.139628] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 15:45:34 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0xb) write$binfmt_elf64(r1, &(0x7f00000001c0)=ANY=[@ANYRES64=0x0, @ANYRESDEC, @ANYRES64, @ANYRES32=0x0], 0x28) close(r2) r3 = socket(0x9, 0x1, 0x4) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r4, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f00) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f00000002c0)={0xfffffff8, {{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x3, [{{0x2, 0x4e21, @multicast2}}, {{0x2, 0x4e23, @empty}}, {{0x2, 0x4e23, @rand_addr=0xffff}}]}, 0x210) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) getsockopt$X25_QBITINCL(r3, 0x106, 0x1, &(0x7f0000000080), &(0x7f0000000180)=0x4) 15:45:34 executing program 0: futex(&(0x7f000000cffc), 0x180, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") futex(&(0x7f000000cffc), 0x85, 0x0, 0x0, &(0x7f0000048000), 0x5000000) futex(&(0x7f0000000000)=0x4000001, 0x4, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000080)=0x1, 0x1) 15:45:34 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = getpid() r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) sched_setattr(r4, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) ptrace$getregs(0xe, r3, 0x100000000, &(0x7f0000000180)=""/115) writev(r1, &(0x7f0000000340)=[{&(0x7f00000000c0)="580000001400ad", 0x7}, {&(0x7f0000000440)="8f07c552e250c08002b5fb725ab7a5e5e42b18b234bec548c147b07da1725c7b9066e0b96cd58784aff4ee9461e8f584f243d492fb050418212794ed0faf27d580812107b7bd5dc1b700e1810af1b11e12c703d8a463ae6c5cbd53922ff91616c01eb21dfc31b0ec54048a0907929ebdb2bbf21cf28daf65bea4100295ab0718f2a803837383db20ea0e1d9b1447cd0773a47fbc78b19b4729af05983d43bfe8398d2f1f86071946ca21e11449655b43220ced8b4205f2454034fd698b1200742c79fb7cc13a0afb103d3f50055b5204ebda7b76fa2e1e25afa1afb9e4e0d10f9510ee6b43b19de64a", 0xe9}, {&(0x7f0000000540)="59733517bad26856dab38dcffadf6465e05f063437ec68b399ddb2fcc75312bdd365deeaa8040522e89629b5aee62605e9dc210fc0ec3b8dadc7c416cbb2378f0a9790d8c8e55824b5ab31d29aeee31d0a3dd5c326d63657ee1ec11ed5a6c75ad490f0fc937bae6b", 0x68}], 0x3) write$binfmt_elf64(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="93ca9a0000a92700b1000096e504f745b1fecb"], 0xa) close(r2) ptrace$setregs(0xd, r4, 0x7ff, &(0x7f0000000200)="56944d93766452dc8082843403e8e2f366521bb32dcf23c7374880ccd9a0c94bdc92625919e53e81141494") socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000003c0)={'syz1', "22ff71563d6803aabeddcccfbabda6084a37ca8fd2554219e6502b16b5c78a72ff5c5e7d8e4ecf3018df430dfa2e3d18b1b343961c85a8124385def07be5f97303ad47ab022fe33ce79be310e642d06ee09dab5d396256181788ba6dbf"}, 0x61) ioctl$sock_SIOCINQ(r7, 0x541b, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r8, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) close(r8) accept(r8, 0x0, 0x0) getsockopt$bt_hci(r8, 0x0, 0x3, &(0x7f00000002c0)=""/11, &(0x7f0000000300)=0xb) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000080)) [ 1514.159709] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1514.168975] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1514.189620] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1514.207119] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1514.217345] Interruptibility = 00000000 ActivityState = 00000000 [ 1514.235740] *** Host State *** [ 1514.239565] RIP = 0xffffffff8117a4e0 RSP = 0xffff888044f37998 [ 1514.251690] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1514.258862] FSBase=00007fc3fc826700 GSBase=ffff8880aec00000 TRBase=fffffe0000034000 [ 1514.272721] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 1514.279112] CR0=0000000080050033 CR3=00000000a51f2000 CR4=00000000001426f0 [ 1514.286876] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff868018e0 [ 1514.293978] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1514.300336] *** Control State *** [ 1514.303825] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000e2 [ 1514.310860] EntryControls=0000d1ff ExitControls=002fefff [ 1514.316328] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1514.329555] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1514.336437] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1514.343132] reason=80000021 qualification=0000000000000000 [ 1514.349449] IDTVectoring: info=00000000 errcode=00000000 [ 1514.355024] TSC Offset = 0xfffffcd25f264431 15:45:35 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x341640, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000040)={0x8, 0x15, 0x4, 0x975, "790b6f28bca49ee070727f091c1233a63851f40852393df6e02dfe7e02eff5ba"}) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) [ 1514.359348] EPT pointer = 0x00000000a098901e [ 1514.363947] Virtual processor ID = 0x0002 15:45:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x10003, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r4, &(0x7f0000000180)='.//ile0\x00', r4, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$SG_GET_SG_TABLESIZE(r4, 0x227f, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x22140}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x296803, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 15:45:35 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0x0) close(r2) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r3, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x9, 0x5c}) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r6, 0x0, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r6, 0x0, 0x487, &(0x7f0000000180), &(0x7f00000001c0)=0x30) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:35 executing program 0: futex(&(0x7f0000000180), 0x9, 0x2, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f00) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000000)={'geneve1\x00', 0x2}) futex(&(0x7f000000cffc), 0x85, 0x0, 0x0, &(0x7f0000048000), 0x5000000) clock_nanosleep(0x2, 0x0, &(0x7f0000000240)={0x0, 0x1c9c380}, &(0x7f0000000280)) 15:45:35 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r1) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000000)={0x1a, 0x205, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r5 = getpid() tkill(r5, 0x9) r6 = fanotify_init(0x0, 0x0) r7 = dup(r6) ioctl$FIONREAD(r7, 0x541b, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') setsockopt$MISDN_TIME_STAMP(r8, 0x0, 0x1, &(0x7f0000000300), 0x4) sendmsg$NL80211_CMD_GET_WIPHY(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="210200000106000000000000080003804eb4e5363835c3e712723bfe80e6f3955cb915b4456bdceaacacb319e9bd16566009e6d44e59f74c98ff4d0a6cfc4b4436326b99cdadc692e4c9fe844c38469544244683cfee56008a7f221e97593aee3f8579d0b8da7a9d4a42780cd68dbad4ed1f4121fe752a082c1ba19fd10000000000000040000000000000", @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x0) r12 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r12, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r12, 0x0, 0x0) r13 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r13, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r13, 0x0, 0x0) r14 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r14, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r14, 0x0, 0x0) r15 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r15, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r15, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r9, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000640)={&(0x7f0000000780)=ANY=[@ANYPTR=&(0x7f0000000680)=ANY=[@ANYPTR64, @ANYRES16=r12, @ANYBLOB="f8c46a9dad47f1e9c81ee2065916cb2c4d134827010f62181a2689a50d670c40f9cd857eac346feee1dcfe0af887d9c5b2a353f3ceb59e5bfeff9cb06cff42a0227c950e414b8f15b4caff605338182d1e26f03100ef07a51872a8ab2a550d539178ed69a575e01c2853cdb32a3a9e750566b460677a358a8003191814863f12e4284ede0ee714f1d2f9cd24e8d4", @ANYRES32=r9, @ANYRES64=0x0, @ANYRES64=r5], @ANYPTR64=&(0x7f0000000940)=ANY=[@ANYRES32, @ANYRESHEX=r15, @ANYPTR=&(0x7f0000000980)=ANY=[], @ANYRESDEC=r4, @ANYPTR], @ANYRES16, @ANYRES16=0x0], 0x4}}, 0x400) accept(r2, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000180)={0x80, 0x16e, 0x3, 0x7fffffff, 0x5}) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0xfef0) socket$inet6_tcp(0xa, 0x1, 0x0) [ 1514.712085] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 15:45:35 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="f0ca9a0000a927b18901c92e3e60f65dc776f773973cb7c1dc71eed3a23db9c75d4bfca23d3ebaa9fd1cee08ad4c0a55a9bbb9c9630e2f8d5c0294ead00f219d20b07fa090443cd0d75310d469560992e7e578ca4e072b84ea746488d6d8441de7635d806317e5afaf3a0f9a907aa1adaaf49466fdc9ccb4b3bb6edd1d18ef9953db72f7503daa584975fa9000c798a1700ac05027f866ba02"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:35 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r3, 0x0, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r4, 0x0, 0x0) splice(r3, &(0x7f0000000080), r4, &(0x7f0000000180)=0x4c3, 0x20000000007, 0xb) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$audio1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio1\x00', 0x80, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f00000002c0)={0x2f, @loopback, 0x4e23, 0x2, 'sh\x00', 0x1e, 0x80000000, 0x59}, 0x2c) ioctl$SOUND_PCM_READ_CHANNELS(r7, 0x80045006, &(0x7f0000000240)) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:35 executing program 1: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000440)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@dev}}, &(0x7f0000000540)=0xe8) syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x7f, 0x4, &(0x7f00000003c0)=[{&(0x7f0000000100)="6f68290849e0bd728651dead968fbc4c717139e0752e1afee31a6629995c9713087fa7567ec7fa48f7733b792a0eb0b379ba89971597d8c930547f0bac866e7784077f0746ac71b3ddab77ad87a75ad05124b0dc94d7d9474485e604f88604e87bcfc7224627713e45", 0x69, 0x5}, {&(0x7f0000000180)="027abd87133351c6343d03ce20b352e818040d35f1617a367c565e10b5a816061c819d457b15643075fe06e4ee5f37b3c1838259c6272386ca71b6d24de0234300937f5bc3ca3766efce3295616e53470870f5591839fcf75db3bc4a355156a15bf37115c9827f783c22cd2b70588e2c85edd0c8a7088fa50686da9ae3caa4f3b6c8688c25d784f57b0940645334966355aea0f8c35d1cad389f2f46c9d5f856a2cc2bd816c81725b71734281cce09f6ddc25746f871ceba761a5abd73c3b7a9752f3f4bb68e56cecfa7e418fa6dafc9068af1883eabbaed19e8", 0xda, 0x1}, {&(0x7f0000000280)="facf08eac8f174853220bdfdea6b39f18a697fb6f5dc4868e8f9651c303523c25195f605b8095fcaa82cdfcf6fc7b6c68aae5c9c42c2d1475d01ab91294695672bcd982e4cd83886c25a9d8b100fca27e8610042b11825f8dc47e7c043f19befb5628bf9fdae7e7c88b7db7e0136baf884e3cb23b04856e249b8c8949d16fade1ffe3cb3f8050182b26f68bf588c9c8812fdfdfadbbe922eff456eeb", 0x9c, 0x2}, {&(0x7f0000000340)="243dd4cd63ec7e719e91222d206fa88b50d27434144b5ddd1f703b331858730d843555b4a80034b8adecd01581084b58e960ddb99fc3865de5c16dea66504161620ba575f2c70e620fad00ad8aa22d", 0x4f, 0x5}], 0x20, &(0x7f0000000580)={[{@conv='conv'}, {@notail='notail'}, {@user_xattr='user_xattr'}, {@barrier_none='barrier=none'}, {@balloc_noborder='block-allocator=noborder'}, {@noquota='noquota'}, {@noacl='noacl'}, {@balloc_test4='block-allocator=test4'}, {@hash_tea='hash=tea'}], [{@obj_role={'obj_role', 0x3d, 'cgroup\'$eth1(keyring,'}}, {@subj_user={'subj_user', 0x3d, 'em1em0)'}}, {@pcr={'pcr', 0x3d, 0x5}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@uid_gt={'uid>', r0}}, {@smackfsroot={'smackfsroot', 0x3d, '-system&&.posix_acl_access\'!]#\'cgroupproc'}}, {@smackfsfloor={'smackfsfloor', 0x3d, ')}*/)selfeth1\\em0'}}]}) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) [ 1514.772768] *** Guest State *** [ 1514.776123] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1514.787643] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1514.797149] CR3 = 0x00000000fffbc000 [ 1514.807701] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 1514.814955] RFLAGS=0x00022142 DR7 = 0x0000000000000400 [ 1514.826577] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1514.836051] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1514.859188] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1514.859682] geneve1: Invalid MTU 2 requested, hw min 68 15:45:35 executing program 2 (fault-call:1 fault-nth:0): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e1) [ 1514.883989] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1514.909003] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1514.921489] IPVS: set_ctl: invalid protocol: 47 127.0.0.1:20003 [ 1514.923411] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1514.957860] selinux_nlmsg_perm: 629 callbacks suppressed [ 1514.957871] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=26071 comm=syz-executor.3 [ 1514.977435] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1514.981796] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=26071 comm=syz-executor.3 [ 1514.998559] GDTR: limit=0x0000ffff, base=0x0000000000000000 15:45:35 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, 0x0) ioctl$UI_END_FF_ERASE(r3, 0x400c55cb, &(0x7f0000000080)={0x9, 0x0, 0x5}) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000002c0)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd1791171645f08801eb817b7254fa36b5f3fa8b20a17012bd5a9b837f1f256598da12fc8869483c58a16c236c10c93bd0505503686a31e02eef9cb32d30fb34846a00077978ce2ea8bfc736a5325e60121e16f380c86d0d8cc1a99d662963fe19d53486f6b879fcaac990086ae3bcb3fab", 0xb7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r1, 0x0, 0x80000001, 0x0) 15:45:35 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) connect$unix(r1, &(0x7f0000000080)=@abs={0x0, 0x0, 0x4e20}, 0x6e) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x18d202, 0x0) ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f0000000040)={0x19, 0xef7}) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) [ 1515.028513] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1515.044000] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=26071 comm=syz-executor.3 [ 1515.094979] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=26071 comm=syz-executor.3 [ 1515.101596] IDTR: limit=0x0000ffff, base=0x0000000000000000 15:45:35 executing program 2: ioctl$sock_rose_SIOCRSCLRRT(0xffffffffffffffff, 0x89e1) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f00) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x42) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440)='/dev/bsg\x00', 0x132200, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000480)='dctcp\x00', 0x6) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, r4}, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000180)={0x2, 0x6, 0x0, 0xffffffff, r4}, 0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000380)={0xce9, 0x0, 0x8202, 0x4, 0x3, 0x2, 0x3, 0x8, r4}, &(0x7f00000003c0)=0x20) r6 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x141) r7 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r7, &(0x7f0000000180)='.//ile0\x00', r7, &(0x7f00000007c0)='./file0/f.le.\x00') renameat(r6, &(0x7f0000000180)='.//ile0\x00', r6, &(0x7f00000007c0)='./file0/f.le.\x00') r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r8, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r8, 0x0, 0x0) r9 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r9, 0x84, 0x1b, &(0x7f0000000540)=ANY=[], &(0x7f0000000400)) ioctl$KVM_SET_SREGS(r9, 0x4138ae84, &(0x7f0000000240)={{0x18000, 0x2, 0xa, 0x5, 0xfc, 0x80, 0x9, 0x6, 0x5, 0x1, 0x3f, 0x9}, {0x2000, 0x2, 0x8, 0x0, 0x5, 0x3, 0x9, 0x2, 0x0, 0x80, 0x7, 0x6}, {0x6000, 0x4, 0x10, 0x8, 0x1f, 0x41, 0xf9, 0x5a, 0x7, 0x6, 0x7, 0x7a}, {0x5000, 0x5000, 0xf, 0x5, 0x4, 0xc0, 0xf9, 0x9, 0x40, 0x7, 0x81, 0xda}, {0x100000, 0x4, 0xe, 0x5, 0xe0, 0x3f, 0xb9, 0x4, 0x20, 0x0, 0xf7, 0x40}, {0x5000, 0xd000, 0xc, 0x1, 0x1, 0x4, 0x5, 0xfc, 0xf3, 0x5, 0x7, 0xff}, {0x4000, 0x4003, 0xe, 0x4, 0x5, 0xff, 0x9, 0x40, 0xe8, 0x4, 0x4, 0x85}, {0x3000, 0x6000, 0xe, 0x0, 0x6, 0x61, 0xfd, 0xff, 0x2, 0xf9, 0xcc, 0x3}, {0xb000, 0x1}, {0x1000, 0x10000}, 0x40040001, 0x0, 0x1000, 0x50000, 0x5, 0x8000, 0x2000, [0x3ff, 0xbd70, 0x72, 0x516]}) ioctl$VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000000040)={0xfffff801, 0x7, 0x4, 0x70000, 0xff, {}, {0x4, 0x0, 0x0, 0x4, 0x0, 0x7, "38739a73"}, 0x0, 0x4, @planes=&(0x7f0000000000)={0x1ff, 0x9cdf, @mem_offset=0x5, 0x7}, 0x0, 0x0, r8}) ioctl$sock_inet_SIOCSIFPFLAGS(r10, 0x8934, &(0x7f00000000c0)={'bridge0\x00', 0x1}) clone(0x4000000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000200)="9b2e") [ 1515.147488] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=26071 comm=syz-executor.3 [ 1515.163402] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1515.185053] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=26071 comm=syz-executor.3 15:45:35 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000006c0)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f0000000040)={0x81, 0x3d, 0x5, 0x2, 0x4, 0x80000001}) sendmmsg(r0, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) [ 1515.212013] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1515.225149] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1515.231590] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=26071 comm=syz-executor.3 [ 1515.236651] Interruptibility = 00000000 ActivityState = 00000000 [ 1515.263012] *** Host State *** [ 1515.267679] RIP = 0xffffffff8117a4e0 RSP = 0xffff888044f37998 [ 1515.268310] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=26071 comm=syz-executor.3 [ 1515.287563] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1515.289825] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=26071 comm=syz-executor.3 [ 1515.305578] FSBase=00007fc3fc826700 GSBase=ffff8880aec00000 TRBase=fffffe0000034000 [ 1515.309483] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=26071 comm=syz-executor.3 [ 1515.327157] audit: type=1804 audit(1579880736.097:274): pid=26101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir743373625/syzkaller.0Q92aS/1889/file0" dev="sda1" ino=17247 res=1 [ 1515.361064] audit: type=1804 audit(1579880736.097:275): pid=26101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir743373625/syzkaller.0Q92aS/1889/file0" dev="sda1" ino=17247 res=1 [ 1515.365695] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 1515.397897] IPVS: set_ctl: invalid protocol: 47 127.0.0.1:20003 [ 1515.400566] CR0=0000000080050033 CR3=000000005c37e000 CR4=00000000001426f0 [ 1515.417162] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff868018e0 [ 1515.425506] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1515.448031] *** Control State *** [ 1515.463377] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000e2 [ 1515.472100] EntryControls=0000d1ff ExitControls=002fefff [ 1515.477782] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1515.479491] *** Guest State *** [ 1515.487874] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1515.490984] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1515.505455] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1515.509745] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1515.515148] CR3 = 0x00000000fffbc000 [ 1515.522159] reason=80000021 qualification=0000000000000000 [ 1515.531735] IDTVectoring: info=00000000 errcode=00000000 [ 1515.537327] TSC Offset = 0xfffffcd1f7b5df46 [ 1515.538872] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 1515.541946] EPT pointer = 0x0000000083ec801e [ 1515.541956] Virtual processor ID = 0x0002 [ 1515.558500] RFLAGS=0x00022142 DR7 = 0x0000000000000400 [ 1515.564709] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1515.571721] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1515.579878] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1515.588388] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1515.597004] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1515.615030] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1515.623369] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1515.632398] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1515.642010] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1515.651258] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1515.659978] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1515.668504] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1515.676984] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1515.686262] Interruptibility = 00000000 ActivityState = 00000000 [ 1515.693247] *** Host State *** [ 1515.696457] RIP = 0xffffffff8117a4e0 RSP = 0xffff8880556f7998 [ 1515.703729] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1515.711973] FSBase=00007fc3fc7c2700 GSBase=ffff8880aec00000 TRBase=fffffe0000003000 [ 1515.720748] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 1515.726802] CR0=0000000080050033 CR3=000000005c37e000 CR4=00000000001426f0 [ 1515.734535] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff868018e0 [ 1515.742693] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1515.749255] *** Control State *** [ 1515.753030] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000e2 [ 1515.760574] EntryControls=0000d1ff ExitControls=002fefff 15:45:36 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x10000, 0x0) ioctl$RNDCLEARPOOL(r3, 0x5206, &(0x7f0000000180)=0x9bd) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:36 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x3, &(0x7f0000000080)=[{0x3f, 0x4a, 0x6, 0x3}, {0x101, 0xd7, 0x7, 0x7f}, {0x800, 0x0, 0x1, 0x8}]}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:36 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r2, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f00000001c0)) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000540)=ANY=[], &(0x7f0000000400)) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000040)={&(0x7f0000000000), &(0x7f0000000100)=""/75, 0x4b}) bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401, 0x0, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, 0x0) ioctl$TCGETS(r3, 0x5401, &(0x7f0000000180)) 15:45:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x22140}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 15:45:36 executing program 0: futex(&(0x7f0000000000)=0x2, 0x81, 0x2, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x80002, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x6b01, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") futex(&(0x7f000000cffc), 0x85, 0x0, 0x0, &(0x7f0000048000), 0x5000000) [ 1515.766714] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1515.773991] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1515.781545] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1515.788359] reason=80000021 qualification=0000000000000000 [ 1515.794957] IDTVectoring: info=00000000 errcode=00000000 [ 1515.800920] TSC Offset = 0xfffffcd18ca0b9d6 [ 1515.805336] EPT pointer = 0x000000004c08601e [ 1515.809791] Virtual processor ID = 0x0003 15:45:36 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x15, 0xa, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 1515.914084] *** Guest State *** [ 1515.917953] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1515.929583] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 15:45:36 executing program 5: r0 = getpgrp(0xffffffffffffffff) ptrace$getregs(0xe, r0, 0x8, &(0x7f0000000000)=""/36) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000001800000000000000000000000000000018200000", @ANYRES32, @ANYBLOB="40000005666c8b0018200000", @ANYRES32, @ANYBLOB="0000000000000000180000000000000000000000ffffff7f"], 0x0, 0x5, 0x6d, &(0x7f00000001c0)=""/109, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40046f41, &(0x7f0000000100)={r5, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) writev(r7, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r8) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r7, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r6, 0x0, r8, 0x0, 0x80000001, 0x0) [ 1515.954305] CR3 = 0x00000000fffbc000 [ 1515.958599] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 1515.980711] RFLAGS=0x00022142 DR7 = 0x0000000000000400 [ 1516.003377] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1516.015457] audit: type=1804 audit(1579880736.787:276): pid=26101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir743373625/syzkaller.0Q92aS/1889/file0" dev="sda1" ino=17247 res=1 15:45:36 executing program 2: syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x84040, 0x31) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) ioctl$SIOCX25GCALLUSERDATA(r1, 0x89e4, &(0x7f0000000040)={0x4c, "e89476b5a7d06e4430611c07c21719d6404d22f737a28e5857a89fe2da16afb031a68a5273fb3934976a147aa9dafb1dd2b599191f7f770ab9e02b2cb413cf7ba5274d91c558fcd7cc3980342967545b65485859a366038d727655a6fec27cf03f7605a5bc8049062cd430f5430a8b1d8dc70a2ecf6449ddd974e2c4d821ddd7"}) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, 0x0) ioctl$SNDRV_PCM_IOCTL_DROP(r0, 0x4143, 0x0) ioctl$sock_rose_SIOCRSCLRRT(0xffffffffffffffff, 0x89e1) 15:45:36 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000004c0)="49221dc81ea581e3388e3d64cfe4d166bb9404f48152a18d64bed8ba4366c130c6a6c6401c9071c613138ce028b64c971ea4285e8c6b56b2b3b98acf23b1d619e35492b10bf5e47673b4e7ca72ddbc6b7801ca8e3942bec66676768744cf316a944b00b9ec7988369f01e2036220a64ff3f6f939110baf32e97b93d06286c55785", 0x81}, {&(0x7f0000000580)="4eaff9734a1065f08eff81ec294995ed2c08c54a810fc4bd94758bf60c75e4a928fdc51a978b23b90b454ab2074dddc88ef3122b7a6d80a1e69c0120424755dbbf023fb1ab70c516edd56ebe44a951317437120e82d723231ca7eab9bfb872d7800c7cd5969b946c447ebc1e6a77fda710019b856ab7ccb46c408513885664570a18e6709857da03a04e59a7dc908000ff84d1695e7a43da28427e694aa617a0df640b7bb292", 0xa6}], 0x2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 1516.051771] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1516.062433] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1516.072440] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1516.139979] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 15:45:36 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x0, 0x0, 0x4e24}, 0xfffffffffffffc74) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af14, &(0x7f0000000180)={0x3, 0x7}) stat(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000100)) sendmmsg(r0, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x5050c0, 0x0) 15:45:37 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f0000000080)={0x9, 0x61eb, 0x40, 0x5}) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="f0ca9a00d6dddbf689012a001215e04d3886b4995189979d49cfb91ede0bf8d083187f72fc9cbe2a0f491b44d3aa74c08eb2586f75cdef2f0d8ae2fb7d91eb1ad8a58c4da203004a58eae0d0661ea1bdc962b0cb264b097839b81d7c9bc7643a7c77ad7ee818799dd94539105a336d3b8a7d0581e9309fb20b3d46b5b7e82f84247de419f92b66d6e470284a99ac59f1f37ddba22c5c97f537df1c468c12c4f5627a66b7aba8ff748b947e1bb3755715eeaaf1d3"], 0xa) r3 = getpid() syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0xff, 0x280002) sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) syz_open_procfs(r3, &(0x7f00000000c0)='net/stat\x00') close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 1516.170337] audit: type=1804 audit(1579880736.787:277): pid=26129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir743373625/syzkaller.0Q92aS/1889/file0" dev="sda1" ino=17247 res=1 [ 1516.185574] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1516.229637] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 15:45:37 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@random={'btrfs.', '-[em0selfvmnet0^-wlan0em1selinux\x00'}, &(0x7f0000000040)=""/28, 0x1c) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e1) alarm(0x6df7) 15:45:37 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000080)={0xf000}) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 1516.242243] audit: type=1800 audit(1579880736.977:278): pid=26140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="file0" dev="sda1" ino=17247 res=0 [ 1516.245337] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1516.323655] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 15:45:37 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000006c0)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x200400, 0x0) sendmsg$IPSET_CMD_SWAP(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x6, 0x6, 0x3, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x40004) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x4400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) [ 1516.367478] audit: type=1800 audit(1579880736.987:279): pid=26140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="file0" dev="sda1" ino=17247 res=0 [ 1516.376361] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1516.403985] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1516.414054] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1516.429342] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1516.439039] Interruptibility = 00000000 ActivityState = 00000000 [ 1516.459797] *** Host State *** [ 1516.469829] RIP = 0xffffffff8117a4e0 RSP = 0xffff8880556ff998 [ 1516.489192] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1516.497762] FSBase=00007fc3fc826700 GSBase=ffff8880aed00000 TRBase=fffffe0000034000 15:45:37 executing program 5: r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000180)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0xc00, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000380)=r1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="f0010000000200000000dd865c2229bad8bf92d1d7151d703091bd257cd952d43ab2008e07a125b11e66e4a6334a47e1597f316b632d68f3b767d5e634d7db33d2b2973fda22a19f0cae4eb463e186f8d3f2123e656663a9741f306362ee3e9bd61c0e643452d76452e3cd19f21b09b660161966bdc6289f9e96c6752c93cc74afb400"/152], 0xa) close(r4) r5 = socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfef0) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000000240)={0x2}) connect$llc(r6, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r8 = creat(&(0x7f0000000140)='./file0\x00', 0x42) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r9, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, r11}, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000000180)={0x2, 0x6, 0x0, 0xffffffff, r11}, 0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000540)=ANY=[@ANYRES32=r11, @ANYBLOB="7e000000cd4bf987f64aeb737316feeea13a7c771925d6887013cdd6ddb3b84cf1d611920931c5c4f80383d094ad1838e20544d17c559c0ef3e96b79137308e481492ba071d49984c7d37d0ca85270ae8f36e2d813063bd2dc33bfa80fb97fec486c1188a8787db2a0809b99ae3ff86138da1e0000000000000000000000000000004b3ce773c03429a68ba1d9a5ed477afad455d4288c08f924d857337164968ad8cd952cb9351110c185910eb816b854e0f185d9366e8bc30fed1060af819074a41209e3043cf09131ba17c7a22012dd2b809cb06155edd7f16a04ca6cc4e1ad708c14e3363dc61c843b44514b4ce57cedb8e9284bb01664d93f2156804fef9ec80070aa3e312dec54d2cfa44b99b1bf18b4c0e02ba667dbbdd6933f9f762b73406c1cb0e4489dafa417afba7e9fbf2a3b2d2189bfe4ea11c9ede36b8a8abdbc"], &(0x7f0000000480)=0x86) connect$llc(r7, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r7, 0x0, 0x0) accept4(r7, 0x0, &(0x7f0000000080), 0x1000) accept(r6, 0x0, 0x0) splice(r2, 0x0, r5, 0x0, 0x80000001, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000180)={0xfffffffc, 0xc4, 0x0, {0x1}, 0x5, 0x8000}) [ 1516.529704] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 1516.579440] CR0=0000000080050033 CR3=00000000a07df000 CR4=00000000001426e0 [ 1516.619913] audit: type=1804 audit(1579880737.387:280): pid=26169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.5" name="/root/syzkaller-testdir498612187/syzkaller.ZVSYhm/56/file0" dev="sda1" ino=17258 res=1 [ 1516.645695] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff868018e0 [ 1516.722019] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1516.743896] *** Control State *** [ 1516.751885] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000e2 [ 1516.765433] EntryControls=0000d1ff ExitControls=002fefff [ 1516.772855] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1516.788374] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1516.808129] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 15:45:37 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) accept(r3, 0x0, 0x0) writev(r3, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) r4 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000540)=ANY=[], &(0x7f0000000400)) ioctl$UI_BEGIN_FF_ERASE(r4, 0xc00c55ca, &(0x7f0000000080)={0xc, 0x101, 0xa8d}) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:37 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e1) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x410000, 0x0) ioctl$TIOCSISO7816(r1, 0xc0285443, &(0x7f0000000040)={0x7, 0x6, 0x4, 0x8, 0x2}) 15:45:37 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r1, 0x0, 0x0) connect(r1, &(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x80) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) 15:45:37 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) accept4$phonet_pipe(r4, &(0x7f0000000080), &(0x7f0000000180)=0x10, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r5, 0x0, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r6, 0x0, 0x0) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r7, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r7, 0x0, 0x0) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r8, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r8, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000340)=ANY=[@ANYRES64=r5, @ANYRESHEX=r3, @ANYRES64, @ANYRESHEX=r7, @ANYRESHEX, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYPTR64, @ANYPTR=&(0x7f0000000400)=ANY=[], @ANYBLOB="a318d4a7f98f95735077beb6c2258501fcedd0447addf093b7948333179c2f71cd72dba1dda63bb35e7f8995aedfc49dc0155e908f400eccfe179b6a"], @ANYRES64=0x0, @ANYRESDEC=r3], 0x6a) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) r11 = socket$inet_dccp(0x2, 0x6, 0x0) fstat(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r11, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@rand_addr=0x8000, @in6=@dev={0xfe, 0x80, [], 0x1c}, 0x4e20, 0x0, 0x4e20, 0x8000, 0x0, 0x1a0, 0x60, 0x2b, 0x0, r12}, {0x80, 0x24ac, 0x1f, 0x800, 0x3, 0x54, 0x1000, 0x3}, {0x6, 0x200, 0x800, 0x2}, 0x9, 0x6e6bb8, 0x2, 0x1, 0x1, 0x1}, {{@in6=@mcast1, 0x4d3, 0xff}, 0x2, @in=@rand_addr=0x7, 0x3504, 0x3, 0x1, 0x7, 0x1f, 0x8, 0x433}}, 0xe8) 15:45:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x22140}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r4, &(0x7f0000000180)='.//ile0\x00', r4, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$KVM_GET_TSC_KHZ(r4, 0xaea3) 15:45:37 executing program 0: futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") futex(&(0x7f000000cffc), 0x85, 0x0, 0x0, &(0x7f0000048000), 0x5000000) [ 1516.817904] reason=80000021 qualification=0000000000000000 [ 1516.824580] IDTVectoring: info=00000000 errcode=00000000 [ 1516.830322] TSC Offset = 0xfffffcd1511f669d [ 1516.834664] EPT pointer = 0x0000000083c5a01e [ 1516.839076] Virtual processor ID = 0x0002 15:45:37 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9aa2ac3d6f0909000000000000"], 0xa) r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000540)=ANY=[], &(0x7f0000000400)) ioctl$SOUND_PCM_READ_BITS(r3, 0x80045005, &(0x7f0000000080)) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r6, &(0x7f0000000180)='.//ile0\x00', r6, &(0x7f00000007c0)='./file0/f.le.\x00') clock_gettime(0x0, &(0x7f0000000180)) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f00000001c0)=r3) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r7, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r7, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r6, 0xc0585609, &(0x7f00000002c0)={0x7, 0xb, 0x4, 0x800, 0x4, {0x77359400}, {0x2, 0x2, 0x1, 0x6, 0x9e, 0xff, "342bc8b3"}, 0xfffffffa, 0x3, @offset=0x4, 0x0, 0x0, r7}) connect$netrom(r8, &(0x7f0000000340)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x7}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x48) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:37 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000400)={0x30000000}) r3 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r3) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r4, 0x0, 0x0) write$binfmt_misc(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="3301010100000000000017dc05004e232439137f31094e5f"], 0x7) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20888489}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x104, 0x1, 0x1, 0x201, 0x0, 0x0, {0xc, 0x0, 0xa}, [@CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'Q.931\x00'}}, @CTA_SEQ_ADJ_REPLY={0x54, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x401}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x81}, @CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7ff}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}]}, @CTA_ID={0x8}, @CTA_NAT_SRC={0x20, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @empty}, @CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, [], 0x1, 0x0}}]}, @CTA_NAT_DST={0x18, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}]}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x3f}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xffffffff}, @CTA_PROTOINFO={0x38, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x34, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x9, 0x1f}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x7}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0xe0, 0x4}}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x6}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0xa4}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x3, 0x8}}]}}, @CTA_TUPLE_MASTER={0x4}]}, 0x104}, 0x1, 0x0, 0x0, 0x10}, 0x20048814) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r5, 0x800442d3, &(0x7f0000000080)={0x6, 0x200, 0x7, @random="773380ec5f12", 'veth1_macvtap\x00'}) splice(r0, 0x0, r3, 0x0, 0x80000001, 0x0) r6 = dup(0xffffffffffffffff) recvfrom$netrom(r6, &(0x7f00000004c0)=""/25, 0x19, 0x0, 0x0, 0x0) 15:45:37 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f00) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r3, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f00) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) pipe(&(0x7f0000000440)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r6 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r6, 0x0, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) pipe(&(0x7f0000000440)) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCADDRT(r5, 0x890b, &(0x7f0000000280)={0x0, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @vsock={0x28, 0x0, 0x2711}, @rc={0x1f, @fixed={[], 0x12}, 0x7}, 0x9, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000240)='bond_slave_1\x00', 0x21b, 0x2, 0x101}) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r7) r8 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) getsockname$packet(r10, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c05000000000000009ec0d83507fb0000000000", @ANYRES32=r11, @ANYBLOB="00000000000000000c0001000000000000000000"], 0x2c}}, 0x0) r12 = creat(&(0x7f0000000140)='./file0\x00', 0x42) r13 = socket$inet6_sctp(0xa, 0x5, 0x84) r14 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r14, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r13, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, r15}, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r12, 0x84, 0x22, &(0x7f0000000180)={0x2, 0x6, 0x0, 0xffffffff, r15}, 0x10) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000300)={r15, 0xcf, "8c7d1ad2d5de196a6b3b5578908c535f12e30f8679b7a8599dd7f31ad2d1d7ca42b8a7e20451e6dffc39cdd23a7cd2fd530a4d5529a19ba1e7fd7d6f42df8bd7c9e99f2601096404d37f7bd21bbd41726b27adbeb4fefb430a3799b31e84f4c479aea328545498783af288f137f59af8cb477736af3e3cf003058b7813dfec963dd839130d92d9fcf71ea97b63337b3116de359e3a5fdd6a91eb5defb7bf699b835e5a45516ad3dda6cc18c0b33af428d931bb931c66b92e2cf7910b7aad3944c61945d443619a56d9cc973403e447"}, &(0x7f0000000400)=0xd7) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000480)={r16, 0x6b}, &(0x7f00000004c0)=0x8) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e1) 15:45:38 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r3, 0x0, 0x0) close(r3) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) r6 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f0000000540)=ANY=[], &(0x7f0000000400)) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000001c0)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0), r7}}, 0x18) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:38 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000040)={0x9c0000, 0x2, 0x8, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x9909e5, 0x4, [], @p_u8=&(0x7f0000000200)=0x80}}) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000740)=""/4096, &(0x7f00000001c0)=0x1000) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000100)={0xab9, {{0x2, 0x4e22, @empty}}}, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x240, 0x0, 0x3}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) 15:45:38 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r2, 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000040)={0x1a, 0x304, 0x3, 0x0, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0xffffffffffffff43) accept(r3, 0x0, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) write$binfmt_elf64(r4, &(0x7f0000000600)=ANY=[], 0x0) close(r1) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/btrfs-control\x00', 0x501083, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r5, 0x8983, &(0x7f0000000580)={0x1, 'vlan0\x00', {}, 0x1}) socket(0x10, 0x3, 0x4) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r6, 0xc1205531, 0x0) write$cgroup_int(r6, &(0x7f0000000240)=0x7, 0x12) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0xfef0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) bind$inet6(r7, &(0x7f00000005c0)={0xa, 0x4e22, 0x200, @loopback, 0x7}, 0x1c) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r8, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r8, 0x0, 0x0) splice(r0, 0x0, r8, 0x0, 0x80000001, 0x0) 15:45:38 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, 0x0) ioctl$KVM_GET_CPUID2(r5, 0xc008ae91, &(0x7f00000002c0)={0x6, 0x0, [{}, {}, {}, {}, {}, {}]}) openat$userio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/userio\x00', 0x501400, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:38 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f0000000080)={@fixed={[], 0x12}, 0xfffffffa}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:38 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f00000002c0)={0x14, 0x88, 0xfa00, {r4, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x1110002, 0xffffffffffffffff}}}, 0x90) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f00000002c0)={0x14, 0x88, 0xfa00, {r6, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x1110002, 0xffffffffffffffff}}}, 0x90) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r7, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r7, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000880)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000980)=0xe8) r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r9, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) r10 = accept(r9, 0x0, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000800)='./file0\x00', 0x121) ioctl$TIOCGSID(r10, 0x5429, &(0x7f0000000240)) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r13}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f00000009c0)={'batadv_slave_1\x00', r13}) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000a00)={@rand_addr, 0x0}, &(0x7f0000000a40)=0x14) sendmmsg$inet(r7, &(0x7f00000032c0)=[{{&(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, &(0x7f0000000780)=[{&(0x7f00000002c0)="25dd92f30838182714bc982d03a6b27ff69bc11e285d7739332096cddeed5ed11b158e09513d82d21b34f9a4d317903c33729c837d73a32d78ba647cb8dd17f5bbfebddab3c8d997cd6f2bd16a8aa47e93dc0a4b3b7f1e906fac2ab2360d37f671fb081d0b8dfc582fc8fd422db541ba764a330d4fc4b397cce1da23278c5c8aa21718e8b3e15113e2118634fc309908b179e818f8608cd502ac26d1a0e3d62c9edbfeeeb5966eadfc169bac4a1b85d79dfb0af906", 0xb5}, {&(0x7f0000000180)="98f12cfcda44f7abd4ac290875bedc8bf2b151258946d01c2df884ba9baad63c5ef26a3b4ea51cee9c6ed84efc2b0da81ff0797f69812fe4a2c1daf86796431273b2bc15bac6404716b53df48860", 0x4e}, {&(0x7f0000000380)="7fb047c1f22c7a45b8ece34c4a94d944b1a394228f04615b96cbec726a621f4854bdc43d088eedc85d16acb04c079a1d33b3a6b2ae8be659bb19c48a55268372ea3f10362cd247fb380c8d87cbacba614899dbe38eca220ff4da5bcaf3f2c0701fca154cd381ef5523396549219c44a9e7a95ec8b553a8c024eb9dd56e083987f99cfa575006e3ce5282224eb898eb607190247fa750aabffda1dbcb6511542837d157a3028b19a81d2dc50b56", 0xad}, {&(0x7f0000000440)="25e8dc2f8719d78a520bf3923a2284a9d6efd0dd6753f6666aa78672a1bcb6f4a2ec7be29a0e63acc437f1ebf37cc3aac37cba81d98215328f334ce31c267ae66549ce7ad9889f39d721f800fb2677fe4820405104d2f757039ad811b88ac53401add127e7a002578cb173de935504283b8632776d44c5ba7cf1876ec3004f6a6d960b5801394749b78a9da3d3f9f4bdbfb420e6f38e28608f590ac1b2d2", 0x9e}, {&(0x7f0000000500)="7dffb28de1f8248e2b15c69ff2c177f9759c82960ec1bdd11303b9412d26e007eca802aaa49d05e32d8ba2cbf3b779a38c7d7559f2861a5da76911789b80f4ec7655d86f46c1e18b2c36eb2750665a8c42faaf2326e486ca49dd5beaf5800153ea0764daf8fc14b03b395308aea58b9c68169170429021bd605ab746d1ef6583f9165c3af2f60e7e525b68c3b49fc77ad6e8ac7ca2bfdc94dc2f5277c97e6fd1941d9e580620f1317de9e251c92391811293ea00b0269b44d128bdc749bf692a45fa8549b0a6a4810c", 0xc9}, {&(0x7f0000000600)="447d7786273718f704cdfadb474d1db5d0b3f69276d4d8935ce13492cbedb27b6c2040e4ec008d88e5dc0823b0f234e6e56da679d46fe6273aa4de9d84e16bbeb27f4b33103ef1df0727b1117177605a7836721b8d982c87f7695789bd856d1b60757a9ecc29b190986dfa1b90ddd7aa6511eb2c493e2b003f4b41342232bf38fb0e6b34fcad81aab641faee19b30197e2b1aef4682588794535d8612513d04eab669fcb6836dae6ca4e1f4e16855aef4d578c35fa30cbe41802b40d5b35c9c08059e9027d5167621dc04891a1a11301af1510589f5590fc2762bd7e70a89463ccf2b6402837202971af3e1ef7", 0xed}, {&(0x7f0000000700)="1567487a5e411b04d73a79a7376463e04bf29558fb2361d94017114c087eb154a4381f63010ad1265ab09132cd324199787a76734cf7ae5aa98f7067dfae0ad9f6528689b367d916271eb32a1bb0ed5a5ee4b6c7ba2673b8", 0x58}], 0x7, &(0x7f0000000a80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @rand_addr=0x3ff, @local}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x400}}, @ip_ttl={{0x14, 0x0, 0x2, 0x80000000}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8000}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r14, @multicast1, @dev={0xac, 0x14, 0x14, 0x15}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r15, @local, @rand_addr=0x8}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x17}}], 0xf8}}, {{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000b80)="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", 0x1000}, {&(0x7f0000001b80)="4d3f04d57393d42e0e7e530ec595522e60b0204f6bfa36701ba255185d42c898a2f075d4e9bcc984c3ef97a73eec6c29", 0x30}], 0x2, &(0x7f0000001c00)=ANY=[@ANYBLOB="1400000000000000000000000100000001800000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001ac1414aa000000001400000000000000000000000200000025000000000000001400000000000000000000000100000001000000ebffffff110000000000000000000000010000000400000000000000780000000000000000000000070000004424c683ac1414aa0000edb47f00000100000101e00000017fffffffac1e010100000100440c521000000003000000088917770000964dfffffffc00000001ffffffffffffffff861f00000003070f2745cbe133c4cfd5f536ead1cc010adfd8e3535d278d760000"], 0xf8}}, {{&(0x7f0000001d00)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000003200)=[{&(0x7f0000001d40)="aca332222ea239a2aea6504db89980b873baaa159b779468501170487ca826bd79d84360855f0869fa84fd68007cde52c408278dffca965b57d9d74374ad3382cfe8c9173493d8b9b6d32ffd94d15e439a8526d199e13f84f99252d22b4709b3e9ad6db6e405a3643d95861fc7412fb23503cc2edfa98f6696563a204f2f9a951f708db25cf466910ae3465353af5bc6cfe1b68035279649f30c6e4ae3ed5649521a4b8579e2f864e3e16b420aca9a9edb2803ab72ed7f30701f561effdd3b4e539ba5c91774cb644fad466cace10c", 0xcf}, {&(0x7f0000001e40)="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", 0x1000}, {&(0x7f0000002e40)="dcc68e006a5bd1851cb48b365050564b74a4b55784503113323ae5e08d468bda377d776883bcb01edb6124073f93617d14412424f12f3d42cc87055414cd0af02ca97b3670a6b7e3bf0b063db7c0159dce6c06cadba666257043bd444760b6e921af392fb5c1cf3f52e30453acc9b4b8834097f5e7720ffda57d7acce15ec0ff655e02df35ed320a16337a5be9b5eb4e7d938bc75d8adf882897221abf85eea11ef203c02f56ca20f3b4929d01d342b67a64a65289f5595ce40cfc99980f83d20a5c85d8340740d975459a147474303f6ad2e0b96ac6", 0xd6}, {&(0x7f0000002f40)="4066c6abe1", 0x5}, {&(0x7f0000002f80)="23b959d318a9d617f1ed68bba5e2cec21f132495c9b79e67", 0x18}, {&(0x7f0000002fc0)="ce6e245ea7118a019d39cb34580db149baad294cd1a689efac4df4735c9136f773ec4c90", 0x24}, {&(0x7f0000003000)="8717b22177e969fc9b60aa874f588849d947ca4dc3cbef2ea8ac1bb4a3591d32785f6a981b3458af7194a38bcf80ff79ef2d7ba38d1b58b2027ab3bcaebfefb5c9a55bd6336ff0bb38474c460c980bfbdfddce84f8941110e3fd32617337d806820d1fea2e5cf18b90dc9c1a8fcaebd0888ee6932a38719a46b4b200462e3380fca6d37837e99bfb18e3956ae68edeabddf87bdca4314b7ddf2b02cda1a5cecfc10dd16c5b810399851f6ede9273cd00bcd8f3a0d7a9a45d5b9a21bfbb8587390d461ec10028d6faef0243b4583ab2a66dcba28d08ef85576510cfdf733d3f87754c5ae9c5a6", 0xe6}, {&(0x7f0000003100)="e91a919d4f1205bbdc37bd4c6d5799b9d718c31b1311a3d4f0d0d4a5b3bd080eb839ab92e2e1539141af60e9a95c177c6c5d7551decd31a745d338c3a09902f01728e54d45a6755fd4da964d2ed3610d042b7967960fffe44afe00c042a68e0252d1ff31527546391ad66f096d54d0487ed2267d8a10737f9c8eec5f59b81850765eb075b55cfdf7b24a62b7b661469f5de78d47394522412e46c953363faf5206c950cfb334fd5ba20df8e87ba7e04378997f8c95c80e619fc8ba2f88369f29a9e0ba50e13cc3b7331dcf11d8", 0xcd}], 0x8, &(0x7f0000003280)=[@ip_ttl={{0x14, 0x0, 0x2, 0x5}}], 0x18}}], 0x3, 0x14) [ 1517.844047] *** Guest State *** [ 1517.853734] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1517.883003] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1517.909240] CR3 = 0x00000000fffbc000 [ 1517.932195] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 1517.950487] RFLAGS=0x00022142 DR7 = 0x0000000000000400 [ 1517.966241] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1517.978437] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1517.995965] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1518.023530] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1518.044773] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1518.079803] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1518.109527] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1518.125973] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1518.150618] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1518.169027] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1518.189251] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 15:45:38 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r0, 0x0, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240), 0x10) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r1, 0x89e1) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r2, &(0x7f0000000180)='.//ile0\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000080)={0x6, 0x9, 0x4, 0x2000, 0x1, {0x77359400}, {0x2, 0x8, 0xff, 0xa, 0x8, 0x71, "5334dfdb"}, 0x6, 0x1, @planes=&(0x7f0000000040)={0x0, 0x3, @mem_offset=0x5, 0x8}, 0x5, 0x0, r1}) sendto$rose(r3, &(0x7f0000000100)="423ef05a0bf88ef7c2f1423d77ae797d7c8d9d56c29a2fa1e3ceac997fd5d4946790e11e42600b95210b4fe01511929f8242e51e42e02040f76cfd3651ac10e5fead2d5c4f7acdfc1d1fa883c9e5af95b9293559b60a38c8ec2f36d02d9e983f43379b076a3ad70d0b5463db7e2bdbb76ece33207b6e7771146f5dfa1007dbff1106b26bc31e36535a178f9d461b1f36fc96054d3e03f9c0a4104e6d04775f94c7ca59347046f71aceb04607009c1f48dc19c1b7635db487f3cdef4d8f33672a93661c45c49eed0715f7", 0xca, 0x20040051, 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x220001, 0x0) creat(&(0x7f0000000200)='.//ile0\x00', 0x0) setns(r4, 0x20000000) [ 1518.209460] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1518.219613] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1518.228747] Interruptibility = 00000000 ActivityState = 00000000 [ 1518.236135] *** Host State *** [ 1518.239469] RIP = 0xffffffff8117a4e0 RSP = 0xffff888040cd7998 [ 1518.247523] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1518.254834] FSBase=00007fc3fc826700 GSBase=ffff8880aed00000 TRBase=fffffe0000034000 [ 1518.266767] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 1518.274467] CR0=0000000080050033 CR3=00000000470dc000 CR4=00000000001426e0 [ 1518.282991] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff868018e0 [ 1518.290417] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1518.297640] *** Control State *** [ 1518.302117] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000e2 [ 1518.309534] EntryControls=0000d1ff ExitControls=002fefff [ 1518.325047] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1518.332915] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1518.345031] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1518.360444] reason=80000021 qualification=0000000000000000 [ 1518.368532] IDTVectoring: info=00000000 errcode=00000000 [ 1518.375002] TSC Offset = 0xfffffcd06fbe7f31 [ 1518.379589] EPT pointer = 0x00000000a7b0c01e [ 1518.384919] Virtual processor ID = 0x0002 [ 1518.532614] *** Guest State *** [ 1518.536207] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1518.556453] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1518.576658] CR3 = 0x00000000fffbc000 [ 1518.581019] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 1518.597322] RFLAGS=0x00022142 DR7 = 0x0000000000000400 [ 1518.607469] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1518.615075] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1518.624294] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1518.633338] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1518.646995] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1518.655788] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1518.664363] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1518.673297] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1518.682334] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1518.692019] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1518.701174] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1518.709250] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1518.717932] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1518.728266] Interruptibility = 00000000 ActivityState = 00000000 [ 1518.737958] *** Host State *** [ 1518.752820] RIP = 0xffffffff8117a4e0 RSP = 0xffff888040cd7998 [ 1518.758950] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1518.768417] FSBase=00007fc3fc826700 GSBase=ffff8880aed00000 TRBase=fffffe0000034000 [ 1518.779310] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 1518.787338] CR0=0000000080050033 CR3=00000000470dc000 CR4=00000000001426e0 [ 1518.803351] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff868018e0 [ 1518.811479] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1518.817549] *** Control State *** [ 1518.824710] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000e2 [ 1518.832377] EntryControls=0000d1ff ExitControls=002fefff [ 1518.837916] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1518.848821] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1518.856502] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1518.871045] reason=80000021 qualification=0000000000000000 [ 1518.885316] IDTVectoring: info=00000000 errcode=00000000 [ 1518.897552] TSC Offset = 0xfffffccff01bbc45 [ 1518.907577] EPT pointer = 0x00000000a809a01e [ 1518.917727] Virtual processor ID = 0x0002 15:45:39 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x20c01) ioctl$sock_inet_SIOCGIFDSTADDR(r3, 0x8917, &(0x7f0000000080)={'ipvlan1\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x22140}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 15:45:39 executing program 2: syz_init_net_socket$rose(0xb, 0x5, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/vmallocinfo\x00', 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f00) openat$autofs(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/autofs\x00', 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000001600)='/dev/input/mouse#\x00', 0x6, 0x401c2) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f00) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r3, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f00) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r4, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f00) ioctl$sock_rose_SIOCRSCLRRT(r4, 0x89e1) 15:45:39 executing program 0: userfaultfd(0x80000) futex(&(0x7f000000cffc), 0x180, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x80002, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast2, 0x3}}, 0x3f, 0x101, 0x101, 0x8001, 0x8, 0xff, 0x1}, &(0x7f0000000140)=0x9c) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000180)={r1, 0xe8, 0x6}, 0x8) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x400, 0x8d41, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0x12, 0x3f, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") futex(&(0x7f000000cffc), 0x85, 0x0, 0x0, &(0x7f0000048000), 0x5000000) 15:45:39 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0)='batadv\x00') sendmsg$BATADV_CMD_TP_METER_CANCEL(r6, &(0x7f0000009e80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000009dc0)={0x14, r7, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00022bbd7000fedbdf250a000000060028000200000008000300", @ANYRES32=0x0, @ANYBLOB="3b3678dfaf79e3d4febec0956c864522c5dfa72ef50a4f3884dd9bb995860dd8000a214d16f5fe8b6279ecc5aea23a8d5c0a2943eba5fcece3a7d5109a669b622d658232ffe3a3fda06c15590a4254a53f18b6dd492b58f60aa7e80b3090bad76e5070e2c54f572cfab5574a770136ef408776ba5c110cfab362f058174a3eedb841b4b5708e85fc782a0375fa52d6dc8fac4e"], 0x24}, 0x1, 0x0, 0x0, 0x20000}, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:39 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1786234d7950baf2a4c4594d2f876749b6"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$packet_buf(r0, 0x107, 0x1, &(0x7f00000002c0)=""/132, &(0x7f0000000180)=0x84) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x4, 0xd8, 0x1000, 0x4800}) 15:45:40 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x83) close(0xffffffffffffffff) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r5, 0x0, 0x0) finit_module(r5, &(0x7f0000000040)='$:system\'$!md5sum],},GPL,#\']cpuset@wlan0-}\x00', 0x2) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:40 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x800, 0x0) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:40 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000080)={0x3, 'batadv_slave_0\x00', {0x9}, 0x4}) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f0000000040)=0xc000c) r3 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="000bb100000000000000ac3ceba8d7b3d4576aba058907abc25fe8e5b0f114695d8a7ef7084af77a830272edd3ca6e054fb1b27e13bb775b6fb736d200e96c461f948442001789a837c70ea318c4fe5289498e0f3e0bdd5893b1ee4c952c0b0a7b8815663954dbe413d09db8a1d0a240f45eb9f36f8ce34991b35bd771a641fe35f000789f63d8998296ff196efdc7fd264fae22a963eacef4d23de29fb74e471e960a355f86069fe5162e72682b09cd587491b306b20039265c1ecc922e28246d"], 0xc1) close(r3) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) splice(r0, 0x0, r3, 0x0, 0x80000001, 0x0) [ 1519.412348] *** Guest State *** [ 1519.415754] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1519.448331] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1519.474787] CR3 = 0x00000000fffbc000 [ 1519.483862] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 1519.502598] RFLAGS=0x00022142 DR7 = 0x0000000000000400 [ 1519.509353] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1519.518169] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1519.528283] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1519.538500] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1519.547563] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1519.557990] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1519.567726] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1519.579476] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1519.588475] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1519.598166] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1519.608039] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1519.618044] EFER = 0x0000000000000000 PAT = 0x0007040600070406 15:45:40 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000540)=ANY=[], &(0x7f0000000400)) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r3, 0x40045731, &(0x7f0000000080)=0x8000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r6, 0x0, 0x0) fchmod(r6, 0x102) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 1519.634770] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1519.647815] Interruptibility = 00000000 ActivityState = 00000000 [ 1519.656024] *** Host State *** [ 1519.660400] RIP = 0xffffffff8117a4e0 RSP = 0xffff8880556ff998 [ 1519.667508] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1519.677501] FSBase=00007fc3fc826700 GSBase=ffff8880aec00000 TRBase=fffffe0000003000 [ 1519.688290] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 1519.711141] CR0=0000000080050033 CR3=000000005c37e000 CR4=00000000001426f0 [ 1519.732925] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff868018e0 [ 1519.748089] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1519.758191] *** Control State *** [ 1519.764134] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000e2 [ 1519.773021] EntryControls=0000d1ff ExitControls=002fefff [ 1519.779950] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1519.790254] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1519.797846] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1519.807169] reason=80000021 qualification=0000000000000000 [ 1519.816660] IDTVectoring: info=00000000 errcode=00000000 [ 1519.824535] TSC Offset = 0xfffffccf78c87d3a [ 1519.830950] EPT pointer = 0x000000008d96a01e [ 1519.835947] Virtual processor ID = 0x0002 15:45:40 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r1) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0xfef0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x8, 0x0) 15:45:40 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$sock_buf(r0, 0x1, 0x0, &(0x7f00000002c0)=""/243, &(0x7f00000001c0)=0xf3) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r4, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYRESOCT=r4], 0x17) close(r3) socket(0x897acc0ff4dbb41f, 0x80000, 0x5) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfef0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) connect$vsock_dgram(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @hyper}, 0x10) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x1, 0x94ac5571ab98e5b4) splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10) 15:45:40 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) r2 = creat(0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB='$', @ANYRES16=r3, @ANYBLOB="6fa72cbd7000fbdbdf25140000b9fdddf0bca8e98661e1b75ecd009400ea204c000580f9fd028075a08fd82ca3bcd5d59f7a0c76d66fbc1282d7f6e66d117fc0aa5126c66bd5610000d9b4de64fbf0ff11e50b66ebdc4724061e334470308d9cf902549c9ebd04b3"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x55) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, r3, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x2c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x11) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e1) 15:45:41 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) accept4$rose(0xffffffffffffffff, &(0x7f0000000000)=@short={0xb, @dev, @null, 0x1, @null}, &(0x7f0000000040)=0x1c, 0xc0000) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e1) 15:45:41 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x402200, 0x0) ioctl$TUNGETFILTER(r3, 0x801054db, &(0x7f00000002c0)=""/230) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:41 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x2141, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) futex(&(0x7f000000cffc), 0x180, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") futex(&(0x7f000000cffc), 0x85, 0x0, 0x0, &(0x7f0000048000)=0x20000000, 0x5000000) 15:45:41 executing program 4 (fault-call:6 fault-nth:0): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) mmap(&(0x7f000005d000/0x400000)=nil, 0x400000, 0x0, 0x392d6ad36ec2c8b2, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) 15:45:41 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a464a2200004cff"], 0xa) close(r2) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r3, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0xffff8b16, 0x8, 0x4, 0x80000, 0x40, {0x77359400}, {0x1, 0xc, 0x3, 0xff, 0x7f, 0x1, "cd893705"}, 0xbb, 0x1, @planes=&(0x7f0000000080)={0x7, 0x5, @userptr=0x10000, 0x3}, 0x51, 0x0, r3}) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0xa, &(0x7f00000004c0)=0x7f, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000006c0)=0x0) r6 = syz_open_procfs(r5, &(0x7f0000000680)='net/igmp6\x00') r7 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r7, 0x84, 0x1b, &(0x7f0000000540)=ANY=[], &(0x7f0000000400)) ioctl$FBIOGET_FSCREENINFO(r7, 0x4602, &(0x7f0000000440)) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r9 = syz_open_pts(r8, 0x4000000000000002) sendfile(r9, r6, 0x0, 0x0) r10 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000002c0)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_LIST(r6, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r10, 0x8, 0x70bd28, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000094) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, r10, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x884}, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r13, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x1}}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x28}}, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) getsockopt$inet6_mreq(r14, 0x29, 0x1b, &(0x7f0000000540)={@initdev, 0x0}, &(0x7f0000000580)=0x14) sendmsg$NL80211_CMD_NEW_STATION(r11, &(0x7f0000000640)={&(0x7f0000000500), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, r13, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x7}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r15}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20004000) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:41 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f00000001c0)={'veth1_vlan\x00', {0x2, 0x4e23, @broadcast}}) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r2, &(0x7f0000000180)='.//ile0\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00') r3 = openat(r2, &(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x200, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r3, 0x40a85321, &(0x7f0000000300)={{0x80, 0x87}, 'port0\x00', 0x0, 0x10000, 0x40, 0x7, 0x2, 0x80000003, 0x0, 0x0, 0x3, 0x5}) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r5, 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r5, 0x660c) connect$llc(r4, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r4, 0x0, 0x0) signalfd(r4, &(0x7f0000000000)={[0xffffffffffffffea]}, 0x8) r6 = socket$netlink(0x10, 0x3, 0x1) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x80001, 0x0) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40045000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, r8, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_DOMAIN={0x23, 0x1, 'selfbdevwlan1selfvmnet0\'md5sum\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x74b53f361542ce44}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x44008) sendmsg$NLBL_MGMT_C_REMOVE(r6, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r8, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4040) [ 1521.072125] selinux_nlmsg_perm: 371 callbacks suppressed [ 1521.072137] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=26330 comm=syz-executor.5 [ 1521.076365] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=26334 comm=syz-executor.3 15:45:41 executing program 2: syz_init_net_socket$rose(0xb, 0x5, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) select(0x40, &(0x7f0000000000)={0x8001, 0x6, 0xff, 0x0, 0x4, 0x100000000, 0x0, 0x3}, &(0x7f0000000040)={0x104, 0x6e4, 0x800, 0x0, 0x9, 0x8, 0x1, 0x21f03f90}, &(0x7f0000000080)={0x3, 0x2, 0x8, 0x10000, 0x200, 0x3ff, 0x10001, 0x4}, &(0x7f0000000100)={r0, r1/1000+10000}) 15:45:41 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, 0x0) ioctl$PIO_FONTRESET(r4, 0x4b6d, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'veth0_macvtap\x00', @local}) mmap(&(0x7f000005d000/0x400000)=nil, 0x400000, 0x0, 0x392d6ad36ec2c8b2, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) [ 1521.103417] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=26330 comm=syz-executor.5 15:45:41 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) utime(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)={0x3, 0x1}) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e1) close(r0) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x38, 0x0, 0x7, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x9}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x58d9}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x48801) [ 1521.184381] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=26334 comm=syz-executor.3 [ 1521.218763] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=26330 comm=syz-executor.5 [ 1521.234519] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=26334 comm=syz-executor.3 15:45:42 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) mmap(&(0x7f000005d000/0x400000)=nil, 0x400000, 0x0, 0x392d6ad36ec2c8b2, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc028ae92, &(0x7f0000000000)={0x3}) [ 1521.284608] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=26334 comm=syz-executor.3 [ 1521.287850] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=26330 comm=syz-executor.5 [ 1521.319573] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=26334 comm=syz-executor.3 15:45:42 executing program 2: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000040)={0x11, @multicast2, 0x4e21, 0x3, 'lblc\x00', 0x5, 0x7e05, 0x4d}, 0x2c) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000000)={0x3, 'tunl0\x00', {0x6}, 0x3ff}) ioctl$sock_rose_SIOCRSCLRRT(r1, 0x89e1) [ 1521.336985] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=26330 comm=syz-executor.5 15:45:42 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000180)=0x3) bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = gettid() move_pages(r2, 0x5, &(0x7f00000001c0)=[&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil], &(0x7f0000000200)=[0x200, 0x2f], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x6) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x123802, 0x0) ioctl$RNDADDENTROPY(r3, 0x40085203, &(0x7f0000000100)={0x4, 0x55, "715396a29e730e64b1c7ddc1d588e638680b2befff04af0efb576f53afd32cdc0e81d1e243429bfbfec7535bdac53435aa074392a2191c0cdf2c6b9377b5d78d1cc5c651184af9fd5ee19be792b88dea67467fd2e7"}) 15:45:42 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) prctl$PR_CAPBSET_DROP(0x18, 0x16) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:42 executing program 5: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, 0x0) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000080)=0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r3) socket(0x10, 0x3, 0x4) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000280)=0x1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}, {&(0x7f0000000180)="fb5ae3e7fd8209f4b8680ecf52b51689951f242b4eab5fb646a14ddb376a8d920ee1dde497fe73287f3669d9ea5f3ffe0fd1649d26365bc0ba807d7456944f65a31d5bb446590b64bd5b673ccc6a5ff938ce2e6c6babc1f43761e38f4b1784d92484a1a640caafebb562dcdd8aa56a", 0x6f}, {&(0x7f0000000240)="76b07b18daf65242edd4f7b1d89fc8", 0xf}, {&(0x7f00000002c0)="a16baa27ff18508a82cf1d973213b40d78fc88f2b838c27f8487fd3a36f4eadc3d2763e5c9bfd7f38b290e056cbc913d6e29a82663c9838cf7a14df26e385eda10b4571548512333ac7b9b927e9648ec1cf890cba0b66d35f522ad4f4e60e6547c02ad79ff2d6c53c45544d78c54e5449aedbbafb49b04e7d2e9ddf9e7a469a1c65d49821f4fefa6309dcca9f422313ea1825acf42069aec611070b1a5ed85a311d8475910cbd5719b7aea31f0d0d55b18558aeb3cacb9154805204b09a187ef83a3b8277e31f2c3b9466c1825fba041a03729ee9a70c36f2795525d0dfc713e06", 0xe1}], 0x4) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0) 15:45:42 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e1) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r2, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000040)={0x10000, 0x2, 0x4, 0x4, 0x8000, {0x77359400}, {0x1, 0x0, 0x48, 0x40, 0x6, 0x3, "ed69b9bf"}, 0x8, 0x4, @offset=0x2, 0x25e9, 0x0, r2}) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000300)=0x31, 0x2, 0x5) ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f00000000c0)={0x3f, "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"}) 15:45:42 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) mmap(&(0x7f000005d000/0x400000)=nil, 0x400000, 0x0, 0x392d6ad36ec2c8b2, 0xffffffffffffffff, 0x0) madvise(&(0x7f000010a000/0x2000)=nil, 0x2000, 0x10) 15:45:42 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000080), &(0x7f0000000180)=0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:42 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000080)={0x9, 0x7, "f94fbd", 0x20, 0x7}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:42 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000000)) 15:45:42 executing program 0: futex(&(0x7f000000cffc), 0x180, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") futex(&(0x7f000000cffc), 0x85, 0x0, 0x0, &(0x7f0000048000), 0x5000000) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x400400, 0x0) ppoll(&(0x7f0000000040), 0x0, &(0x7f0000000080), &(0x7f00000000c0)={[0x4]}, 0x8) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f00) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x28, r3, 0x23f, 0x0, 0x0, {{}, {0x0, 0xf}, {0xc, 0x14, 'syz0\x00'}}}, 0x28}, 0x1, 0xfffffff0}, 0x0) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x10, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x4}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4000000) 15:45:42 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) dup(r0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0xa00, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) mmap(&(0x7f000005d000/0x400000)=nil, 0x400000, 0x0, 0x20010, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) 15:45:42 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e1) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0x7, 0x4, 0x3d8, 0x0, 0x200, 0x110, 0x2f0, 0x2f0, 0x2f0, 0x4, &(0x7f0000000180), {[{{@arp={@broadcast, @dev={0xac, 0x14, 0x14, 0x27}, 0xffffffff, 0x0, 0x1, 0x0, {@mac=@random="b69db8db9487", {[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff]}}, 0x3, 0x9, 0x3, 0x1, 0x1f, 0x7, 'batadv0\x00', 'bond_slave_1\x00', {}, {0xff}, 0x0, 0x94}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @mac=@local, @multicast1, @empty, 0x2}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0xff, 0x1, 0x7}}}, {{@arp={@multicast2, @rand_addr=0x7, 0xffffff00, 0xffffffff, 0x6, 0x1, {@empty, {[0x0, 0xff, 0xff, 0x0, 0x0, 0xff]}}, {@mac=@local, {[0xff, 0xff, 0x0, 0xff, 0xff]}}, 0x2b, 0x20, 0x6, 0x6, 0x4ddb, 0x1, 'veth1\x00', 'sit0\x00', {0xff}, {}, 0x0, 0x198}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1f, 0x2, 0x3f, 0x2}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x428) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f00) r3 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000540)=ANY=[], &(0x7f0000000400)) ioctl$VIDIOC_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000680)={0x0, @reserved}) connect$rose(r1, &(0x7f0000000000)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) 15:45:42 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="f0ca9a0000a927b189013f75015157a52be2"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x90000, 0x0) r3 = syz_open_dev$radio(&(0x7f00000001c0)='/dev/radio#\x00', 0x0, 0x2) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000440)) vmsplice(r1, &(0x7f0000000080), 0x0, 0x2) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r4, 0x80045519, &(0x7f0000000080)=0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) ioctl$VIDIOC_TRY_EXT_CTRLS(r3, 0xc0205649, &(0x7f00000005c0)={0x9d0000, 0x7, 0x6, 0xffffffffffffffff, 0x0, &(0x7f0000000580)={0xa20a6e, 0x3, [], @value=0x545}}) ioctl$SIOCX25SDTEFACILITIES(r5, 0x89eb, &(0x7f0000000600)={0x9, 0x4, 0x2, 0x7, 0x15, 0xb, 0x1c, "99747289a65376d93721061f0f46c4197730c7c1", "4f4a47b450c06830ed75d9bf6f4aafef466c13ad"}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:42 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) connect$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r3, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f00) getsockopt$netrom_NETROM_T2(r3, 0x103, 0x2, &(0x7f0000000240)=0x1f, &(0x7f00000002c0)=0x4) getpeername(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000000080)=0x80) write$binfmt_misc(r4, &(0x7f00000003c0)=ANY=[@ANYRES32=r1, @ANYBLOB="a873dabe2aa1a151c7e0829c09f7631a7969c15c9894ee5cbd23889df5b4c672f95e860b312a45801aa4dc6082f0961f7923640246bc928b481490f5d0246e4dd28a1bf016b5a8e481915631010000000a2b419a68f859c2c46d59a73463931bd3a5b11837f3a7b74190bc472186fe42787827541e3cbd1e5743a263531659540294792c7324acba858c16caabd4b62925409b490b5bbf80b1ce2a537d6a0878b7ebfa75cbbce66404f2fe48c874e2888441282937430bd61d52ca0f6eaf015919f2410bade7f47fa6baf4a674f0ea8e9a4755cfaf0cf3ed03249de351977e97961c64d50383fc82d668b66499f5c2b1735ebe38eba79812"], 0xfc) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:42 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCGETX(r3, 0x5432, &(0x7f0000000040)) mmap(&(0x7f000005d000/0x400000)=nil, 0x400000, 0x0, 0x392d6ad36ec2c8b2, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) [ 1522.001870] audit: type=1400 audit(1579880742.777:281): avc: denied { map } for pid=26403 comm="syz-executor.4" path="/dev/video0" dev="devtmpfs" ino=413 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:v4l_device_t:s0 tclass=chr_file permissive=1 15:45:42 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000080)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) socket$inet6_udp(0xa, 0x2, 0x0) r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r5, &(0x7f0000000180)='.//ile0\x00', r5, &(0x7f00000007c0)='./file0/f.le.\x00') write$cgroup_int(r5, &(0x7f0000000180)=0x4, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:42 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r1, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) r3 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_persistent(0x16, r2, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xffffffffffffdffd, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x4) sendmmsg(r0, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) 15:45:42 executing program 4: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000540)=ANY=[], &(0x7f0000000400)) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000000)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) 15:45:43 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000100)=0x3) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) mmap(&(0x7f000005d000/0x400000)=nil, 0x400000, 0x0, 0x392d6ad36ec2c8b2, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) 15:45:43 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) chroot(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00') 15:45:43 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r5, 0x0, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r6, 0x0, 0x0) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r7, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r7, 0x0, 0x0) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r8, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r8, 0x0, 0x0) r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r9, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r9, 0x0, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x5, &(0x7f0000000180)=[{0x2, 0x51, 0x67, 0xffff8001}, {0x8001, 0xff, 0x5c, 0x7f}, {0x0, 0x8, 0x9, 0x2}, {0xbf8f, 0x0, 0x1, 0xfffffffe}, {0x401, 0x4, 0x7f, 0x8000}]}) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f00000002c0)={0x9, 0x10000, 0xa, 0x0, 0x0, [{{r4}, 0x20}, {{r5}, 0x4}, {{r6}, 0x5}, {{r7}, 0xffffffffffffff7f}, {{r8}, 0x7}, {{r0}}, {{r9}, 0x5}, {{r10}, 0x800}, {{}, 0x1}, {{r1}, 0x446019a3}]}) r11 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:43 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r3, &(0x7f0000000180)='.//ile0\x00', r3, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$TIOCSRS485(r3, 0x542f, &(0x7f0000000180)={0xd8, 0x6, 0x80000000}) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) getdents(r5, &(0x7f00000001c0)=""/52, 0x34) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:43 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @loopback, 0xd9fd}, 0x1c) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) mmap(&(0x7f000005d000/0x400000)=nil, 0x400000, 0x0, 0x392d6ad36ec2c8b2, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0xfffffffa, @rand_addr="5dc52fc54d6fd7bdab4070ad9591b4d2", 0x6}, 0x1c) 15:45:43 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x10000000000000}, 0x0, 0x800000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)='cgroup+\x00', 0xffffffffffffffff}, 0x30) move_pages(r1, 0xa, &(0x7f0000000100)=[&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil], &(0x7f0000000180)=[0x6], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) 15:45:43 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e1) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000003780)='/dev/snapshot\x00', 0x2001, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f0000003900)={0x2, &(0x7f00000037c0)=[{@fixed}, {@fixed}]}) getpeername$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/104, 0x68}], 0x1) creat(&(0x7f00000000c0)='./file0\x00', 0x0) 15:45:43 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000500)={0x0, 0xffffffffffffff98, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r5, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_MTU={0x6}]}, 0x30}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x420012}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r5, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) socket(0x10, 0x3, 0x4) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r6, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f00) r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000300)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_REMOVE(r6, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r7, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x2000c0c1) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:43 executing program 0: futex(&(0x7f000000cffc), 0x180, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20200, 0x5c) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x42) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, r4}, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000180)={0x2, 0x6, 0x0, 0xffffffff, r4}, 0x10) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000040)={0x0, 0x20, 0x1349, 0x25, 0xff, 0x9, 0x83, 0x3, {r4, @in={{0x2, 0x4e22, @rand_addr=0x5}}, 0xff, 0x3, 0x5, 0x6, 0x8}}, &(0x7f0000000100)=0xb0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000140)={r5, 0x9, 0x1, [0x401]}, 0xa) r6 = socket(0x10, 0x80002, 0x0) ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") futex(&(0x7f000000cffc), 0x85, 0x0, 0x0, &(0x7f0000048000), 0x5000000) 15:45:43 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r2, 0x0, 0x0) r3 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000000)={0x3, r3}) sendmmsg(r0, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) 15:45:43 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r3, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f00) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000010}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x40, r4, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x31}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:44 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x80) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) sched_setscheduler(r2, 0x0, &(0x7f0000000200)=0x1f) mmap$snddsp_status(&(0x7f0000184000/0x3000)=nil, 0x1000, 0x2000000, 0x2010, r1, 0x82000000) r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000000)=0x6) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x101040, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r5, 0x80044dfb, &(0x7f0000000140)) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) r6 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r6, &(0x7f0000000180)='.//ile0\x00', r6, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$TIOCL_GETSHIFTSTATE(r6, 0x541c, &(0x7f00000001c0)={0x6, 0x4}) mmap(&(0x7f000005d000/0x400000)=nil, 0x400000, 0x0, 0x392d6ad36ec2c8b2, 0xffffffffffffffff, 0x0) [ 1523.252963] QAT: Invalid ioctl 15:45:44 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000000)) mmap(&(0x7f000005d000/0x400000)=nil, 0x400000, 0x0, 0x392d6ad36ec2c8b2, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) 15:45:44 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) prctl$PR_SVE_SET_VL(0x32, 0x3e424) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e1) 15:45:44 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) fcntl$setown(r1, 0x8, r3) mmap(&(0x7f000005d000/0x400000)=nil, 0x400000, 0x0, 0x392d6ad36ec2c8b2, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) 15:45:44 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x88c0, 0x0) ioctl$USBDEVFS_RESETEP(r1, 0x80045503, &(0x7f0000000040)={0x0, 0x1}) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r2, &(0x7f0000000180)='.//ile0\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$FBIOPAN_DISPLAY(r2, 0x4606, &(0x7f0000000080)={0x300, 0x258, 0x2000, 0x0, 0x7ff, 0x1, 0x4, 0x0, {0x40c, 0x8419}, {0x72c3, 0x20}, {0x5, 0x1, 0x1}, {0x7f, 0x5, 0x1}, 0x0, 0x0, 0xa6, 0x8, 0x0, 0xfffffbff, 0x800, 0x8, 0x1, 0x7, 0x3, 0x5, 0x4, 0x200, 0x1, 0x3}) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e1) 15:45:44 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000001c0)={0x7fffffff, 0x0, 0x4, {0x8, @raw_data="8bef5fff113d9bc18c53be130bb1ba7a9cb5d43f398e23576e4e24eb6ba5a9a371564ef0b9e1a82adf9ffe58b0b6e0809356823c6e5d6cb747295a03d2bfb5c2866b6f21ded321c38b3ddd5813a6292faa4b1a2c956babcda9e39ff3d79292792d29e034b9d147cd67ec914556c91f766f4d01e32247f801f6466c76b47a1dae141367a950956dc0725127f8260a3da72aa2ae5b64f7edc206c5f5e1a8a9fe9cbb6ef851ddd2a94c317d238f3c693bc962c60822b480797fe957ddfa7997094fa26e506f4133d347"}, 0x9}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) mmap(&(0x7f000005d000/0x400000)=nil, 0x400000, 0x0, 0x392d6ad36ec2c8b2, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) 15:45:44 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f00) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000000)={0x7e, 0x3, 0x1, 0x1d4, 0x81, 0x200, 0xffffffff, 0x0, 0x0}, &(0x7f0000000040)=0x20) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000100)={r3, 0x6, 0x4}, 0x8) sendmmsg(r0, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) 15:45:44 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) prctl$PR_GET_CHILD_SUBREAPER(0x25) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e1) [ 1523.581843] audit: type=1804 audit(1579880744.347:282): pid=26505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.0" name="file0" dev="sda1" ino=17306 res=1 15:45:44 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r2, 0x0, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000040)={'netpci0\x00', 0x6}) r3 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="f0ca9a0000a927b1890155c6ea6a2bbb2201d067e54e1d2f807f8fb8071426c53243f1a3b7f8a348c7983ab1"], 0xa) close(r3) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc45863080000007f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377048c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x10000000000000cd) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r3, 0x0, 0x80000001, 0x0) 15:45:44 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e1) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x12401, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000100)=[@mss={0x2, 0x5158}, @window={0x3, 0xfffe, 0x40}, @sack_perm], 0x3) 15:45:44 executing program 0: futex(&(0x7f0000000040)=0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8000) r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") futex(&(0x7f000000cffc), 0x85, 0x0, 0x0, &(0x7f0000048000), 0x5000000) 15:45:44 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f00000002c0)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, 0x1, @default}, 0x1c) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x802, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00032dbd7000ffdbdf251b00000008009a000100000008000100040000002c0022800800e0b2aa08eef8cba7070001000000080005000900000008000100060000000800040009000000"], 0x50}}, 0x4000) ioctl$sock_rose_SIOCRSCLRRT(r1, 0x89e1) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r3, 0x0, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000300)={'veth1\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x38}}}) write$binfmt_aout(r1, &(0x7f0000000340)={{0x107, 0x9b, 0x1, 0x210, 0x8a, 0xfffffeee, 0x21a, 0x3}, "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", [[]]}, 0x1120) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x1, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4000000) 15:45:44 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000000)=@v1={0x0, @aes128, 0x2, "7898bff3eae94b7e"}) mmap(&(0x7f000005d000/0x400000)=nil, 0x400000, 0x0, 0x392d6ad36ec2c8b2, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) 15:45:44 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x1ab8) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000000040)={0x60, 0x4}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:44 executing program 0: futex(&(0x7f000000cffc), 0x180, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f00000000c0)=r4) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0xa01, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @local}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @remote}]}, 0x50}, 0x1, 0x0, 0x0, 0x8010}, 0x800) r5 = open(&(0x7f0000000240)='./file0\x00', 0x8000, 0x100) sendmsg$nl_route(r5, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f00000002c0)=@can_delroute={0x188, 0x19, 0x800, 0x70bd28, 0x20, {0x1d, 0x1, 0x2}, [@CGW_MOD_XOR={0x15, 0x3, {{{0x2, 0x1}, 0x5, 0x2, 0x0, 0x0, "cd38d1bbf1ae3947"}, 0x2}}, @CGW_CS_CRC8={0x11e, 0x6, {0x7, 0xb, 0x9, 0x40, 0x5e, "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", 0x1, "2a294daa6cdc02590d1fdf90dda612b34fbab2b5"}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x2, 0x0, 0x1, 0x1}, 0x8, 0x2, 0x0, 0x0, "d6aed26a8ddfb33b"}}}, @CGW_FILTER={0xc, 0xb, {{0x2}, {0x1}}}, @CGW_MOD_AND={0x15, 0x1, {{{0x3, 0x1, 0x1, 0x1}, 0x5, 0x0, 0x0, 0x0, "008da694d8b58b59"}, 0x3}}]}, 0x188}}, 0x200000d1) futex(&(0x7f000000cffc), 0x85, 0x0, 0x0, &(0x7f0000048000), 0x5000000) 15:45:44 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0cf9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:44 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) dup(r0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000540)=ANY=[], &(0x7f0000000400)) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f00000001c0)=""/173) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) mmap(&(0x7f000005d000/0x400000)=nil, 0x400000, 0x0, 0x392d6ad36ec2c8b2, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x402000, 0xc8) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r4, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) 15:45:44 executing program 2: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r1, 0x0, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vga_arbiter\x00', 0x80000, 0x0) ioctl$VIDIOC_G_CTRL(r4, 0xc008561b, &(0x7f0000000380)={0x70, 0x800000}) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, 0x0) ioctl$DRM_IOCTL_GET_MAP(r3, 0xc0286404, &(0x7f0000000300)={&(0x7f0000ffe000/0x2000)=nil, 0xff, 0x4, 0x50, &(0x7f0000ffc000/0x4000)=nil, 0x7}) r5 = syz_open_procfs(r2, &(0x7f0000000040)='net/ip_tables_matches\x00') r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, r6, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x40000000, 0x1}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xa51, 0x2}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7f, 0xffffffffffffffff}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r7, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r7, 0x0, 0x0) accept4(r7, &(0x7f00000000c0)=@tipc, &(0x7f0000000140)=0x80, 0x800) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000080)={r1, r5}) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r8, 0x89e1) 15:45:45 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e1) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f00) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xe4, r2, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x4fd}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xae, 0xbe, "674b6818e3c6ec744249e461cc5d355f995927091717465d9617683ed6fe959a9bb389ee04a96531ee810d1c6a46edb0ef96b1446f7970cf2d13d014aa4be87a4054028a57175173fa00e3232d31ae155694e3272ab94222993b280fbad50b4c7526a57d23854a8bc7fb015ca69ad9b6c5ab1b71bfd13447a03b48a36b8546c9a2932d6d35d904dacc89bf638d6a949fba21afbfdd374c7179e15ada6aa4a836fc1ee344cd8135359271"}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x32c}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040}, 0x808) 15:45:45 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpid() tkill(r1, 0x20) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) r3 = syz_open_dev$vivid(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f00000002c0)={0xc, @pix_mp={0x7, 0x2000000, 0x3247504d, 0x0, 0xc, [{0x9, 0x3f}, {0x5, 0x40}, {0x100, 0x5}, {0x7, 0x1}, {0x3}, {0x73, 0x1}, {0x9, 0x8001}, {0x7, 0x8}], 0x7, 0x4, 0x6, 0x2, 0x5}}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0xfef0) 15:45:45 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_config_ext, 0x801}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000100)={0x390000, 0x9, 0x6, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9c0909, 0x3, [], @p_u8=&(0x7f0000000000)=0x7}}) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000140)=""/79) sendmmsg(r0, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) 15:45:45 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) syncfs(0xffffffffffffffff) mmap(&(0x7f000005d000/0x400000)=nil, 0x400000, 0x0, 0x392d6ad36ec2c8b2, 0xffffffffffffffff, 0xd7f2b000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) r3 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x6c1e, 0x400) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x100, 0x0) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f0000000040)=0x2) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000100)={'batadv_slave_0\x00', {0x2, 0x4e22, @broadcast}}) r5 = getpid() sched_setattr(r5, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7f, 0x0, 0x7e, 0x3f, 0x0, 0x9, 0x10080, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f00000001c0), 0x2}, 0x40, 0x0, 0x49cfe27a, 0x0, 0x1, 0xad9d, 0x2}, r5, 0x6, 0xffffffffffffffff, 0x3) 15:45:45 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x408340, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r4, 0x5385, &(0x7f0000000180)={0x6e, ""/110}) r5 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f00000002c0)={0x14, 0x88, 0xfa00, {r7, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x0, 0xffffffffffffffff}}}, 0x90) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f00000002c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000240), 0x0, r7, 0x1c, 0x0, @ib={0x1b, 0x400, 0xd2, {"a9106f3200b91e011f99a492b0c1037a"}, 0x5, 0x7, 0x4}}}, 0xa0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:45 executing program 0: futex(&(0x7f000000cffc), 0x180, 0x0, 0x0, 0x0, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm_plock\x00', 0x10000, 0x0) r1 = eventfd(0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000540)=ANY=[], &(0x7f0000000400)) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000300)={r1, 0x8, 0x9, r2}) r3 = socket(0x10, 0x80002, 0x0) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r5, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f00) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_LIST(r5, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r6, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x800) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x100, 0x70bd2a, 0x25dfdbfd}, 0x14}}, 0x40) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") futex(&(0x7f000000cffc), 0x85, 0x0, 0x0, &(0x7f0000048000), 0x5000000) 15:45:45 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, &(0x7f00000002c0)) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:45 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x532a2f19, 0x6, 0x2}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) mmap(&(0x7f000005d000/0x400000)=nil, 0x400000, 0x0, 0x392d6ad36ec2c8b2, 0xffffffffffffffff, 0x0) iopl(0xb4) madvise(&(0x7f00003f1000/0x3000)=nil, 0x3000, 0x8) 15:45:45 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x200, 0x0) write$P9_ROPEN(r1, &(0x7f0000000040)={0x18, 0x71, 0x1, {{0x0, 0x0, 0x4}, 0xfffffffa}}, 0x18) bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000540)=ANY=[], &(0x7f0000000400)) ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc004ae02, &(0x7f0000000100)=ANY=[@ANYBLOB="0100030000000000"]) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) 15:45:45 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) mmap(&(0x7f000005d000/0x400000)=nil, 0x400000, 0x0, 0x392d6ad36ec2c8b2, 0xffffffffffffffff, 0x0) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f0000000040)={0x87, @multicast1, 0x4e20, 0x1, 'lblcr\x00', 0x7, 0x80, 0x69}, 0x2c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) 15:45:45 executing program 5: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r3, 0x0, 0x0) sendmsg$sock(r3, &(0x7f0000001440)={&(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x1, 0x4, 0x2f, 0x7, "025b11b2539e77aa5dc2543c34a535e20bdec87ba0844657002244e31546af9dcb975d42e24d91a2c1c00b76a4fef4d017e9e432998aea0bca894bf40abe2f", 0x1e}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000300)="1cb51c10d92559fc40cb5f6b17e05bd51cded87f20a1394ff50668dab59c16f944d6fc8da9d524377eeaabd90479ecb469195ad6df0833096c33bcdeca98e8550150147b776f15e4cdcf", 0x4a}, {&(0x7f0000000380)="2585afb4f984c281f7c4fe80317a859a493749b3269e06f3216edaf08c44e9a0c73d7033a1c459cca95ab9cbe5a08dfce4987680444655c7d717a224bf2e04b8d2e9f01b06c75ffc4427dcd4eb0eafe87d4871791e67212b2633d8f60e5bf7d056d5888659d409cb0a183c2839ec77e937da5870bf3f62a29f34951013d2c3c91a73d2dc3985ba19e61e8fa4ccf566af029bd676f372436ab9c7eb6fb8a2461fb807c38e096a9629213a544bb9ba813090", 0xb1}, {&(0x7f0000000440)="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", 0x1000}], 0x3, &(0x7f0000000240)=[@mark={{0x14, 0x1, 0x24, 0x7}}], 0x18}, 0x840) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x7b, 0x1}, 0x7) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:45 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200), 0x0) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r3, 0x0, r3) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r4, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400201) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) r5 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$FS_IOC_GETFSLABEL(r5, 0x81009431, &(0x7f0000000180)) 15:45:46 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) chroot(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00') 15:45:46 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000340)) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)="8d366c94b6d8f9867648b2dd30d1790053d39080803cdbe3bf44f5e06b09b9ff3bd9b0e5abf0e67989182557228fc3322ef5189535097c9d08605a7c4b3b0a4322636e3d006df125b5fa"}, {&(0x7f0000000240)="352d13bfd5cfc6a0d8c2dc40591696e9f0fe51b36a2ee7264a4cd43c72afa6f754f358f589f003a1283533f7a08e6f4315ba4bac50bc28731c804dd60945c18bc6bf15c98a81918c88f6915a7484e3f15189f436b8a3fa323b20feade27e3155ed98540e64face3247c037abbfc1898673b4ed0ce540d9420e12b3a748db22ce7231c1510c117b204af8f9b8231fe82e942d4857f86beffab823e3edc7b8b7f2df74b6050a44a2b3da1243257110e579353eff87df54c01f108aac29c497eb9541ceedebc9b051ee6df932b24f78c1ac35"}], 0x1, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r3, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000000080)={0x10001, 0x400}) mmap(&(0x7f000005d000/0x400000)=nil, 0x400000, 0x0, 0x100010, r3, 0xffffe000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) 15:45:46 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r3, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x80, &(0x7f0000000000), 0x0, &(0x7f00000001c0)=""/4, 0x4, 0x7301}, 0x40001f30) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="3d000003000000000000"], 0xa) close(r2) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r4, 0x0, 0x0) close(r4) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) r5 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, &(0x7f0000000540)=ANY=[], &(0x7f0000000400)) write$FUSE_NOTIFY_STORE(r5, &(0x7f0000000180)={0x2d, 0x4, 0x0, {0x4, 0x4, 0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x2d) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:46 executing program 1: r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000180)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f00000003c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000180), r1, 0x2}}, 0x18) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e21}, 0xfffffffffffffffd) r3 = open(&(0x7f0000000480)='.//ile0\x00', 0x20000, 0xe4) syz_mount_image$minix(&(0x7f0000000400)='minix\x00', &(0x7f0000000440)='./file0\x00', 0xfffffffffffffff9, 0x5, &(0x7f0000000800)=[{&(0x7f0000000480), 0x0, 0x4}, {&(0x7f00000004c0)="5acf5b26ddaaae982f81796c40883367f318199aaeed4074ac2aaf470b1cd06b20f90c4fcb1013cdc104ff72a5e31f68b2c0db699c25d4e7318a6a47cb0ac2e8c37ec2e625157282414847a4b3c1ffc3377256114aecb1ca7cfa010351aa105b86f2f28a1f0de3a601f73c4508834a0e656b87b51f425a939906e3813f9de84b25488a48b09f16e417988ea8c427d481ebc2586cf1ea288ce30a1302644444894f551240d42b2abd65c9ca3a2634842f", 0xb0, 0x2}, {&(0x7f0000000580)="78fddb7ba01a2567ff5980c8d622ae7718cec1c4b1caee939a335ddff8e7f3a512622ac07886205760", 0x29, 0x2}, {&(0x7f00000005c0)="691262875e91b5687f1aba0f6bdee14e2ddb92e678b71c777a388a61c361e2d3493d132c6dab7a0b1b019cf184c005515ae052f94b3eae4b54205546d6cb5ee833f5fb81ad0867461c9adaed0986bf7f1e42b2ae849e24376a4dd67a6d111660fd7abd60885e57307189f93db6725787381769bf9532b4603deb2ee84f9369bec39b06bc6823798098cd14b58f1bae0c6ec0b0baca9d440a7e09b79e42", 0x9d, 0xffff}, {&(0x7f0000000740)="a424fe1c170f2cce6a57ab677ba59bf6ff737c3aa7ebb83d93f8986ef1b203e3e2d7d6e66da7b718868b760948ec52738072b744a00d642d2ac509abbaaa8c3996f4c70fb0da63809a6de1", 0x4b, 0x1ff}], 0x2000, 0x0) r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r4, &(0x7f0000000180)='.//ile0\x00', r4, &(0x7f00000007c0)='./file0/f.le.\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000680)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f00000008c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x800}, {0xa, 0x4e24, 0x4, @rand_addr="cdbd5bf186ba5117aee77ff33772af95", 0x4}, r5, 0x9}}, 0x48) connect$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, 0x0) perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000940), 0x8}, 0x0, 0x0, 0x3, 0x0, 0x8000000000000, 0x5f9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r6, 0x406855c9, &(0x7f0000000100)={0x6, 0x0, {0x54, 0x0, 0x2, {0xff, 0x47}, {0x800, 0x4}, @cond=[{0x1f, 0x6, 0x0, 0xf2, 0x1, 0x9}, {0x401, 0x7, 0x6, 0x6, 0x6, 0x5}]}, {0x51, 0x7fff, 0x8, {0x3, 0x60c}, {0x2a0}, @rumble={0xff}}}) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) 15:45:46 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000080)={0x980000, 0x7f, 0xe643, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9e0904, 0x2, [], @p_u16=&(0x7f0000000000)=0x1000}}) bind$tipc(r2, 0x0, 0x0) bind(r1, &(0x7f00000000c0)=@pptp={0x18, 0x2, {0x2, @empty}}, 0x80) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e1) 15:45:46 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x42) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f00000001c0)=ANY=[@ANYBLOB="b65c9ffb05acf6b8242dc65322eabf7d03dbc4d3517acfa9106510f277d8d424badb6be264c61c03b94ee1db6905f4038b9e1255033b449b2a91b1e587ebadbb9f4e6e4cd457976f5cb47a98057485196f50e0a567600259f3a580e56a0b0c42e9c5df291a794cc222eaef780919b5ad8f6a59dad30a7eca872d191a36efded29217f3c2fb86739fcb091ca99b4eb11df88b91ae79e81960b37df3881c2bb3a73e6f2f39fa132c7f4a8de1850388733ba00f26676b9a", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, r6}, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000180)={0x2, 0x6, 0x0, 0xffffffff, r6}, 0x10) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000000)={r6, 0x9b10}, &(0x7f0000000040)=0x8) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x392d6ad36ec2c8b2, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) 15:45:46 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x28100, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r1, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x80) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e1) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r2, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8982, &(0x7f0000000140)={0x6, 'batadv_slave_1\x00', {0xffffffff}, 0x3ff}) 15:45:46 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x3e15}, 0xc) 15:45:46 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0xa) close(r1) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000080)="7c15a9c7edb2c5c9f0f9bed089d3b44e188439988ea9f06889f3a20b5e6f07bbadee8a67d118832869e254371cecefe2c870fc21a9d1a8cef9b8c6f38ba1dc", 0x3f}, {&(0x7f0000000180)="d504060000001e4d68c016769a6cbcefb379e8d971878c3a18a0f2a095c287f43473d536d2df2e7c1d7c92691d030287c7", 0x31}], 0x2) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) ioctl$SIOCAX25DELFWD(r2, 0x89eb, &(0x7f0000000040)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r1, 0x0, r1, 0x0, 0x80000001, 0x0) 15:45:46 executing program 3 (fault-call:4 fault-nth:0): r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) writev(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)="ee", 0xc}], 0x1) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 15:45:46 executing program 0: futex(&(0x7f000000cffc), 0x180, 0x0, 0x0, 0x0, 0x0) accept$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = getpgid(r0) capset(&(0x7f0000000040)={0x20080522, r1}, &(0x7f0000000080)={0x0, 0x4, 0x431, 0x7c0, 0x5}) r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000540)=ANY=[], &(0x7f0000000400)) ioctl$EVIOCGUNIQ(r2, 0x80404508, &(0x7f00000000c0)=""/162) r3 = socket(0x10, 0x80002, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") futex(&(0x7f000000cffc), 0x85, 0x0, 0x0, &(0x7f0000048000), 0x5000000) 15:45:46 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f00) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000140), &(0x7f0000000200)=0x4) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r2, 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x10000, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) getsockopt$netrom_NETROM_IDLE(r4, 0x103, 0x7, &(0x7f00000002c0)=0xfffffa31, &(0x7f0000000300)=0x4) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000100)={r2, r3}) writev(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)="ee", 0xc}], 0x1) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) ioctl$sock_ifreq(0xffffffffffffffff, 0x8927, &(0x7f0000000280)={'macvlan0\x00', @ifru_settings={0x4, 0x9ad, @fr_pvc=&(0x7f0000000240)={0x9}}}) 15:45:46 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x250c00, 0x0) write$selinux_create(r3, &(0x7f0000000100)=@access={'system_u:object_r:dhcp_state_t:s0', 0x20, 'system_u:system_r:kernel_t:s0', 0x20, 0x8}, 0x55) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r4, 0x0, 0x0) mmap(&(0x7f000005d000/0x400000)=nil, 0x400000, 0x0, 0x392d6ad36ec2c8b2, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) 15:45:46 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r3, 0x0, 0x0) writev(r3, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x7fffffff, 0x0) 15:45:46 executing program 2: setsockopt$RXRPC_EXCLUSIVE_CONNECTION(0xffffffffffffffff, 0x110, 0x3) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) r3 = accept4$inet(r2, &(0x7f0000000280), &(0x7f00000002c0)=0x10, 0x800) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f0000000300)={'ah\x00'}, &(0x7f0000000340)=0x1e) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, 0x0) r4 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000540)=ANY=[], &(0x7f0000000400)) r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r5, &(0x7f0000000180)='.//ile0\x00', r5, &(0x7f00000007c0)='./file0/f.le.\x00') socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r7, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r7, 0x0, 0x0) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r8, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r8, 0x0, 0x0) sendfile(r7, r8, &(0x7f0000000380)=0x41e4150a, 0x80000001) sendmsg(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)={0x258, 0x37, 0x20, 0x70bd2a, 0x1, {0x8}, [@nested={0x1cb, 0x6c, 0x0, 0x1, [@generic="f7f873dd2538a91311f830ed35a13953096285af09313be05c811f5254b671e80dbbc3717dbdfd0ab4a1c160cff4a9c4eefbd832bdd888ccfca9cd5cbd3b6831851f2f309b3aef37a9531f91359c5022f830b67a8348ecfdcc4f4a88d24064e6c3e70e98658b089557e83104bd479844160080e1931098fcb02194ca5f857ac94ca2cb5578d2d3749193f0f5c8d5a2dad7484fe7196215a991053067288fe8f63ab333ece519e9d1e8df6839f7b2e62ccf740ae805", @typed={0xc, 0x54, 0x0, 0x0, @u64=0xfffffffffffffffa}, @typed={0x8, 0x82, 0x0, 0x0, @fd=r4}, @typed={0x14, 0x4f, 0x0, 0x0, @ipv6=@loopback}, @generic="c03ede120970297d1aebce28db3a8a045c3b8a2ec2b4d01a8cf51e89b2adf8cc113fa35b1acd96eb5ac3e116670669fe5fd5fc9288e8ccd87f9a88fb50a18f0ea95fff4335cb78d45745782ebf1dbe38256751bf88656172f908ed9fc42c83efa432453eac511d3a660226d3e63ee03ae41f6eb5d5c0f903fa5dd14a0d78beb52870a9b3203386541273a4e93b129812dc6b8717007490497a26f7fed0959851f41fd7ed2378a553660feb938e99fd9c26a4c1f15b4c66a422d137bd9546e8b7ca1cf687007f9b6bfd9020e15c09ffa05764", @typed={0x4, 0x22}, @typed={0x14, 0x57, 0x0, 0x0, @ipv6=@mcast2}]}, @generic, @generic="86f6ac37ef9ac54d3fcd4cedf9e57363f072be27364b192be151885c3e328b4c433606f1048cba2bd6ee0f87d77151e1931a7f2b7a4ca9e7bcebf61303cb4d9bcb98caddd33b766b47d0c5d60aab9c21309f822d6e8589b095e48a37988e7f75e7839fa6fe01ea5fc83a0bb9a0512287bac799ce47"]}, 0x258}, 0x1, 0x0, 0x0, 0x10}, 0x4048004) ioctl$SOUND_PCM_READ_RATE(r5, 0x80045002, &(0x7f0000000100)) ioctl$TIOCEXCL(r1, 0x540c) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) mincore(&(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f0000000140)=""/17) r10 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x7f, 0x480000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r10, 0xc08c5334, &(0x7f0000000040)={0x9, 0x8, 0x0, 'queue1\x00', 0x7}) ioctl$sock_rose_SIOCRSCLRRT(r9, 0x89e1) 15:45:46 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) mmap(&(0x7f000005d000/0x400000)=nil, 0x400000, 0x0, 0x392d6ad36ec2c8b2, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 15:45:46 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x8404, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) 15:45:46 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e1) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f00) setsockopt$rose(r1, 0x104, 0x5, &(0x7f0000000000)=0x4, 0x4) 15:45:46 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)}], 0x1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x1, @time={0x1, 0x80000001}, 0x8, {0x6, 0x40}, 0x4, 0x1, 0x1f}) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r3, 0x0, 0x0) shutdown(r3, 0x1) 15:45:46 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) accept$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) mmap(&(0x7f000005d000/0x400000)=nil, 0x400000, 0x0, 0x392d6ad36ec2c8b2, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r4, 0x4018ae51, &(0x7f0000000000)={0x10000, 0x8, 0x2}) [ 1526.157353] selinux_nlmsg_perm: 417 callbacks suppressed [ 1526.157365] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=43264 sclass=netlink_tcpdiag_socket pig=26682 comm=syz-executor.5 [ 1526.180981] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=26682 comm=syz-executor.5 [ 1526.194282] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=26682 comm=syz-executor.5 [ 1526.209312] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=26682 comm=syz-executor.5 [ 1526.227891] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=26682 comm=syz-executor.5 [ 1526.265186] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=26682 comm=syz-executor.5 [ 1526.285722] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=26682 comm=syz-executor.5 15:45:47 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) 15:45:47 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r2, &(0x7f0000000180)='.//ile0\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$KVM_PPC_GET_PVINFO(r2, 0x4080aea1, &(0x7f00000001c0)=""/133) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000100)="001877d0bffcffffffe46a7a2c32db878b4846597f44b14dcb77f689c492d4120e5187b16d980dd3323e7d95d94c850998757e58120f58f0f5184a5b1222a0c9db6fe3cf2c", 0x45}], 0x1, 0x6) mmap(&(0x7f000005d000/0x400000)=nil, 0x400000, 0x0, 0x392d6ad36ec2c8b2, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) ioctl$KVM_PPC_GET_SMMU_INFO(r3, 0x8250aea6, &(0x7f0000000280)=""/130) [ 1526.304999] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=26682 comm=syz-executor.5 [ 1526.330234] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=26682 comm=syz-executor.5 [ 1526.344107] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=26682 comm=syz-executor.5 15:45:47 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000540)=ANY=[], &(0x7f0000000400)) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000000)={0x2, 0x9, 0x4, 0x40, 0x7d4d, {0x0, 0x7530}, {0x5, 0x1, 0x9, 0x8, 0xff, 0xff, "00de7ffb"}, 0x6, 0x2, @fd, 0x80, 0x0, r0}) ioctl$KVM_GET_CLOCK(r2, 0x8030ae7c, &(0x7f0000000100)) bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) 15:45:47 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video0\x00', 0x2, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ee", 0x1}], 0x1) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 15:45:47 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="f00bd1a11dad74d70af1403f8c10141ef8ca556a984c27b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r3, 0x0, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00000001c0)={0x0, 0x9e, &(0x7f0000000340)="fc4e9f1005dcab405d300ebdde491af8987d7f561fb2eb5aa9f49e4807c88bbba38bdef93e32319788e9c442730f84a333279700cdb1bed23b1b974daa0a81fd74870986cf5d60672e95d4bada5c7a69baf9358555707b008ab6f673510be20b046b825cea8a9ec7825b94a387073d1e5c597c70b142a4ea576e391ffe0874dea83cfc1977c701ae42e22158736d2bad86fb990f105bc6c196f5d7cec616"}) accept(r4, 0x0, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r5, 0x0, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r6, 0x0, 0x0) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r7, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r7, 0x0, 0x0) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r8, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r8, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[@ANYPTR64=&(0x7f00000002c0)=ANY=[@ANYRESOCT=r3, @ANYRESHEX=r4, @ANYRES16=r5, @ANYRESDEC=r6, @ANYRESOCT, @ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES16=r7, @ANYRES64=r8]]], 0x8) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:47 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r3, 0x0, 0x0) io_cancel(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x7, r1, &(0x7f00000001c0)="593486cabb35791eaba5c8cac82a7fe861b5aed831054658758b98bbc806b019495570bd51290720efed34fcf0614771780adb6feab0f9222262e604b1905465a22bf3f42a19788aff95363a732d6f917768edfb6d1e28495d8bff375e9ac70665a89bfd939b13c30fac315bfe5b88f56b15d0c12d63148d0d141a121bc255b26627105d9f32d34dd7a77cbffcd97f7665a5209d9c524c6e7cd93389402046f53f20d020cc55f765076f5ba893b994d93054c17de5ca2b77e67db462da5e541463e7fc43b4074b063d2362894106d2057bf587d8a24d3842fc16e488f1ec49695f719684f37c56b16940590529", 0xed, 0x8, 0x0, 0x1}, &(0x7f0000000100)) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) mmap(&(0x7f000005d000/0x400000)=nil, 0x400000, 0x0, 0x392d6ad36ec2c8b2, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) 15:45:47 executing program 0: ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(0xffffffffffffffff, 0x40184152, &(0x7f00000004c0)={0x0, &(0x7f0000000480)}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b5b333b000000000000000000000000000000000000000000000000000000006d0000000000000000000000000000000000000000003800000000000000000000000000000000000000000000003d0000000100"/120], 0x1a6) futex(&(0x7f000000cffc), 0x180, 0x0, 0x0, 0x0, 0x0) socket(0x8, 0x2, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvme-fabrics\x00', 0x80002, 0x0) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f00000001c0)={0x5, 0x64, 0x5}) r2 = msgget$private(0x0, 0x452) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x9) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @local}, 0x10) accept(r3, 0x0, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000200)=0x0) ptrace$pokeuser(0x6, r4, 0x800, 0x39c4) msgsnd(r2, &(0x7f0000000040)={0x1, "1b11a0bee56e2ee8c683ec432df32e2eed6a4440d58262bfa4cfe70c81bb0178367d65577b9929dac34108cc745196da2c399c4151133124f726b791b2cd6eb448ca6167c9846de4557fc062841bdb170748edeef34061753b69da329263"}, 0x66, 0x0) ioctl(r0, 0x6, &(0x7f00000000c0)="080db5055e0bcfe8697071") futex(&(0x7f000000cffc), 0x85, 0x0, 0x0, &(0x7f0000048000), 0x5000000) r5 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, &(0x7f0000000540)=ANY=[], &(0x7f0000000400)) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) getsockopt$inet_dccp_int(r6, 0x21, 0x10, &(0x7f0000000300), &(0x7f0000000340)=0x4) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r5, 0xc0984124, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000000)) 15:45:47 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000005b40)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000005980)=[{{&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000100)=""/16, 0x10}, {&(0x7f0000000140)=""/155, 0x9b}, {&(0x7f0000000200)=""/31, 0x1f}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000000240)=""/36, 0x24}, {&(0x7f0000000280)=""/93, 0x5d}, {&(0x7f0000000300)=""/180, 0xb4}, {&(0x7f00000003c0)=""/112, 0x70}], 0x8, &(0x7f00000004c0)=""/160, 0xa0}, 0x20}, {{&(0x7f0000000580)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000600)=[{&(0x7f0000001740)=""/211, 0xd3}], 0x1}, 0x400}, {{&(0x7f0000000640)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4}}, 0x80, &(0x7f0000002840)=[{&(0x7f0000001840)=""/4096, 0x1000}], 0x1, &(0x7f0000002880)=""/130, 0x82}, 0x4}, {{&(0x7f0000002940)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000002a40)=[{&(0x7f00000029c0)=""/69, 0x45}], 0x1, &(0x7f0000002a80)=""/241, 0xf1}, 0x7}, {{0x0, 0x0, &(0x7f0000003e80)=[{&(0x7f0000002b80)=""/4096, 0x1000}, {&(0x7f0000003b80)=""/129, 0x81}, {&(0x7f0000003c40)=""/164, 0xa4}, {&(0x7f0000003d00)=""/158, 0x9e}, {&(0x7f0000003dc0)=""/190, 0xbe}], 0x5, &(0x7f0000003f00)}, 0x5}, {{&(0x7f0000003f40)=@ax25={{0x3, @bcast}, [@null, @default, @default, @remote, @netrom, @rose, @netrom, @null]}, 0x80, &(0x7f0000005140)=[{&(0x7f0000003fc0)=""/117, 0x75}, {&(0x7f0000004040)=""/210, 0xd2}, {&(0x7f0000004140)=""/4096, 0x1000}], 0x3, &(0x7f0000005180)=""/131, 0x83}, 0x6}, {{&(0x7f0000005240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}}}, 0x80, &(0x7f0000005800)=[{&(0x7f00000052c0)=""/243, 0xf3}, {&(0x7f00000053c0)=""/7, 0x7}, {&(0x7f0000005400)=""/36, 0x24}, {&(0x7f0000005440)=""/235, 0xeb}, {&(0x7f0000005540)=""/240, 0xf0}, {&(0x7f0000005640)=""/226, 0xe2}, {&(0x7f0000005740)=""/37, 0x25}, {&(0x7f0000005780)=""/66, 0x42}], 0x8, &(0x7f0000005880)=""/244, 0xf4}, 0x437}], 0x7, 0x2220, &(0x7f0000005b80)={r2, r3+10000000}) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000005d00)={&(0x7f0000005bc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000005cc0)={&(0x7f0000005c00)={0x8c, 0x0, 0x8, 0x300, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x29f3826f}]}, @CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x100}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3f}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40040}, 0x2004a004) r5 = socket$unix(0x1, 0x5, 0x0) accept$unix(r5, &(0x7f0000005d40)=@abs, &(0x7f0000003f00)=0x6e) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) 15:45:47 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x80000000, 0x1a9081) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) writev(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)="ee", 0xc}], 0x1) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvme-fabrics\x00', 0x105040, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000280)={0xd000, 0x1000}) ioctl$sock_bt_cmtp_CMTPCONNADD(r1, 0x400443c8, &(0x7f0000000200)={r0}) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480)='nl80211\x00') socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f00000004c0)={0x0, @remote, @multicast2}, &(0x7f0000000500)=0xc) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000680)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x22a2630aaf3ee355}, 0xc, &(0x7f0000000540)={&(0x7f0000000700)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r4, @ANYBLOB="010025bd7000ffdbdf25440000000c20990009000000ffffffff08000300401a45460002e6a52812f4ca24f90c892969010124544320d99803f1c6c2873cc07dcb415806ead80871fa05d227d8dd0c92a9fe905914aacc0e99ddef65b06f6085894094b200924d993d2e9077d9b56068a4980eb05eb85c6489d055c0fe83", @ANYRES32=r6, @ANYBLOB="0c002380050011000000000073001800e38ddf2f0ba35bac545e414db1671dcbc6d1f9c770391101c2a9adbc97bc75f564aa58eca38a0d2a16c4f59553667bff001bb2bbb01e710c7b8c6dfdeb6ff483f815d54e70ac1de03dc5397444db7b6539699e9a61f3b01726fc8295d2a5816cb89e41c4de2881d4cb6dc58ffefcdb00"], 0xa8}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000000) accept(r3, 0x0, 0x0) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f00000003c0)=""/17) connect$llc(r7, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r7, 0x0, 0x0) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r9, &(0x7f00000002c0)={0x14, 0x88, 0xfa00, {r10, 0x30, 0x0, @in6={0xa, 0x4e20, 0x7, @local, 0x2}}}, 0x90) r11 = open(&(0x7f0000000600)='./file0\x00', 0x80402, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r11, 0xc1205531, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r9, &(0x7f0000000380)={0x10, 0x30, 0xfa00, {&(0x7f00000002c0), 0x0, {0xa, 0x4e20, 0x10001, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x5}, r12}}, 0x38) connect$llc(r8, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r8, 0x0, 0x0) ioctl$sock_SIOCINQ(r8, 0x541b, &(0x7f0000000040)) 15:45:47 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x4440, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e1) 15:45:47 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(generic-gcm-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) sendto$rxrpc(r2, &(0x7f0000000200)="630838f95f8b1eddd07660acba9f5cdfdbfc199ee0e594d6a5c136", 0x1b, 0x8000, &(0x7f0000000240)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @empty}}, 0x24) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lgetxattr(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="747275737465592e404963bc9201bf56ec40d90cec304248a6834ab49624f05738cd35796f7bf59efe4efcf248c64c1b2d35209ef3f1d1945e4cdba7c8a47c55d1cc8ee33f7dce60c3d13400e1dda8263cb4dffcd29d71e502a41acd5d8e8ab149ffce51fa4b262dd68f2e3f0614743d579d9f875b629513f4ba0349ed9f2e271b0236899973e151c18139f2f4a87d27525a801a9de2ca64eb5302000000516c52f07e5063eb2c70b3117af0f52e96720ef50b17f6dfdc04284d17"], &(0x7f0000000100)=""/244, 0xf4) sendmmsg(r0, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) 15:45:47 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r3, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="c9b39a98"], 0x4) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:47 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) socket$nl_crypto(0x10, 0x3, 0x15) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) futex(&(0x7f0000000000)=0x1, 0x3, 0x1, &(0x7f0000000040), &(0x7f0000000100), 0x0) mmap(&(0x7f000005d000/0x400000)=nil, 0x400000, 0x0, 0x392d6ad36ec2c8b2, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) 15:45:47 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x3, 0x2) ftruncate(0xffffffffffffffff, 0x3ff) writev(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)="ee", 0xc}], 0x1) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x206, 0x0, 0x0, 0x0, 0x0, @local}, 0x10) accept(r1, 0x0, 0x0) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000100)) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r2, 0x0, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000140), &(0x7f0000000200)=0x40) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 15:45:47 executing program 2: syz_init_net_socket$rose(0xb, 0x5, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000040)={0x9f0000, 0x2, 0x7ff, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x98096a, 0x1, [], @value=0xd7ed}}) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x2803c1, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0xb2c, 0x8000) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r2, 0x89e1) 15:45:47 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f00000003c0)={'nat\x00', 0x0, 0x3, 0xd8, [], 0x6, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}], &(0x7f00000002c0)=""/216}, &(0x7f0000000080)=0x78) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:47 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) writev(r0, &(0x7f0000000580), 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000000c0)={0x9, 0x5, 0x4, 0x80000000, 0x8a, {0x77359400}, {0x3, 0xc, 0x6, 0x8, 0x7, 0xfe, "b1414e9b"}, 0xffffffff, 0x4, @planes=&(0x7f0000000080)={0x0, 0x4, @userptr=0x8, 0xfffffffc}, 0x7, 0x0, r0}) mmap$usbmon(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000002, 0x1010, r1, 0x1000) 15:45:48 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r2, 0x0, 0x0) connect$llc(r2, &(0x7f0000000000)={0x1a, 0x102, 0x81, 0x0, 0x0, 0xa, @local}, 0x10) accept(r1, 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r3, 0x0, 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r4, 0x800455d1, &(0x7f0000000180)) socket$vsock_stream(0x28, 0x1, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r5, 0x0, 0x0) dup(r0) r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nvme-fabrics\x00', 0x204000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) pipe(&(0x7f0000000080)) vmsplice(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="1db4ad713a92234c10e6f983", 0xc}, {&(0x7f0000000100)="c14159ae8a5b01c5de39d243d63d4ac9f243d3a422b9868d51609fec8317d397e89e8491ac296db096e1671b88042da5576cb16afb749eac78a6fec409511ef9607732706f2d779e3d971c", 0x4b}], 0x2, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f00000000c0)={0x80}) mmap(&(0x7f000005d000/0x400000)=nil, 0x400000, 0x0, 0x392d6ad36ec2c8b2, 0xffffffffffffffff, 0x0) r7 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r7, 0x84, 0x1b, &(0x7f0000000540)=ANY=[], &(0x7f0000000400)) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r7, 0xc1205531, &(0x7f0000000240)={0x15, 0x3, 0x7f, 0xf74f, [], [], [], 0xffffffff, 0x7ff, 0x9, 0x6, "a44dcf920ec89c5e2076a1a38583bfb1"}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) 15:45:48 executing program 0: futex(&(0x7f000000cffc), 0x180, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f00) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000000)) futex(&(0x7f000000cffc), 0x85, 0x0, 0x0, &(0x7f0000048000), 0x5000000) 15:45:48 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f00) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) r5 = accept(r4, 0x0, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r6, 0x0, 0x0) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r7, &(0x7f0000000000)={0x1a, 0x304, 0x2, 0x0, 0x0, 0x1, @link_local}, 0x0) accept(r7, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000180)=ANY=[@ANYPTR64=&(0x7f0000000100)=ANY=[@ANYPTR64=&(0x7f0000000040)=ANY=[@ANYRESHEX=r4, @ANYRESDEC=0x0, @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYRES16=r1], @ANYRES64=r7, @ANYRESHEX, @ANYRES64], @ANYBLOB="80efb961302c103990c038962d6c17abda8f1c7c6137bc4b9e5dc5305160aeb0b41eb958d45015653126736aecaaf72b0d91c698653cba43247687d5e790b167191500000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYPTR64, @ANYRES32=r1]], @ANYRESDEC=r5], &(0x7f0000000400)=0x2) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000000)=0x8000) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e1) open(&(0x7f0000000240)='./file0\x00', 0x200, 0x14) fchmod(r3, 0x81) 15:45:48 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @local}, 0x80) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x10000, 0x0) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x1) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f0000000080)={0x8001002, 0x7, 0x2}) writev(r0, &(0x7f0000000580), 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000000c0)={@local, 0x0}, &(0x7f0000000100)=0x14) sendmsg(r1, &(0x7f0000000800)={&(0x7f0000000200)=@can={0x1d, r2}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000280)="81c9f80f2e8be229ef85afda4a0242c54ec9730b7946611a9616108e1c3dcb6cd1b1f7af43958c1c0276cf7cc9146307d228a63f63046395603883565a0e0e827ff3e5d5c98bacf83ac234d2e58e38e42da94a7ab1eb871e0ce396c540fbecc87617052c5a14b37976b1f582bb6008b82046e0d77b8ea9aea665ba4495a5196337b79ec96c36946b090a2cc5bcc65c266e039dd88a1bedec21e7fb52693267f64237bc3e934e902394990bf4861fcb833e6dc0ea00bf6b0f", 0xb8}, {&(0x7f0000000340)="b8fb7c9f1862d4b9984b1dcf16a13303a916462051e833ff608bbb3ae1ca756ce9353754ad54b9c3ff4a4f3fbd1ffe378f5db5d90705f410335d8474911f602a9597c874741b4206f0e382e871d5e3fd6226568fd55fda3c4032bc6dc1fb00676e47ca57e6f0f090dc46f5d65e2416b75e3d7e7f98754022c90921341c6223375652a07f054f1b2f5880b1a0aa6e5b8499c6d7871220d761b9619826e201da2062c2385d6a46baa81dd6acc83b0229ce3b44913e685ad7f55f9e4c97597ba445a632b5795c7c91187cd5a9b71a2d2c441742205544070d825b4a568a65559ba126443eb01c164a78b1abda328fd7c0ea", 0xf0}, {&(0x7f0000000440)="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", 0xfe}, {&(0x7f0000000140)="dec660c42a9c32f83f736e862bdd76c7a949f6890bd9afb01fa1b518e53e3401b45bcd", 0x23}, {&(0x7f0000000540)="d6d0a7d0eb6e42fe4d82d09effb987a2640dfa03fef35ca1a7ec2089ca6b2bfe22a96f78cfdf1174cda966fa2f5c13228a3b4b6f557cfecce51641489d1491172ffa76ba658ae2bc2feb18a47ffdef3c43018b0ef1b48fe4dfc833d7c89ac7cdda20d4bee6941fc79155d360ed45c8e25131d4be9634ccdda4194b30a79a5fe6a581bcbee3d4688e3958ece0e449378c09f8bdc9448619673072f0e31959194db105bd16ce1ffc35bcebee9bc4950c183995eb750972f569f7a872503d1b90592847ccbd08a073ae", 0xc8}, {&(0x7f0000000640)="67b57c512d20e3ad74d74a49", 0xc}], 0x6, &(0x7f0000000700)=[{0x100, 0x3a, 0x10000, "30bf11e769996f7e9bd6656efb6942a9cabc1bdf21803e55275870092bc4e75b4b9bb8917e467349734a80f0fed41502b16353928ade205a03de2cc96396a425379b52c4036a027c160530b2813063b16910a7ff9ac3acf45849cb7bfbe29933a84760f903086dd741b4189b2aa068bebf0156154c07bfeacc912d3cd2b9afcbff559665f6c677abd0841c6bf4616628fbd2eb55c9f1dfc140e099277b5c36434e5fe07ff674c2fe5f4a6945f78ea523633b44091d508303bd2276e4e6c741e14490b2d43b2a202cf85757f97f68ff5d5ca4b46214351958a67fccf9f590e4313d07af333fda529f4c81f687"}], 0x100}, 0x0) get_mempolicy(&(0x7f0000000840), &(0x7f0000000880), 0x1fffc000000000, &(0x7f0000ffa000/0x4000)=nil, 0x3) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 15:45:48 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x101, 0x4) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1, 0x400000) recvfrom$ax25(r1, &(0x7f0000000100)=""/83, 0x53, 0x2060, &(0x7f0000000180)={{0x3, @null, 0x4}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default]}, 0x48) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) 15:45:48 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x4000, 0x0) sendmsg$key(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="020d01021e0000002cbd7000fddbdf250800120004000100bb6b6e00040000000600330003050000f8ffffff00000000fe8000000000000000000000000000bbac1e010100000000000005000000000000000a00af010000ff7f000000000000010014000900000008001900000000000a004e200000000000000000000000000000000000000000cb0e00de09004e2400001000fe8000000000000000000000000000200000000002000100000004d203017b01000000800400030002000020fcffffffffffffff0500010000000000070000000000000003000800600000007ba6b001abb719a64dd1be7c00000000"], 0xf0}}, 0x50) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f00) setsockopt$nfc_llcp_NFC_LLCP_RW(r2, 0x118, 0x0, &(0x7f0000000080)=0x1, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="f0ca9a0000a927b18901c68dabe5e437c4482c33e284ca3f809a6ba28256c42fca551097bc3ad16afd7d61124b280d5e0172e501cf1d26eac3e6b1157d30d722ae8fab09480f5e6ebf6cf9153eeea995705b1564b72ebdc9222a99e693ea19260200000000000000152715e03e14e96ce3df5743247e48"], 0xa) close(r3) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x80002, 0x0) r4 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x7f, 0x6, 0x7e, 0x72, 0x0, 0xfffffffffffffff8, 0x20, 0xd, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2c, 0x0, @perf_bp={&(0x7f0000000240), 0xf}, 0x1092, 0x9, 0x2, 0x0, 0x7, 0x200, 0x1}, r4, 0x8, 0xffffffffffffffff, 0x3) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x10001, 0x8) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r5, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000340)='bond_slave_1\x00', 0x10) 15:45:48 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x7980, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000011c0)={{{@in=@initdev, @in6=@loopback}}, {{@in=@loopback}, 0x0, @in=@local}}, &(0x7f00000012c0)=0xff45) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r4 = msgget$private(0x0, 0x35) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) msgctl$MSG_INFO(r4, 0xc, &(0x7f00000001c0)=""/4096) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) mmap(&(0x7f000005d000/0x400000)=nil, 0x400000, 0x0, 0x392d6ad36ec2c8b2, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) 15:45:48 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080)) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) writev(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)="ee", 0xc}], 0x1) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000540)=ANY=[], &(0x7f0000000400)) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r2, 0x40045731, &(0x7f0000000240)=0x1) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r3, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f00) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000540)=ANY=[], &(0x7f0000000400)) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000200)) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r4, 0x0, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000100)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 15:45:48 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0), 0x0, 0x2) mmap(&(0x7f000005d000/0x400000)=nil, 0x400000, 0x0, 0x392d6ad36ec2c8b2, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) 15:45:48 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmmsg(r0, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) 15:45:48 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r2, 0xc040563d, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2, {0xd45, 0x7, 0x1974, 0x80000000}}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x3) mmap(&(0x7f000005d000/0x400000)=nil, 0x400000, 0x0, 0x392d6ad36ec2c8b2, 0xffffffffffffffff, 0x0) connect$ax25(r3, &(0x7f0000000840)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}, 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r5, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x80, &(0x7f0000000640)=[{&(0x7f0000000300)=""/151, 0x97}, {&(0x7f00000003c0)=""/172, 0xac}, {&(0x7f0000000480)=""/166, 0xa6}, {&(0x7f0000000540)=""/225, 0xe1}], 0x4, &(0x7f00000001c0)=""/4, 0x4, 0x7301}, 0x3f00) sendto$unix(r5, &(0x7f00000001c0)="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", 0xfb, 0x4000890, 0x0, 0x0) r6 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r7, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f00) getsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000700)={@dev, @loopback, 0x0}, &(0x7f0000000740)=0xc) ioctl$sock_SIOCDELRT(r6, 0x890c, &(0x7f00000007c0)={0x0, @isdn={0x22, 0x0, 0x32, 0x0, 0xe8}, @ax25={0x3, @default, 0x7}, @can={0x1d, r8}, 0x6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000780)='nr0\x00', 0x7, 0x5, 0x6d8}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r9, &(0x7f00000006c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000680)={&(0x7f0000000100)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x10000) close(r1) 15:45:48 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) 15:45:48 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x1, 0x9, 0x801, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040056}, 0x40000) bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) 15:45:49 executing program 2: ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0x7b, 0x0, [0x3a, 0x80000001, 0x1ff, 0x3]}) socketpair(0x5, 0x0, 0x4, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x40}, 0x8) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r1, 0x89e1) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f00) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}, &(0x7f0000000100)=0x10) 15:45:49 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x501400, 0x0) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000040)={0x3f, 0x7}) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x1, 0x400400) r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000540)=ANY=[], &(0x7f0000000400)) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) 15:45:49 executing program 0: futex(&(0x7f000000cffc), 0x180, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x80002, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x101081, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") futex(&(0x7f000000cffc), 0x85, 0x0, 0x0, &(0x7f0000048000), 0x5000000) 15:45:49 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r3, 0x0, 0x0) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000180)={0x8, 0x8, 0x4, 0x10000, 0x8b, {0x77359400}, {0x5, 0x8, 0x4, 0x81, 0x6, 0x2, "928f9e80"}, 0x8, 0x2, @offset=0x7b1, 0x1, 0x0, r3}) ioctl$RTC_UIE_OFF(r4, 0x7004) 15:45:49 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) writev(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)="ee", 0xc}], 0x1) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r1}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r1}, 0xc) 15:45:49 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xa}}, 0x80) writev(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)="ee", 0x1}], 0x1) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 15:45:49 executing program 4: r0 = dup(0xffffffffffffffff) semop(0x0, 0x0, 0x0) semop(0x0, &(0x7f0000001840), 0x0) semctl$GETPID(0x0, 0x0, 0xb, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x440, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x9, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x10}, 0x8000000200036158, 0x800007b, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x818f492baf681a27) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f00000000c0)=[{0x45, 0x0, 0x4000000000401}, {}, {0x6}]}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) clone(0x20040200, &(0x7f0000000100)="faacf73db710d0d3fc2eb6f0dbe29559214399599f705ca66734a8d9e6938095c1c53eb688a4c8ce613165ff7b042366a68839c0eeb6fc28a824c231b9064257bf42be691d4a823070bd38f63820cc0fb43b619c86e85bb3b1d32b9c66a5e3de11397770ad8976721d2de72bff22cbfc23", &(0x7f0000000040), &(0x7f00000001c0), &(0x7f0000000200)="6388d3cfafbcc8e2f3583a2b20746399c6584e77a58218e73d8a961db1029310abe9e9584ff7439f77973fc763557552fb22f103095056817d277841928ca7e3d0652caa53ebb8e0fd501814f192fc060e4351fd3fb972223a9361d528878e22466ac9efeefd764e97d6e6aa6e3615f663cf529df7b250e788ecef2ff3c8838fc2e78b1620405a9e3bc5861b2aa8fb2f3af567a3d60baf13125afc56dc6c3c5394ef9ce816143f707caf1cb28180c678cf3f5b4f24aa2632c03b") vmsplice(r2, &(0x7f0000000480)=[{&(0x7f0000000180)='w', 0x1}, {&(0x7f0000000340)="6a362ef3586613124b2a06666eb30bd3832c07ac2f23e918d5eb53cd28651038fcd4b3e9b738fe92727bacb1fd4ceae1561d7d929b5773466655c4b00ab1531d14b70cd67bea0f7dff670e8035975e1965de6b3fc39ba41e76bfff89a482c4ebbec623f63deb1a1ac251174d1c6f326ac29ba5ba220c009986416feb8df697532cde05994f1487e25518346024dae9a4ac1140db1fc052a8b7730e29978d2df6432f0c4b666b5c8012a72756173a83b6628574a135a380", 0xb7}, {&(0x7f0000000400)="a935c45e40c583d2eb0ee4473bb9f435bf49fbc01ed72f43be2871ba3cecf3407cc646f98f2f6f8523a5c40ffb42b9109997d2e1ac17bf66e90e5160d2151608aa93a5e05ccd5da0c51511261dea16e2dc7ca5", 0x53}], 0x3, 0x6) mmap(&(0x7f000005d000/0x400000)=nil, 0x400000, 0x0, 0x392d6ad36ec2c8b2, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) creat(&(0x7f0000000000)='./file0\x00', 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x2000, 0x0) 15:45:49 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000540)=ANY=[], &(0x7f0000000400)) ioctl$TCFLSH(r2, 0x540b, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/tty/ldiscs\x00', 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r5, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f00) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@ipv6_newroute={0x24, 0x18, 0x20, 0x70bd26, 0x25dfdbfc, {0xa, 0x80, 0x10, 0x81, 0xff, 0x3, 0x0, 0x6, 0x200}, [@RTA_OIF={0x8, 0x4, r8}]}, 0x24}}, 0x1) writev(r4, &(0x7f0000001680)=[{&(0x7f0000000180)="00e807efa510f7a59d772a636e092b0f9c7c827abb140a1e6c72df", 0x1b}, {&(0x7f00000002c0)="49bfa45681cae782f418a90efe0e9ba1744a2c78d9085c74a5115a35caaa14de4cbdc8a50bc9baff25e41408f2a9f06b1329924af25286196731f827fd1a97ebf745532616395e7ad3666ae31a2757b3facb6be32c7b8a77ee387b76ee712c16b8e34a42ff819e5974d418fc757ee1660df032079e64741fa7d0ee1dd80eb24d7493efa2e5dfd9cf1021f47a3a39c963fd9b9b45bd89441729416379b1d352ee478b87fd1a6bb5b80e0b4cb058c04a1bd3db00de3bb153bfdb98455a5b27e0ff3977b32709523c", 0xc7}, {&(0x7f00000003c0)="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", 0xfa}, {&(0x7f0000001700)="8dd4d8cf219d8ab98fad336d861e5146cf81dff5d04186fb940efb4325b8d2f7acc9702d837c276a53661bd8a49eb9a74400f4d6df875770365954d9d993279fbc485b0defdc47601d6110423eaa25c2f53f90e43a4a4db987b1befff6ec8fae3343f7e620deeb81cdeaaf3e295ab775d5c97d93facd1e67d11afc0032a0546e", 0x80}, {&(0x7f0000000540)="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", 0x1000}, {&(0x7f0000001540)="b935bf8f40f48b86731910b9a8dd6b7d877b014875d40e75995d08dc4b94e16ab0f89ef90dfa495b9ee54d88de2aa142a3e07aeb2883c55e7fb14614231c5608bee9e8990ce6448fc7b73ff7a9d1a3737b6df1c7e3f512ffae1302bfa8bce6784f506e56ebaa9c6f11c339b144751cd9bcb19127fc0d766bac106cde408f437cc6a55f47940b40fe43da2f2de24819dd649f471c836b20a026f45cd814da7e07f8f76b2085771549938088458b0d19d41e8dfa3f", 0xb4}, {&(0x7f0000001600)="7612dbd1bae3964ea9f3e2e71cc664e4c2e139379130b1b24a6fc0af052ca81ce921fe1590a8ecacd0fbc37a68db78c3aa08dc7fcd0299443157b37254abaab93291f9c5267226836a1fd5c033896f94e28a99ff657965da34cf2efa0c", 0x5d}, {0xffffffffffffffff}], 0x8) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca920000a927b18901"], 0xa) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f00000004c0)={0x2, 'ip6_vti0\x00', 0x1}, 0x18) close(r3) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) splice(r0, 0x0, r3, 0x0, 0x80000001, 0x0) 15:45:49 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000006c0)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) getsockname$netlink(r1, &(0x7f0000000000), &(0x7f0000000040)=0xc) 15:45:49 executing program 3: r0 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000540)=ANY=[], &(0x7f0000000400)) write$vhost_msg(r0, &(0x7f0000000200)={0x1, {&(0x7f0000000100)=""/25, 0x19, &(0x7f0000000140)=""/10, 0x1, 0x3}}, 0x48) r1 = socket$kcm(0xa, 0x2, 0x73) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r1, &(0x7f0000000180)=@in6={0xa, 0x40, 0x0, @empty}, 0x80) writev(r1, &(0x7f0000000580)=[{&(0x7f00000000c0)="ee", 0xc}], 0x1) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) 15:45:49 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f00000001c0)="77103af44fc99828ba4e2a426fc6164c6d6c4945a88cc36186dc48b01015863d215a46244ed74d64f2cec06757f50249e1e9b98483acdc0ad41f193753db0ed6a47206d236bd3dfd7a5272a00a8cb327346a77c436a40cbd69027654e3d4f8d1fbc503aba96745600ea90201630910975efbbb7844783ce477157aa4209726f7f7584781c2874cdcbbe6f5c525316d1cc661ec09714de30ab0678aa40535d2f58ea2eadb9615548d891a8d4930e3d84a9ae3", 0xb2}], 0x1, 0x0) syz_open_dev$vivid(&(0x7f0000000280)='/dev/video#\x00', 0x0, 0x2) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x200200, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f00000002c0)={'syzkaller0\x00', 0x40}) r5 = creat(&(0x7f0000000140)='./file0\x00', 0x42) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, r8}, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000180)={0x2, 0x6, 0x0, 0xffffffff, r8}, 0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000040)={0x5, 0xc4fa, 0x8000, 0x4e2, 0xffff08ee, 0xfffffc00, 0x4, 0x7ff, r8}, &(0x7f0000000100)=0x20) mmap(&(0x7f000005d000/0x400000)=nil, 0x400000, 0x0, 0x392d6ad36ec2c8b2, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) 15:45:49 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r2, &(0x7f0000000180)='.//ile0\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$UI_SET_MSCBIT(r2, 0x40045568, 0x39) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) mmap(&(0x7f000005d000/0x400000)=nil, 0x400000, 0x0, 0x392d6ad36ec2c8b2, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) 15:45:50 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e1) fallocate(0xffffffffffffffff, 0x22, 0x7, 0x100000000) 15:45:50 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw6\x00') getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000040)=@sack_info={0x0, 0x8001, 0x3}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000140)={r2, 0x9}, &(0x7f0000000180)=0x8) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x200, 0x9f49e6d673058226, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) 15:45:50 executing program 0: futex(&(0x7f000000cffc), 0x180, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000003c0)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r3, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0xba55}]}, 0x1c}, 0x1, 0x0, 0x0, 0x240088c1}, 0x40) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000000)={{0x1}, 'port0\x00', 0x0, 0xb046c, 0x80, 0x2, 0x5, 0x73e, 0x0, 0x0, 0x5, 0x4}) r4 = request_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)='trusted\xf7-\x00', 0x0) setxattr$trusted_overlay_redirect(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='trusted.overlay.redirect\x00', &(0x7f0000000540)='./file0\x00', 0x8, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000180)={r4, 0x57, 0x7e}, &(0x7f0000000200)={'enc=', 'oaep', ' hash=', {'blake2b-160\x00'}}, &(0x7f0000000280)="72e496038e54724e0841c314656c6f828e472d0549db864f78e3d8d23b328f69602d1709a5a427d2a68d1753c703206a56097182a973c4d6c48bec360945eb8e8923bba60a9fac710a0475d926fdc96f65063c8722cde7", &(0x7f0000000300)="1b11b40f27746dfc2f61f66818d1e5c084b6434eb7d8b6edb4c64eb9b01c5ddd99e9bfcd165bf9709766e65f635dca3ce93fd30be146b5727a1f5416ea8134c14550f866ee319b8127f1e5cf95ddccaa537b5988bcc24a48c1def02e8bd92d9d5736b64b259fa3e2e08f8e6bf5e72659756efde15dcc9fcab39c9ae624e4") futex(&(0x7f000000cffc), 0x85, 0x0, 0x0, &(0x7f0000048000), 0x5000000) 15:45:50 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timer_create(0x4, &(0x7f0000000100)={0x0, 0x3e, 0x4, @tid=0xffffffffffffffff}, &(0x7f0000000140)=0x0) timer_settime(r2, 0x1, &(0x7f00000001c0)={{0x77359400}, {0x77359400}}, &(0x7f0000000200)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x220c40, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r4, 0x660c) mmap(&(0x7f000005d000/0x400000)=nil, 0x400000, 0x0, 0x392d6ad36ec2c8b2, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000040)) 15:45:50 executing program 3: r0 = socket$kcm(0xa, 0x5, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-camellia-asm\x00'}, 0x80) writev(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)="ee", 0xc}], 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r2, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x1}}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x28}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x100, 0x0, 0x0, {0xa, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x5, 0xa, 0xf}]}, 0x28}}, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/cachefiles\x00', 0x200002, 0x0) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) add_key(&(0x7f0000000300)='.request_key_auth\x00', &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000380)="ce97e3b7b08f34e489941ba38c49dc386399e8ccc6df0eeb476a878e4dc52391fe67559a72c91b2835811ee0efeedeb7841f11b031b58bea0a800b0d2648434f8961177535f76b6b7c5c531cc2eac47c300fc175ac9e2e57c8f0ab4682250fb0c40fb3d887cecc9a3c4efb20c136828a31e37b5e1a5e8e750932c876d1e165777ff594e14bf4919542bc3402c3985feeb63fca91e1042086e6841228586d1bceb27e55dca601f0e32cd47bb851689be49923bd357bf7a4", 0xb7, r8) ioctl$UI_SET_PHYS(r6, 0x4008556c, &(0x7f00000002c0)='syz1\x00') sendmsg(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) connect$nfc_llcp(r6, &(0x7f0000000240)={0x27, 0x1, 0x1, 0x7, 0xe0, 0xff, "6d24ab1fdb4698b7c94a14679929cc9a0ac0ca3af21f768a020ac259cf7d7093439e9bca2418f6676bc505e9de93cef84567dc0cecec10a100e6902feed716", 0x13}, 0x60) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r2, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @remote}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x28}, 0x1, 0x0, 0x0, 0x48890}, 0x800) ioctl$PIO_FONT(r7, 0x4b61, &(0x7f0000000500)="e785ffe39b79aee028413855f10aa64a7c74738e0cfd167393602330329bdc1c9784971faeaf17830bbd9e02d1ffc4ce716a9ebd93c338b064164b60de46d5dab60b0fbccedf0ea6796ce7ea34e8d4300e0ce0187a129b1b63730ec37be46b") ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 15:45:50 executing program 2: r0 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000540)=ANY=[], &(0x7f0000000400)) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000000)={0x0, @frame_sync}) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r1, 0x89e1) 15:45:50 executing program 1: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, 0x0) ioctl$KVM_ASSIGN_SET_INTX_MASK(r0, 0x4040aea4, &(0x7f0000000000)={0x8, 0x8, 0x200, 0x4, 0x7fffffff}) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r2, 0x0, 0x0) recvfrom(r2, &(0x7f0000000100)=""/72, 0x48, 0x11000, &(0x7f0000000180)=@can, 0x80) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, 0x0) uselib(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ioprio_get$pid(0x1, r3) 15:45:50 executing program 2: socketpair(0x27, 0x800, 0x90, &(0x7f0000000000)) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e1) 15:45:50 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='stack\x00') socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/vsock\x00', 0x181941, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r4, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f00) r5 = accept$inet6(r4, &(0x7f0000000600)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000640)=0x3d) r6 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/checkreqprot\x00', 0x2000, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300)='nl80211\x00') sendmsg$NL80211_CMD_STOP_AP(r6, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000680)={0xe24, r7, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_PROBE_RESP={0x5c5, 0x91, "14b38792295c3c1763ea71491e131672d474e477187a8851c9b790492465024ee846dba62781dd4f14b7f0fc1b9bea64f3ac3a5f2bcb3592da9940fa5c268e9f7f791f5ce38c69e4a47cbfd54da7db7ed8456d7b4e03284493f9026419dce83df8ba869940b7ff70611c82b08ac0d4a845d8809bd8068bcafde30178f23790cb2d41281894afcb7693eb64b3a1adf2d8fe85f40ce6fbc33097e413fb2463973e127415a3a57b93aa0405d45848708a16aa23789125d4277d70ed4efdd1695ba95c6a880a11ad22734b449656ad57e75a2c67459967a1a450d1f9eaa6b29355fab4d627b076c9f6ed6a2c4dc4c37ec4735fa42021a28c427bea926f54cf4fce5d5ee2c58bf8a38ad458ef798f228a37bf95e7a2ba52aef0530be7db75567a39195b08a164946c25be4aa57f28f9c63539a127d2fd2396c4c98c8008574f277dfc988f762138ed198e3b397a5a12b5a4f3012dd034fb98f3f003691bb6ec36bc4f8a97791b57fa564e2ce32767083292c4991cce041bdc87afe066f33ac7f1cd175a1736f88195549509743bfb8043fcc13a96ae8f696db9b731d4ff4d6a410edf40642704cffeb661f09c57e82e4d233c6a0a8a3064e506106a769bd0429ee03db2a4cfd9a6b94ad6ea5c0aa0040115ac217bfe31bf428314bfd4c753a3a2ee7c29ac9b9beb6d6f55dfce98744564adef5bddea78707d9928e9e79195197a409576d1c148cd246c844f4e402f5c42ac8157aa73ce41d1abfbab5ef06182ec882e20cd7188d111d820f87fc39d61f311729ea0d3621c7bab1dafd13b8ba496cf73fdc42fd44ad1592f6d8d43776c8fc99b1b0c65cfb184108085c6d9d88e6b64b8a789bffa9138b056da74b33aca02a990c46e0f9195e04b1f05bc2d4ccc0b817b0a75c3f685f92c9b66d0620fd6b255c1c4957762c3b6282f2f4a6f97210fe37c3a59f3911bd2515e34f1aa4cf545c0e624ade07607f843495bf30170c5168a1cf7f0a4cae76456682cec26269116462615323fa7df318348b9ebd5fdd895cd43ee499392e08bb9170024876900967bec021eb98197ae9e0639f2c9bcd7dca3c063718190f303279d2ebe3fd906a491eab8ef62e71cf4a1dc719d4c1299b7ec09ece0b5847c6444f63f42b59db86946b5956566d8297661a919e2257630b7edc548c551492b1369164afd96fe0969092f171de5d1618c4d44c2dce113c73bec277de1985d733c596970ff55fb62c62bfa9f494312a8818bbc3eb5ea09b4031c049965d3a4febb9e96c585e52712024423a2dc72e68c4ac2b91b6f28b23653aeee513ab6af4fdd456368a9a5824cc502e5a90b8dee2a0fc255c850a79683b2954a7e9dc838705e46702d835a0aa257da2439c5f5c0a76f1337ce2026ee175f2ea13e4c2ac03d33c78dbcf5e65540d45607d99dd9fd009a43eaebff71f2aa0f75bb512a2289804d0f8ea390dbf709fb190dcbeda2e576fa149213c98f8277e7e1438e88c808a167cb8b397c3e5114ae640d84ea1174c7ff7804ca07955940a7e570613101524599cb4077b1566bdadea649a3333dc1c7c43b53fddb92b07949ff8000d966b3f5cd109c92030c3e5574bd44d2f1afda2e1e3805c86061d7e7ebf44bc710d2152380a2843b01534cfdc675baa46dc7f020aad94d6800118abde27541e7d2b1bdb7e5792f465fe79541ffefc9fbb60a6833605dcb29428133eeb17da96e69051f27db669dca7b8a71992c4259b98e2f5e18bc7d4c2c5bcf271524d2e59afcbb7ab9d30a7a08312ffda06d20f237b5afee776663f6d72c8c086424519161cc2ff5cf51f877db964c67386af5996932a02a81c3976b81a401a00e941811fe70b88a4acd63417e3af02098be0df776ce30a83a24af85770e7916e6e1f25357187df20080177928527096efbb94e78e1bb29800e49f0533416e2e487e9f09ba24c431c5ef6269123db598540b34b86f62c182a897aa8239de15a5f6427da92487762b3e731477477dfe1a402ea08ab12ee8fc8b852abc6661788303ea8bbe80f6b6f30389c0234bffff1af3c7118d5fcca41249042a3b0c2773afd02d276daa"}, @NL80211_ATTR_SSID={0x14, 0x34, "ca7f3de4f919ab1df2b17baea0b397a4"}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x1}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, 0x6}, @NL80211_ATTR_BEACON_TAIL={0x81f, 0xf, "0de248c57b8d26ea30e365514e5c712dee65fecbbdc9cc9f7daed8cd6609fb9defbb5a0492a7c0c7832cd019cdb47437316a1188c733c4eedcafa3f7e9b951d6f33060f95e043161a5280780c7604c43a08f6edc01b26c7a5d63baeb3de9cbf130157d8c436b03789a441aa56477e512b1a433e50f7342960e39772a618b6af75d0a3b2bda817633a1bf2d7f354fc341376b62e97322e3fe772f29545a4f029336fc3d2bb778df7fdcd63ec1269e02bbb2802e9557c6a26ebdcc5362a9332ff2beb77eb83fdcbeffddaf7964f3471166c5809adf5aa1bd3f1866c8238d72f95e5a6e429bdd91922e2b5725d0ee65732dc4c69f2f4337d3a6a5018205ea70d649867c53d8f204bb43e39c40c49e9b2e4773ca9a2d3fabd386d1c62565401857273756985f2988f30e21b09c8a4b0f7864a30ee3356b2f713b51f5c6fc5b266e02669082cd06146020be03c4c7cace534d926de93403d80c6390a3c975a0ba9701f28e07d43ff88a980666c8de3cce4a982025e5cf84ba4799c5017c859bfee018b2db25f77c7bf5e797af470c427389dab0e754088e1b00b023c258eb8d2cc59171dfa68799f89af1788d160b46aea61b1128fdbe4230a131ef72c5f9550e2d1d6e4a8013345dfae3dceb14d102b3ee53b7ef7d6d1aa9eefbb475048599acb774284728318adcda9b54be5c0aa1379681d486acb5b055d9102c459853707817a116c0522559ff9e341f29046c91a9f1cc007980dd99154fba43fe9008d62cfafbeb86149f587ab7fbf98096538dadc2eb3bb5fc252af753724b05aab63668022ae051af96cd0f8226c0916a7c2e38e5fa3694a9392148e672a3a02d1e0f3f916030da3364c129c33d47f6f418d112e78566f15ac59d0b980747df342ee8376c3a537a2a78764581cac6951a4a3a0f361282c364ed2b4169d1963ba630c5934a7c0b11e0b20cc07da5d92b421f4bd9706621dfbca8390573f755327853f4129fd6308eb4402a46a93b750a182a713b20dec1a230908677f3081d5416765c6cab4b5df21b57ee90dd90bae1f53ad55cedeee08a319b546ddb51cb7e12b75aa4cbcc7e12b2642e8fd4b5e66b07bef27234ca224555aaecfc6e5b00728caea0c09baf847e32c0ba57142d6abc628350e792c07c85656e4015b9cf61c1a424c5860c1c597d51d9b7bc267eca71d5991ca996c7f18080f3cea0b62827429654ec04816c77896c9c3edc8bc90fe465cbb93e87042bcb08721095af94036c5b3430283a1edcff51834d9019b9b8e46a7f3e619c0f4937b095a7e780d3bf8c927670a8129ca204916a018b6128d45b0371ff19e1dceaf445e48b19240d48a2a0e3d9e3db63f428b4fba0c39e795e1d11b5223faabffc165d39fb71df6e3df28fb3295153d2bae799ad0b7b5e8bb7646158e9e6475c33b2faa973ee41005212cd82679aed5ece8612cb94ee5f53dfe28a596500bfdcf47bd1f495cfc0c428ac645ccc1f90a315a3588a08e6df4a4714448e628f13529f01ec4c69a952c9a36e42fc30075cbb08a4b7f04b1bb10e8dbdcc455c5c08e0a30633012f90cd53c462c54611344bac8743a5daf26cd4d6522baf27fdded082e6f86706b28e97cfc79fec3bf7b43a738a3f6a61edc790a8159abfe8e2f21475d4d8257b7ba00365bf629aa0e8418b7c60f8ce7da52a0d41642a08c0ae56a348314c3eb2b2e7fe04c9017912b1907a12b71d59070e4e576b033cbb72f5c06842554eee510738cae559924cfaec8e7afe3a268ed47e7d3ca503573cc9c25f64d5961ed4c4ee754cf5c65e9526ec3362536e1465076af0941a2c9532195cd7000f3e8b2e4bd007e6b58658357e6c04d7f06ba9bcfc3a3e0a36ce40d7d698ecfe51454633de01fbeffd9f5d8aa1fb0edb7144ba59dadd46390daa98a817581df63c453a400b5d266d7d8da07426e9272986f3556b61910346b3becb20b7b946ff6df2ddee91d661c8d548deda50e8998d540118b8215dc7bb018b2a233c238a74b6f8f0adab76a797f16ab9bf856fee0f6df325b2dc38a11fcdd695fcb7497f087cfde1eb9c1e5b523584fb7ef5c430c21ad29ee87c8f3eb10de92ecd33503895a5ddc08f699cbde35bd85f71eb9b2fdf4541a6d23be220f282c9c3128b5b889dc335ebbb36bcff51fc3295cead71d5fc06da2888d650509d2150c9d09540ce104d47b3f8f1218efeddbdcd780bfc373bf538f286ce0f6e8144d3970d57be16c4d406c9e2b76d1aac47295df30027ecbfb839def33f5a6087a76200b67387436b0e243f64cdc91e478c1f781b0fb2467cc5c35805d5fabd794c5f17fad927a8041d02c54a003052c86e602327edd749e914104a67f678b6ac10e98d6d3cdffcec2d56ed6522caaf905e6fcd26534480457c5ab0e1f8c627b525ae37ff1ce178cfb2742626e16d05f4e32f9cdc0deb942c90c0a2bcde09f331a46034237cd394b3a91339a49b0a260d78add56ac5e88aab20e448217d312c66f9f6984853deafa5b31d66214ddce686b1e56463fbcce705febb03696160ca41b6263a557d04141d2d5319da3bbe4e556623cadc8125bae0c86aa0bb064079fa021a783f6ecc6579904426448d07da54dad61f92fae53815fffb959d6135aac0b09f6527b65f8bc256d60da2e2b5a6564d05f827a2a7ea96d9228947cebd5e397321529177e7b255bb50f1a4d5dce173ffa5949666deff986fc7bec1853f3b8896af37f9c0dad69b2e5a442969f267b34b6d742e694bba6d31e7b0c8426804bc3bf717e47e713abc8bb69bbc3e1e33a443c6235de8430affc207df88b8e5b3b9b3ae50539554ea021e6daf34923fd2c87a833b840b1661e9b4c1cb5b0162c62799a3d0128d505d40a41192f39724c81dd0b3b61db841ed1c98d8d0435aeffcb45d46e11bad7ad56402e0a7a087bcb3ffc5b1a530"}]}, 0xe24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40010) mmap(&(0x7f000005d000/0x400000)=nil, 0x400000, 0x0, 0x100010, r5, 0x0) readlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) 15:45:50 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18981"], 0xa) close(r2) socket(0x10, 0x3, 0x4) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r3, 0x0, 0x0) fcntl$F_GET_FILE_RW_HINT(r3, 0x40d, &(0x7f0000000080)) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) writev(r4, &(0x7f0000000340)=[{&(0x7f00000002c0)='\n', 0x1}, {&(0x7f0000000000)="b5", 0x1}], 0x2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) r7 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r7, &(0x7f0000000180)='.//ile0\x00', r7, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$KIOCSOUND(r7, 0x4b2f, 0x8001) 15:45:50 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000680), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) process_vm_readv(r1, &(0x7f0000000440)=[{&(0x7f0000000100)=""/132, 0x84}, {&(0x7f0000000000)=""/72, 0x48}, {&(0x7f00000001c0)=""/252, 0xfc}, {&(0x7f00000002c0)=""/42, 0x2a}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000300)=""/62, 0x3e}, {&(0x7f0000000340)=""/236, 0xec}], 0x8, &(0x7f00000048c0)=[{&(0x7f0000002740)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/122, 0x7a}, {&(0x7f0000003740)=""/4096, 0x1000}, {&(0x7f0000000540)=""/219, 0xdb}, {&(0x7f0000004740)=""/208, 0xd0}, {&(0x7f0000000640)=""/24, 0x18}, {&(0x7f0000004840)=""/98, 0x62}], 0x7, 0x0) 15:45:50 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) timer_create(0x2, &(0x7f0000001080)={0x0, 0x18, 0x1, @thr={&(0x7f0000000000)="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", &(0x7f0000001000)="a8e3bea8510b1f84c7291b1707c42849990c01765209c8de0b6afc214776468c54b30b6bf8020d83226e9e417c8e98fc5870e157862852af87f81315aba0854658bf188cb8a6a7f67db4936960d89a085802ca33491a549068"}}, &(0x7f00000010c0)=0x0) timer_delete(r1) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e1) 15:45:50 executing program 3: r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000180)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$DRM_IOCTL_AGP_ENABLE(r0, 0x40086432, &(0x7f0000000400)=0x3) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f00000004c0)={0x19c, 0x1e, 0x8, 0x70bd2a, 0x25dfdbfc, {0xe}, [@generic="69522d62a34a735b7423d81c52e2fdb7be5c1177aa763d3990e012f090753aa2fa7eb648b9f9c854a4c6c9b2532c2d166c5dde70369d4c1b4d308470525b7a2b904dec4c0062d7ea1be7e6bfa78c7cd84fd76585d4c8d3e80d547aeadb88e4e3ea220c2eb7b43e9b7284779d0061de372e6fddddddd21c21599de8c33a5eb4602185e68ca778a5f679bf7988cc105e894074a51d943bef25979a1e0e232c2bd08ddbe2f92f935b3a40d7f92ad787422629fe6f", @generic="00558aa1a37ef0d29f6f295c4cac6204c0e00957f8dd72ed136900d07d38416f07574fb018fd1ecae45194669f0a7be22f274c9ea7674221492b3cf909fca45549fb15c36d54b2ffcee237a5bc289de3293c01fd26e47376ea657ab27162d8487a40d45f05f1767ca15234a33c6e92883deb7a029943d1a90e132c55baa27df8beddc08156e752790004503f111cf3f3930054af36022578c01c4ff6cb77678adb", @typed={0x4, 0x8e}, @typed={0x8, 0x48, 0x0, 0x0, @u32}, @typed={0x4, 0x94}, @typed={0x4, 0x41}, @typed={0x4, 0x71}, @typed={0x8, 0x2e, 0x0, 0x0, @fd=r0}, @typed={0x14, 0x92, 0x0, 0x0, @str='bdev:{([vmnet1&\x00'}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r1, &(0x7f0000000440)=@in6={0xa, 0x4e23, 0xfffffffc, @mcast1}, 0x24) writev(r1, &(0x7f0000000380)=[{&(0x7f00000000c0)='\x00', 0x1}, {&(0x7f0000000200)="702ade678837d8637a55879c6d070e6a37cb58cf4348fdce13fe16b403bc5dbb0ff4105232b71b96b19ec02e9034c90f6dd433d517ed37b58d24fccc7e3cdb736dd4b4f77f185f9c713be303a35e7dc313c16a6209b601d317c1c85e89fe3edcc17afa2353d6429689bc85b47988cbdc419fbe971ca4270cc2be0c35c0cb9d7b535407a1296b64ad3fd095bd33133a5ce8ff778dc9ed68964e8afb2cdeef745ab619ec30a6ffa7826b6cfc66ce210780c98ef74acd3e2ea4a95a9a697dc217dbc8f13c9ab6892d0ae76b5ccc1cc6733c63982909d15140a8513970f1a6c3638e64", 0xe1}, {&(0x7f0000000100)="ec64f8022e1b526ea10b505075c59112c7225d499ca63f1733ab85b81906b52db0ccaa482f74e8e08e2ef01804022946bd22aaa27ea28b08ba4df7fd49ee5078e1f379b35afe0897bf10e2a6fe5f7e7269a7ec13011c1a1c81acf6b3d3ea05425d8d99d5e3e5eced78c5be00", 0x6c}, {&(0x7f0000000300)="d15f628ccbfb2600cf1f4138faefb8352136281ffe42e97b4b643c2f55fd61ae862c2d49a59147e9230a96210785f70512659e22fd6939eb65a3f7cd989b4aff685f3b941e92fff5aa0576469dc92dd5ad561b32d5e230c4d2775089943cc5d6423bcba2767232", 0x67}], 0x4) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x200) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r2, &(0x7f0000000180)='.//ile0\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$DRM_IOCTL_GET_UNIQUE(r2, 0xc0106401, &(0x7f00000003c0)={0x31, &(0x7f0000000080)=""/49}) 15:45:50 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000002dc0), 0x0, 0x3ec0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x64802, 0x0) [ 1529.813335] [ 1529.815109] ====================================================== [ 1529.821424] WARNING: possible circular locking dependency detected [ 1529.827738] 4.14.167-syzkaller #0 Not tainted [ 1529.832232] ------------------------------------------------------ [ 1529.838546] syz-executor.5/26909 is trying to acquire lock: [ 1529.844353] (&sig->cred_guard_mutex){+.+.}, at: [] proc_pid_attr_write+0x163/0x290 [ 1529.853742] [ 1529.853742] but task is already holding lock: [ 1529.859711] (&pipe->mutex/1){+.+.}, at: [] pipe_lock+0x63/0x80 [ 1529.867351] [ 1529.867351] which lock already depends on the new lock. [ 1529.867351] [ 1529.875660] [ 1529.875660] the existing dependency chain (in reverse order) is: [ 1529.883265] [ 1529.883265] -> #3 (&pipe->mutex/1){+.+.}: [ 1529.888894] lock_acquire+0x16f/0x430 [ 1529.893216] __mutex_lock+0xe8/0x1470 [ 1529.897525] mutex_lock_nested+0x16/0x20 [ 1529.902092] pipe_lock+0x63/0x80 [ 1529.905961] iter_file_splice_write+0x15e/0xad0 15:45:50 executing program 0: futex(&(0x7f000000cffc), 0x8c, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x80002, 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.ima\x00', &(0x7f0000000080)=@v2={0x3, 0x2, 0xc, 0x1000, 0xf9, "dc64c6fb243db6cbbfa2fdbf72d967763eb743b8a43216c7c45c222994929b96f8cd631a3c167c2c6b5b3e8cf350cfe35ec4945537c82fbd4d2f8ded47f5ab6ae1c7dd52a5116b7da2eca51417b7fbaf62bac728866422a1260a9b12e86aa7e0928aba58c17003c2b2afc913c785b05517da452b705f907e9a51710af4a6dcd28a108ce1a805b699406e40585b1f1f7c735b3124391dacb4865df6c55ecd64ae1ebcd0ce0324b6b54ae461caadea114d3b49ee5594656064881aa8ebd76c6eb6ac687c0b982b70deb04d2c5192c82f8abb5ec4b6512b3d5e03b6ad2266b97e4fab958051b7260f8556109dd5314852134376b6eee30741fd81"}, 0x102, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") futex(&(0x7f000000cffc), 0x85, 0x0, 0x0, &(0x7f0000048000), 0x5000000) [ 1529.911135] SyS_splice+0xd92/0x1430 [ 1529.915353] do_syscall_64+0x1e8/0x640 [ 1529.919756] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1529.925458] [ 1529.925458] -> #2 (sb_writers#4){.+.+}: [ 1529.930918] lock_acquire+0x16f/0x430 [ 1529.935268] __sb_start_write+0x1ae/0x2f0 [ 1529.939952] mnt_want_write+0x3f/0xb0 [ 1529.944307] ovl_want_write+0x76/0xa0 [ 1529.948613] ovl_xattr_set+0x4f/0x270 [ 1529.952958] ovl_posix_acl_xattr_set+0x3f9/0x830 [ 1529.958218] __vfs_setxattr+0xd8/0x130 [ 1529.962607] __vfs_setxattr_noperm+0x102/0x3c0 [ 1529.967826] vfs_setxattr+0xc5/0xf0 [ 1529.972050] setxattr+0x1de/0x350 [ 1529.976018] path_setxattr+0x11f/0x140 [ 1529.980547] SyS_lsetxattr+0x38/0x50 [ 1529.984767] do_syscall_64+0x1e8/0x640 [ 1529.989160] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1529.994851] [ 1529.994851] -> #1 (&ovl_i_mutex_dir_key[depth]){++++}: [ 1530.001604] lock_acquire+0x16f/0x430 [ 1530.005906] down_read+0x3b/0xb0 [ 1530.009774] path_openat+0x191c/0x3f70 [ 1530.014167] do_filp_open+0x18e/0x250 [ 1530.018472] do_open_execat+0xe7/0x4a0 [ 1530.022861] do_execveat_common.isra.0+0x6d5/0x1dd0 [ 1530.028470] SyS_execve+0x39/0x50 [ 1530.032423] do_syscall_64+0x1e8/0x640 [ 1530.036821] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1530.042516] [ 1530.042516] -> #0 (&sig->cred_guard_mutex){+.+.}: [ 1530.048827] __lock_acquire+0x2cb3/0x4620 [ 1530.053523] lock_acquire+0x16f/0x430 [ 1530.057866] __mutex_lock+0xe8/0x1470 [ 1530.062175] mutex_lock_interruptible_nested+0x16/0x20 [ 1530.067956] proc_pid_attr_write+0x163/0x290 [ 1530.072987] __vfs_write+0x105/0x6b0 [ 1530.077260] __kernel_write+0xfc/0x370 [ 1530.081695] write_pipe_buf+0x148/0x1c0 [ 1530.086176] __splice_from_pipe+0x348/0x780 [ 1530.091041] splice_from_pipe+0xf0/0x150 [ 1530.095608] default_file_splice_write+0x3c/0x80 [ 1530.100879] SyS_splice+0xd92/0x1430 [ 1530.105133] do_syscall_64+0x1e8/0x640 [ 1530.109526] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1530.115213] [ 1530.115213] other info that might help us debug this: [ 1530.115213] [ 1530.123451] Chain exists of: [ 1530.123451] &sig->cred_guard_mutex --> sb_writers#4 --> &pipe->mutex/1 [ 1530.123451] [ 1530.134640] Possible unsafe locking scenario: [ 1530.134640] [ 1530.140720] CPU0 CPU1 [ 1530.145367] ---- ---- [ 1530.150018] lock(&pipe->mutex/1); [ 1530.153638] lock(sb_writers#4); [ 1530.159594] lock(&pipe->mutex/1); [ 1530.165721] lock(&sig->cred_guard_mutex); [ 1530.170026] [ 1530.170026] *** DEADLOCK *** [ 1530.170026] [ 1530.176077] 2 locks held by syz-executor.5/26909: [ 1530.180893] #0: (sb_writers#7){.+.+}, at: [] SyS_splice+0xf3a/0x1430 [ 1530.189114] #1: (&pipe->mutex/1){+.+.}, at: [] pipe_lock+0x63/0x80 [ 1530.197204] [ 1530.197204] stack backtrace: [ 1530.201716] CPU: 0 PID: 26909 Comm: syz-executor.5 Not tainted 4.14.167-syzkaller #0 [ 1530.209574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1530.218911] Call Trace: [ 1530.221487] dump_stack+0x142/0x197 [ 1530.225100] ? vprintk_func+0x65/0x159 [ 1530.228968] print_circular_bug.isra.0.cold+0x1cc/0x28f [ 1530.234325] __lock_acquire+0x2cb3/0x4620 [ 1530.238465] ? trace_hardirqs_on_caller+0x400/0x590 [ 1530.243471] ? trace_hardirqs_on+0x10/0x10 [ 1530.247687] ? perf_trace_lock_acquire+0x10d/0x4f0 [ 1530.252610] ? __kernel_write+0xfc/0x370 [ 1530.256655] lock_acquire+0x16f/0x430 [ 1530.260498] ? proc_pid_attr_write+0x163/0x290 [ 1530.265061] ? proc_pid_attr_write+0x163/0x290 [ 1530.269664] __mutex_lock+0xe8/0x1470 [ 1530.273453] ? proc_pid_attr_write+0x163/0x290 [ 1530.278022] ? proc_pid_attr_write+0x163/0x290 [ 1530.282592] ? check_preemption_disabled+0x3c/0x250 [ 1530.287587] ? mutex_trylock+0x1c0/0x1c0 [ 1530.291635] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 1530.297111] ? rcu_read_lock_sched_held+0x110/0x130 [ 1530.302111] ? check_stack_object+0x114/0x160 [ 1530.306610] ? kasan_check_write+0x14/0x20 [ 1530.310829] ? _copy_from_user+0x99/0x110 [ 1530.315015] mutex_lock_interruptible_nested+0x16/0x20 [ 1530.320270] ? mutex_lock_interruptible_nested+0x16/0x20 [ 1530.325702] proc_pid_attr_write+0x163/0x290 [ 1530.330104] __vfs_write+0x105/0x6b0 [ 1530.330115] ? proc_pid_permission+0x240/0x240 [ 1530.330124] ? kernel_read+0x120/0x120 [ 1530.342312] ? __lock_is_held+0xb6/0x140 [ 1530.346364] __kernel_write+0xfc/0x370 [ 1530.350236] write_pipe_buf+0x148/0x1c0 [ 1530.354192] ? do_splice_direct+0x230/0x230 [ 1530.358500] __splice_from_pipe+0x348/0x780 [ 1530.362809] ? do_splice_direct+0x230/0x230 [ 1530.367156] ? do_splice_direct+0x230/0x230 [ 1530.371461] splice_from_pipe+0xf0/0x150 [ 1530.375501] ? splice_shrink_spd+0xb0/0xb0 [ 1530.379713] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 1530.385144] default_file_splice_write+0x3c/0x80 [ 1530.389882] ? generic_splice_sendpage+0x50/0x50 [ 1530.394620] SyS_splice+0xd92/0x1430 [ 1530.398313] ? put_timespec64+0xb4/0x100 [ 1530.402353] ? compat_SyS_vmsplice+0x250/0x250 [ 1530.406913] ? do_syscall_64+0x53/0x640 [ 1530.410862] ? compat_SyS_vmsplice+0x250/0x250 [ 1530.415420] do_syscall_64+0x1e8/0x640 [ 1530.419394] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1530.424230] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1530.429432] RIP: 0033:0x45b349 [ 1530.432602] RSP: 002b:00007f8194ae4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1530.440290] RAX: ffffffffffffffda RBX: 00007f8194ae56d4 RCX: 000000000045b349 [ 1530.447540] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 1530.454792] RBP: 000000000075bf20 R08: 0000000080000001 R09: 0000000000000000 15:45:51 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0be9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) r3 = socket$netlink(0x10, 0x3, 0xa) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x40, r4, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_SEQ={0x6, 0xa, "d8a2"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x54}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:51 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) mmap(&(0x7f000005d000/0x400000)=nil, 0x400000, 0x0, 0x392d6ad36ec2c8b2, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) write$P9_RLERROR(r2, &(0x7f0000000040)={0xa, 0x7, 0x1, {0x1, '/'}}, 0xa) [ 1530.462045] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1530.469307] R13: 0000000000000b3e R14: 00000000004ccc7e R15: 000000000075bf2c 15:45:51 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = semget$private(0x0, 0x5, 0x202) semctl$SETVAL(r1, 0x2, 0x10, &(0x7f0000000000)=0xa6) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) 15:45:51 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) write$binfmt_elf64(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="f0ca04f96e9aec52c7352a3021ee1bbda4c2db596f4414c3f608ac7440820590c8e3e85f92d4039367258567b7d852e187560c04230c04bf00c56823864820442454"], 0xa) close(r2) socket(0x10, 0x3, 0x4) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x2401, 0x0) ioctl$NBD_DISCONNECT(r3, 0xab08) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000002c0)=[@in={0x2, 0x4e27, @remote}, @in6={0xa, 0x4e20, 0xfff, @loopback, 0xfffffffb}, @in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e22, 0x3ff, @ipv4={[], [], @rand_addr=0x5}, 0x1a0a}, @in6={0xa, 0x4e21, 0x7f, @mcast1, 0x80}, @in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x4e20, 0x6d, @loopback, 0x5}, @in={0x2, 0x4e21, @loopback}], 0xc0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:51 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) mmap(&(0x7f000005d000/0x400000)=nil, 0x400000, 0x0, 0x392d6ad36ec2c8b2, 0xffffffffffffffff, 0x0) madvise(&(0x7f00003db000/0x3000)=nil, 0x3000, 0x8) 15:45:51 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) writev(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)="ee", 0xc}], 0x1) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f00) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r3, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f00) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x14, r2, 0xc91add0bf88807dd, 0x0, 0x0, {0x2f}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(0xffffffffffffffff, 0x80045006, &(0x7f0000000300)) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2043108}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x74, r2, 0x800, 0x70bd26, 0x25dfdbfc, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}]}, 0x74}, 0x1, 0x0, 0x0, 0x8004}, 0x1) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 15:45:51 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r3, &(0x7f0000000180)='.//ile0\x00', r3, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$SNDRV_TIMER_IOCTL_STATUS64(r3, 0x80605414, &(0x7f0000000000)) mmap(&(0x7f000005d000/0x400000)=nil, 0x400000, 0x0, 0x392d6ad36ec2c8b2, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) 15:45:51 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) truncate(&(0x7f0000000240)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x8) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f00) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000000)={0x0, 0xfffffff9}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000001c0)={r2, 0x9c, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x7, @local, 0x22}, @in6={0xa, 0x4e64, 0x7, @mcast2, 0x7ee}, @in6={0xa, 0x1, 0xb, @dev={0xfe, 0x80, [], 0x3e}, 0x7}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e21, 0x400, @mcast1, 0xffffffff}, @in6={0xa, 0x4e21, 0x3, @ipv4={[], [], @multicast1}, 0x9}]}, &(0x7f0000000200)=0x10) sendmmsg(r0, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) 15:45:51 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x100000000000015d) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:51 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000440)=[{&(0x7f0000000180)='w', 0x1}, {&(0x7f0000000480)="917e0763fa3ad82f053d71d5debacfdaec268e097a6ad70c411cc4edb7e5e231c785a7eb36bddae867de65e788375e03b5f60f80c33105fd117b4171482e1473047e29c90e41643cdf32521bab2d2161b9250bee5cf1d4a14247e4e23846a76afde2a366f5490e30353bb2e7a3a2211087a9096d4d18e75e0206d4969744ffa4e78cdbd0a18db0a6de46ab9433444469b82663156b16cacd9ef6ad952a3da864bc18b20c364885b6226b1c8b85f17c1a4d8301568454b9d24650e9d13926b0bae141cde6cee62ff3ada4edce85e2b2cf285cf69b86", 0xd5}], 0x2, 0x4) mmap(&(0x7f000005d000/0x400000)=nil, 0x400000, 0x0, 0x392d6ad36ec2c8b2, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) socketpair(0x1a, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r2, 0xc1205531, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) write$evdev(r2, &(0x7f0000000280)=[{{0x77359400}, 0x4, 0x7, 0x8}, {{r3, r4/1000+30000}, 0x15, 0x20, 0x1}], 0x30) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x41, 0x0) getsockname$tipc(r5, &(0x7f0000000300)=@name, &(0x7f0000000340)=0x10) r6 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f0000000540)=ANY=[], &(0x7f0000000400)) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x80, &(0x7f0000000480), 0x0, &(0x7f00000002c0)=""/7, 0x7, 0x7301}, 0x3f00) r7 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r7, 0x84, 0x1b, &(0x7f0000000540)=ANY=[], &(0x7f0000000400)) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r7, 0xc0884123, &(0x7f0000000580)={0x0, "b4cf13d7c099a5326249fa6c6324a4f5a4f52f472a08c3649874f890706ebfdba7e7f519e9539190f02671f3ca31b1221007da4596e5652aeb7995de38b52869", {0x3356, 0x1}}) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000100)={'broute\x00', 0x0, 0x3, 0x25, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000040)=""/37}, &(0x7f00000001c0)=0x78) 15:45:51 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r3, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f00) setsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000000), 0x4) mmap(&(0x7f000005d000/0x400000)=nil, 0x400000, 0x0, 0x392d6ad36ec2c8b2, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) 15:45:51 executing program 0: futex(&(0x7f000000cffc), 0x180, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x8, 0x4, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f00) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f00000000c0)={{0x87, @local, 0x4e24, 0x1, 'wrr\x00', 0x2, 0x4, 0x10}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x2, 0x4, 0xf5, 0x5}}, 0x44) futex(&(0x7f000000cffc), 0x85, 0x0, 0x0, &(0x7f0000048000), 0x5000000) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r2, 0xc1205531, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0xff, 0x7f, 0xffffffffffffffc0, 0x80000000000000, 0xffffffffffffffff, 0x1, 0xffffffffffffffe1, 0x7ff, 0x6, 0x9, 0x20, 0x6, 0x9, 0x0, 0x100], 0x100000, 0x158d00}) 15:45:51 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x1, 0xa00) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) fsetxattr$security_evm(r4, &(0x7f0000000240)='security.evm\x00', &(0x7f00000002c0)=@sha1={0x1, "b7753e1c39074ee417d6c3fb50162def08a858f1"}, 0x15, 0x2) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r5, &(0x7f0000000180)='.//ile0\x00', r5, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$KVM_SET_TSC_KHZ(r5, 0xaea2, 0x4) 15:45:51 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x400, 0x0) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$BLKRAGET(r4, 0x1263, &(0x7f0000000340)) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="40000000000201020000000000000000010000080b000600615b616e64610000060007400003000008000840000000020800094000000fff0800060052415300"], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x44000) 15:45:51 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000002c0)={0x0, 0x1000, "3b17322e738df61307a51adeab7eb12c53c6e34eccded7edb4cd51d730199fde1fbc7ad01608af0b3ef442da3d6d7eb345121fe1e3041f6533ec58221945ef082465df69ac053c28a7a958c70885d7f75f6c934d012dbe097e6e858f0c996b12564bbc98360474b38efbbb23cae98fb3d9b7ceee511365b27e595e42f818bb1d0bb5d1d147025ad88cc76213f2d6ad8d3a16cb97e4f90850b5342ef73a0b8570c0135c8e23a033d3720dcff6b3fed801f583b8edf115be1aa3c7ce7755bf49f156174fafbc3f9d5845a944c29e1d7966ec7c8d3b60f8b4ec210078e88fa2b9869674b07362dbd3b5e4ff12bc2fa233b095cd4740ba30e519ba0f36d6ee0eb8eb7c99c9ef1826ea8156b9c5ab61bc79a2cbf8d28fa7305fb235bb3540ba4825c93d0ba53f838be397b9dff25368a1f0025bcd8f7173ad65b7b48dd6bfa2066d189595a2c8a6c0bfd3eb46e79b031041ed93a7d21d5062929fe5b5a47846f4bf11b341ab20abded5553cc37dad0d502f50505d35c42cfe35fdc80e23cbd5a91bf6035ea3a39ff48ea800ed3662e70ba2d4e32c316a7471844d04b8298fb0854a9bb2692f85e2d40484e9f024c7d7bb9a58b2e24607c0062d821b8913c32eaf9ac86ccb60cbb20c6682f36d3c7d8914b4e8c12b4b5f191eb4ac03374e924a64b84f8d4bbd555829b62a82a823c28ceec858e426903e0bd1c8debb6596ceebb12414a2122fc340093858c3d7c9ae6115ea283c0bbe1b2da09eb5c1a1b5a2e5c1acda6e90be65adfc5a45970bcfe0305600af38aa6bb4df1423c1421f3f4152cb74adc837d2badd3716c2988dd3713691479cfe11fc7581f460bb415e6a30c4c9b17d04c6d546aa47769a45ff9450f7f82012d8979078fe83cc8a228d9aaec6ac2f4f0cca2e4bccdb0a74f20be96038535d6109224087a7be5ac294590f50a8d713c739c396dd70b1992bf75d803114887ca90846b731b2a1de83f36e7f306143cdf1a46f7a7d0c34babb7dd7adddadbe62737f3abab2df17bee5dc52af34964432c09e92fd926273f64073664a4068f7f1f26558e2a14e617a6c5eb0a05dce125f886b41b4b4de3fa53aeb8b5b49cdc4b319985bff20d8fe24dc20914e1e6dab06413f8cbb7b5acbf8e35f066354bf5e279857fbcc1f5d62e87c4510f35e83e9dc9623e91ece8fb3c908c155dc6ee3857c0a7a0f788cebc350d1d1ce63c180ef7cc336c801149b6c76b6750609cced3d6b7d75d6567d7609f9ac557a404f981dc15e1e7dd71304e21a866915e1024fb6ae8a1c9c3ba2f93292bf02c9ca8b67a66cf3f6acebe748679245087cf41361eac4a76e0be0e74003507ee19bd6c725d39930ebb467621088f71a46711b8c8190931d4fd934a67b413283caa1a28387c9b565d223de59a76ec0bfd213b49640391816edd0fd7104e6c1fbf99cf6fbc6b393a45b95ddc57553e6645c83787819686a116ab14875bb0bc1c1c4fe4f8af9678c1fe5f926b12d3f8117495d0fd8332293c86c8becd5990e77fc1aad99aeb877aeb5e414512549148c6b2469d2804c4b42c1bdb4272a9f5791856d5823c71f089a1e1caad3b896241c14a89a7cc5d76a17b9cff5e32eb4392138572ba9ee8d9918da0d333b037ad04f91b7255b70a599ccfa098a31b62727a35ca5a85634cec46477c2ee5719da0ff52a4cd53a011daf426b05f3216cdca823d4a473acb9dd1367c86d44518b2eb69d957e76eccdbf46e672c87b2c65e5dc121aa8e11fe238b1dfa0e87e25008186b6258eb302dbd6e52abf8813aa861701305518e2635c6e530052d983ae6e229d12b8587ace0a83435d9bea13c7906654d7dad2dcb4d9bbe65a0e81e52e55aa75c63f9871dcfd495bdb0c5a9fab06c9eb245d6af992a51c65e2325a691d4e49904fea6365ee01a6aa69140dc6b59f87c380eb1bc4c7a192abd4ad027169056a44917d10c9a2f18bd22133791ccaabb7bb003ca5f7b9ea70ddab57468b703df9ad1c803ebb80694db5326fd6da539965634c94a1aa83de5a8130f0e32858c16af13065b282163aba4bcedf863a7b43dc2ae0c7f9af97bbf09a7279330607bdd9525e99dbad3f9af74990dd9ec3c2c8942863f310bec585eb80a504f09f8e304800627b2f89e46f99e73bfc3c24201e331445b8ee593f698143d8216c73fbf3edaa4639d10df6c44632fb6f5eba6bef71731cf3542f42f3de1d7448505176d7185e6e1e4bee69356a4e04a9e8b58baa96ddf891e03bf563c6ffc1ae2f38f8527589abf7711e90d2de357bd00258db21350a8b49875960b4b5394ec5a9eb8b2bf36d27dd6e933ce009fcbd3f5e4be724102b06567b60539b5918f2072ca0cef7eb39d34a9ab4cfec0d04a518e233600a4c71a9372ed86939e0fc6a168327ff9cadf1ce71fe742ad02a9c42eda50b52f818fc779dbdd54936425569eb8959f31167f83f896276746e260854426e1635bcf6fa8ab6c4849ccd3310249d10dac73c98e3b91a186c2f6a1eb77bae8e2156b658ec5d082386beb333fd5efeea943dfa2e293f928e295a5d18c4aedd148ee0d79b117eebac7ec7d3d7aefa68b3b04599a60e099b6940fd013ac48f3cc37cb75bb32a7816ff6ad1a2e64aeeec270db60d314d038744e217cb48f1be49c1dabe1053a5dec4d9d47bfe26de875554b1c6fdbf47c3e4c45564e3f812d539d8707bf27fcb48fab9236df8c6630b3f248da09299d76a9ec7575d9df634244da6d8a797e30f973d432c59ec52ef360082ff81a99a9c5b0d9c1cda0fe34a1078dd39c7865f2edde936c515bd7cfe49455f0e10bc3daa7988675fc7d5086488e3085405aacd6835e4801b60e54cd15f9acddf542f69137bc97145edea82657ffa7864732c9fe5785ac49b4a8aeb4ea85ed7e7e2c0a789510f8a3ac078fe02dce53866d719250ff0384226e44bf78b3ee2e41c4bb92afaaa5999ec18be1d688b982c7578dac10901195a2fc5e882dfc980dc52ad005c16a5a8a0e4d96a8922462b11482cea217705f1e0844c990f21132abdbdceacba9adfb0d2d099c230214de60fbfa03871dc3b1714064942016c5a258b4e479351eee993e92258d846cb0df4f5af37377092694bdabdbb249cb7e354869f2a1c218f07085bd3ff3821cec039585d21b6b426e6e266fcd18f49320fba636965bbf4870b4b7d73a51fba3a3ea891473221e84300f4e8bbfb20eefb6bb484d64cf1e4a0b3d09950076de9f1ea41cd2ee9a1a0134aa9a1da7ecee7ed7c03227700211e6d5776cfef6c74262e3c4d6929dffbbc1e270fe5d47003cd68ed663f2b783f12649852aeb7950a534bcdadf81ad842b3b5b06fdd35b94bce41069c73f3b211be7b2319858999e4a0fd8d58a1320806ecb91ec92f5e970d68e82031bf4e425b136109931a3be1645ebeff28b99d9469bd38858b2e99a371702b8a0196555946467a78a5581108830791a81ea243aafbbeca05e9febac43f2334b83401abbc68847319ae2ef18804155b01a52f45b07ec20053e1ddd6d22516a92314ea1f5be1fe770aab38cae0c9a11e6ce82bde5ce4863c82c56eeb6b6c82c57a623531d9ccf953e1c84c4558f1541248128d2c6e30007bddf6fcf33c5a5d1ff26c414fd7843dfc20e7c67bea6218f865593de9fe5f50fb578d3ce4ade97370739b5c7ae61ca636a68e6facaa7967554cf6ba45d645a84849196e0f9ce1dcb3e69b8c4c4942552f7e22b4cb203bb14e3c7e00e62052f636d6e8b5d0148533485c643f84f3af903ec8a904efd7960f44cd59979668686a049a4bb9ff86d9f09ca0e3450457be6468921e774657c1d9fcc4b7770e2f1b4f4893d2d41ef98a62d1118470504306116372a5ced8254e62695fc97c2e96dee08a64f9327a8a98252986be62fdf16a19a1b025b176990347648f33d38a57ccbe398f1eb1810de135fc44f7377372add26fd06be8c7c4b1378fb96f126d694a5e629ebb850769f5a93867ceb2b8488fbf088339cafc2b5e281e594bc963068caa24df87e4980b339428b2c9c3a2a5f2e75c47d501e1036724b21904e28e9bcf5fa62a8e496acc9875d20ad0cc0636bbe55b18e269767d85d3c6f4b3c976eeea56a0d920fd329908292e525ef500083fc04eada5d822453ab36f96c68e1f80b0ceb74ead7e74f3a4fefdab0c850fd67acd035648024e09da25bd4998fd1e460b7315d7705430922602df9837ab2a1fed967361195c6e039988f029b3b7785730c02f2da10465e58d36839b1f17bf8aa93fe91e7f3414dfe85624513f5cf667afa39f2ddfbf55e8092ed26625882cd19e4636dee830ba041473de1be63be16e3077d759ce26ad07e7e6efc4bb1acfd6eebd7710cdad0e0b7f50abdd971362360b9013e960109d2241074b32436a25450403b5cf1751c461ad520111dea71f862b2f6921b6c16c4e862d9e144e36bc5a9522416f77d4a15c21abbee597fd3a363736c35115d5a6d0dba5c5323603a1fa2be677889f9ce794b2008f888f48f460583b17dbe989850bb9ab270bf340753b26e67445bd5928ee5afa4af365515c547ec3171cc4589f30e58d0b59d5e547609c3af2378c3b756c44743f5e991dcb7c16246c5b17e970f336e2e5556938aa28e76e88d93191dcfcf5d204dc33b67f28f4add935d87ebbeecf84f6079643b3b5cb1735bda4261716c206f289de34b74721e6da08b206294566e584638b377ee87f94ea7d27a64cfc695146b940eab0aeb6782270434737a631a8d66a409405cd50ac40399ad7a9a069a6967f05cec2f1033d93d481985fa697aa96f948511acc599bffd50a7e851e8516e60d27bb9f07b9f8c1fcf57f3d960659138d974f45caf63fbafc1c110104f8f9fe10fc99092da54fc5fe6c38a81b29dbb3584b31ede648b482eddccb8dec2f6bc42cee81dc449acd11038e2825c1632d041bc06c87173ad9dbf9863ad62403ac81bf224cd332b73d131334bed57d9673c79d539a260a3c64d211333a2eaba7a679abe388b85bf69ebc3657a68480fbf27d1061428cfaf5f8042238278895138dce8f05b48abe29e0efa612d5b93d19a29e29340853a5de9448f365200ac3cd560f381a048eafa8afc18c828d8cd932ecec65d000745aee9f96a2a5582620fc55fa15c636fcb570efd920f8efc0b3ce3c0dbb0732a060383a1c7b043b9c731975c57d342ac04a4431f4cefcb7856d0475daa228f7918ec530088eaa038abde6b136aaa0f986515a09281b0db933430b442b427b22de0e315b1fdd50309a556d2bed91006ab81916b1d639af49191419ce801362abdc7266db3c88d73085466d21129c18faa3be4efd2bf0cf2d0bb2c9c9dfb8c3c446ff192ec5b3b01c53887d25fb56e647fa7e455340bb9bb845e756cfb26cec59c3de416be47a8f8095df7a46e5e362be970abd0c15c97bd7576e231fe6a4744d1526f91c187be18742fdb25800384700846ac94af05fddd51440a5b3ab7970c52c751d3189f31e5e8981ac37c91f1b50286908c7d46f206146f6a5f35d91597aecc8cca6ac7e460f0682b9c0c5ebefbf7ac1461243ce822e8002599ed850b4b31340de2eaf1c7548b3efbe4b2e1b8dd9a54806e7a14cd6e1aabc65bd1b773fa6c6d6fe9b43c3f2b6599de9a2c331113d13e24bc430a075afd731ff042435e31a3712b41587e0b835679f2a00dba7cf02b2956a28d8310715c78ba080aeaaec5ec599fe08fa4802d13103abc8dadc51ccf1ec4fdf2d31eb58377d64317d4788d32e4232c8411d8729a575521bfba0eec99d5eac526e72a2b541f90c7f61a64f"}, &(0x7f0000000080)=0x1008) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000180)={r4, 0x101, 0x2, [0x8001, 0x3]}, &(0x7f00000001c0)=0xc) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:51 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 1531.163724] selinux_nlmsg_perm: 235 callbacks suppressed [ 1531.163736] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=27006 comm=syz-executor.5 [ 1531.184830] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=27006 comm=syz-executor.5 [ 1531.202904] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=27006 comm=syz-executor.5 [ 1531.216438] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=27006 comm=syz-executor.5 [ 1531.258268] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=27006 comm=syz-executor.5 [ 1531.290552] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=27006 comm=syz-executor.5 [ 1531.320526] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=27006 comm=syz-executor.5 [ 1531.340539] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=27006 comm=syz-executor.5 [ 1531.367134] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=27006 comm=syz-executor.5 [ 1531.399021] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=27006 comm=syz-executor.5 15:45:52 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca780000a927b18d01"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:52 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x4, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x10) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:52 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, 0x0) symlinkat(&(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00') bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) writev(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)="ee", 0xc}], 0x1) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 15:45:52 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000000600)=[{{&(0x7f0000000100)=@in={0x2, 0x4e24, @multicast2}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000180)="7cb246e98006abaf708ccdf49f874199eb8762e985180d6dc92724dc1634e87681db345f7adbcac701a7b663c82dab22f3a9e691ff2ce076efe442ec00e4d62fca45e98fcd01ff9c38a1ead17834e9acc1b65f98b8ce422cff480140cf36ec617085da6f3fa3af1564127d6c9fdd61543e67bd32b97e8af69324e895f4949a788054b4514cb0f469959b72e2861493f4a4c999c76b48f9ce813d8263f3d60a98481afc3dc6fd4ca937e2f9e6f8ecb46aa2184627ffc0cc5560edb4babba7ea755fff07ba6a8901ef36be1a39740acb6d73d23cc0548b86f2c88b543849de921f95f63cf1f6", 0xe5}], 0x1, &(0x7f0000000900)=[{0x98, 0x10f, 0x2, "f87a5de489ded69e0d285ce5fc919e0f78ecf618f6a9912f2e0c38d02f8afc83f200467aa6dcaffa5fea3f02b40702f1a24550e4e9073298b401ab787250214e74da43e258606aa2e0c45079e9604cd2a777d65002b036e900dac9ce1c63a3858d0e474f991b1935cff71cc82237754e0ba12a53d29a9e53ae5e6de0ae0b08196811"}, {0x50, 0x104, 0x7, "36bc736c64c57015db187689cb4dbee7263a748f35075bb6523f90fa10eeae82d9f1ead175f5e7c950b83bc466491e648e1aa6d70c07001f14b076"}, {0xe8, 0xf1, 0x4, "6011d070d7a47aca69fffa2910fdd28917a80814dd92d889972e326bcb97ebcce2523a67b443f1d7b5f67b0d63b717d1349da7d2f1a95bb2996c84e6b8790fb584f1a3ad4dfc461df01de44403e5cc2b730b0a63e1327814ed947749508a0de6e7e31ea747b333812271b3be9000e67e22ca643004ffe9b18fdac47ee1089e8371e15d34e3682abd33cf4090543d49236730909f90b49915ea6e0e15f2fe09a7e62a6f7e5d610ebfd73890b938c09cc2c230c492565730e63c79e3ec66156e2b1e2d0b363354296659fe64f2c89d2a59d22189408d810ad6"}], 0x1d0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000740)="298cbb646e1cb3fc7af1c25e48fda7bb19eed84d3e0f0c7520fb3390d70f66ec53d97fc04a74dc4731cf60c9d97cad7ae74fc1f605640a4f24ce7fbb4bab1e00936dfbfa2e1ca8d236a1225e9a7b659919284e454611724c8c0cd4f3bc795a0ceefacb1b9593875c4c73f8c16b45b20ed9fc693fac80363eeb71c8fd64899bd0415a6d9d37bb1ffd177d3a64442b267ce9541d1c87497dab99ba9d3425b100b7210a1dd91cad57a49b4935bc2d3e259c094b2563e3c47ed5e335fc3152c328950b71259766645ac2e8a5ada441aa9467210e42a462968886f0ffe393f6e3ef99dee63a0e3aaf84ef118dc5446b177b34324ec25da707d83d79", 0xf9}], 0x1, &(0x7f0000000840)=ANY=[@ANYBLOB="a000000000000000010100000800000046ad80152f4ea54a51ade802d04352983a1f2dfd3a664829bd1367c73ab5434e897157c349b00d6ba90a37a908c0de3d919a3d4330740739351fc55886fdce7852736861cf1bb11c08eab589bccfad0407d06971326563ff611c8875a240f33576c4db3c04a7797e5b17bdc644c680100be27d841f94a1fc0dd194b4f478d41359acea585cf0259063f2000000000000ec3044496ca463a6d72ef0ef221775632f35478a3f7692f7571a63c83d53"], 0xbe}}], 0x2, 0x7ec0) 15:45:52 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r3, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r3, 0x8907, &(0x7f0000000040)) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0xa) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:52 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:52 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) writev(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)="ee", 0xc}], 0x1) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6=@mcast1, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@loopback}}, &(0x7f0000000200)=0xe8) r3 = socket$kcm(0x29, 0x2, 0x0) close(r3) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x1}) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000440)=0x284) setuid(r5) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0xffffff0f00000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x318, 0x0, 0x0, 0x0, 0x1b0, 0x1b0, 0x280, 0x280, 0x280, 0x280, 0x280, 0x3, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0x190, 0x1b0, 0x0, {}, [@common=@inet=@recent0={{0xf8, 'recent\x00'}, {0x0, 0x0, 0x2, 0x0, 'syz1\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x378) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) r9 = msgget$private(0x0, 0x0) msgsnd(r9, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x0) msgrcv(r9, &(0x7f00000000c0)={0x0, ""/147}, 0x9b, 0xd6d0c418f59fe7d3, 0x0) r10 = msgget$private(0x0, 0x0) msgsnd(r10, 0x0, 0x0, 0x0) msgrcv(r10, &(0x7f00000000c0)={0x0, ""/147}, 0x9b, 0xd6d0c418f59fe7d3, 0x0) fsetxattr$system_posix_acl(r3, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000900)=ANY=[@ANYBLOB="0200000001000c00000000000200", @ANYRES32, @ANYBLOB="8cb5037124333ca70efcc21f9e50e48d8db26b81aa63b10a64527b77c1d953", @ANYRES32=r5, @ANYRESHEX, @ANYRES32, @ANYBLOB="bc75dcf8", @ANYRES32, @ANYPTR=0xfffffffffffffffd, @ANYRES32, @ANYBLOB="040003000000000008000000", @ANYRES32, @ANYBLOB="002200eeef8d73d06444ca074bc976ab2461b8d1a9658004af09cd557592c20138caa1b9f86d06461ea1e5b37e97d358b705381b45ce3ab4bb91a4996d8ebcdb31d86aa1f28a39ed2c368f4a0fd123fd1d948f5b2de69da993164aff581b90e5356eac82d3ae30f425c9d9747f476d390e55aa42c756de87d3850717a49f107ea5216ab50d6e805e1a33ac03b32025bba65e81", @ANYRES32=r7, @ANYBLOB="08000601", @ANYBLOB="080004", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYBLOB="9e146c82399e3e53c06e319c5feea15a7bd01ea19b40955de5b5de3f8800e4f7f4c0e91976e20fda20818053502903632b8a1c072695e150a72530258e239ec7b20ebde0cf91623ef4a3ceac", @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYPTR64=&(0x7f0000000b40)=ANY=[@ANYRESDEC=r6], @ANYPTR64=&(0x7f0000000480)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYRESOCT=r9, @ANYRES32=r10, @ANYPTR, @ANYPTR], @ANYPTR], @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="02000000", @ANYRES32, @ANYBLOB], 0x19, 0x0) r11 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r11, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r11, 0x0, 0x0) fstat(r11, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RSTATu(r1, &(0x7f00000002c0)={0x92, 0x7d, 0x2, {{0x0, 0x74, 0x400, 0x3, {0x8}, 0x40000000, 0x100, 0x4, 0x100000000, 0xb, ')keyringem0', 0x5, 'wlan1', 0xe, '$vboxnet0\\(/^+', 0x23, 'vboxnet0(\\security[ppp0-ppp1keyring'}, 0x9, 'system:\'%', r2, r7, r12}}, 0x92) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) [ 1531.900709] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING 15:45:52 executing program 5: ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000180)={0x7fffffff, 0xc, 0x4, 0x46125080, 0x69, {}, {0x1, 0xc, 0x4, 0x9, 0x1f, 0xd4, "9b3ade71"}, 0x6, 0x6, @fd, 0x802000, 0x0, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000080)=[{&(0x7f0000000340)="ada097e424e1a85b12cbf5436bc3e6e7ad8b267d1c4369df4220f9f93b81930c601739a1ceb220641a5f7fd6b2fdcd6f6a07a9a8efead1da36e9dd413f77361639af3d61b7b1bc5b67eb47b28ffd1c627ad40edfea7ff74b82657aca", 0x5c}], 0x1, 0x0, 0x0, 0x4}], 0x1, 0x4) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000b927b18901"], 0xa) close(r2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x0, @dev, 0x2}, @in6={0xa, 0x0, 0x0, @rand_addr="4977b9464f70adcc3ef87f864dc37bd8"}], 0x38) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff07) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r6 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000400)='/dev/snapshot\x00', 0x180, 0x0) r8 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r8, 0x84, 0x1b, &(0x7f0000000540)=ANY=[], &(0x7f0000000400)) ioctl$DRM_IOCTL_AGP_ALLOC(r8, 0xc0206434, &(0x7f0000000440)={0x9, 0x0, 0x0, 0x3}) ioctl$DRM_IOCTL_SG_FREE(r7, 0x40106439, &(0x7f0000000480)={0x5, r9}) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000003c0)="5eb4852c9044a77e78ddccda78b55c5f", 0x10) r10 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, r6) keyctl$setperm(0x5, r10, 0x202002) r11 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) keyctl$chown(0x4, r10, r5, r12) r13 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r13, 0x202002) keyctl$chown(0x4, r13, 0x0, 0x0) rmdir(&(0x7f0000000500)='./file0\x00') 15:45:52 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) r3 = socket$kcm(0x29, 0x2, 0x0) close(r3) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x1}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) r6 = accept$inet6(r5, &(0x7f0000000400)={0xa, 0x0, 0x0, @local}, &(0x7f0000000440)=0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000003c0)=0xfffffffffffffd42) setuid(r7) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0xffffff0f00000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x318, 0x0, 0x0, 0x0, 0x1b0, 0x1b0, 0x280, 0x280, 0x280, 0x280, 0x280, 0x3, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0x190, 0x1b0, 0x0, {}, [@common=@inet=@recent0={{0xf8, 'recent\x00'}, {0x0, 0x0, 0x2, 0x0, 'syz1\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x378) lstat(&(0x7f0000000380)='./file1\x00', &(0x7f0000000180)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0), &(0x7f00000001c0)=0xc) msgget$private(0x0, 0x0) r9 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) getsockopt$ax25_int(r9, 0x101, 0xa, &(0x7f0000000080), &(0x7f0000000000)=0x4) ioctl$SIOCAX25GETINFOOLD(r9, 0x89e9, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r10 = getpid() sched_setattr(r10, &(0x7f0000000040)={0x30, 0x2, 0x0, 0xfffffffd, 0x5}, 0x0) r11 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r11, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYBLOB="0000000000000000000000000000c6b96b1cd1cde3158fa7f17815335eb83a2c0a076c091969954b6504bfd33f28f1f7e15480988fc88d96226ee479c16539c9ff075c219b9c"], 0x2}}, 0x4040084) fcntl$setpipe(r12, 0x407, 0x0) clock_gettime(0x0, 0x0) 15:45:52 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/tty/drivers\x00', 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f00) ioctl$SIOCGETLINKNAME(r2, 0x89e0, &(0x7f0000000380)) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20048012) r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r4, 0xc0a85352, &(0x7f0000001480)={{0x7, 0x5}, 'port0\x00', 0x2a, 0x100010, 0xfff, 0x4, 0x3f, 0x1, 0xe2, 0x0, 0x7, 0x7}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BLKROTATIONAL(r5, 0x127e, &(0x7f0000000000)) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r7, 0x84, 0x12, &(0x7f0000000280)=0x4, 0x4) connect$llc(r6, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) r8 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r8, 0x84, 0x1b, &(0x7f0000000540)=ANY=[], &(0x7f0000000400)) ioctl$RNDZAPENTCNT(r8, 0x5204, &(0x7f0000000040)=0x4) accept(r6, 0x0, 0x0) mmap(&(0x7f000005d000/0x400000)=nil, 0x400000, 0x3000007, 0x392d6ad36ec2c8b2, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) r9 = openat$vsock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vsock\x00', 0x800, 0x0) fsetxattr$trusted_overlay_upper(r9, &(0x7f0000000300)='trusted.overlay.upper\x00', &(0x7f0000000440)={0x0, 0xfb, 0x1015, 0x6, 0x8, "4deeb210d2b2045904b637b22ac619da", "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"}, 0x1015, 0x2) 15:45:52 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x408802, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x80001, 0x0) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40045000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="100005000000fedbdf25040000002300010073656c6662646576776c616e3c73656c66766d6e657430276d643573756d000008000c0044ce4215080002000c000000000008000700ac1e0001000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x44008) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x74, r2, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '@\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x3b}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004800}, 0x2402c043) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r6, 0x0, 0x0) ioctl$VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000080)={0x2, 0x6, 0x4, 0x10000, 0x3, {r4, r5/1000+30000}, {0x5, 0x0, 0x80, 0x2, 0xff, 0x3, "bad7342a"}, 0x8000, 0x1, @planes=&(0x7f0000000040)={0x3f, 0x8001, @mem_offset=0xffff0001, 0x6a3}, 0x8, 0x0, r6}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$NL80211_CMD_SET_REG(r7, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="42400000ad48de3bc4714a360f74498fabfb3de6146fccfbf445fb58726e7b4497002e4c3f0cd9fe4b269f2806430b8122848bfd9695baf6b532c3cc0071928b45669c6d7bd65eca153278d43d1d55e1e2a06cb498c5724c53fdf89999f4c5da9c1975", @ANYRES16=r8, @ANYBLOB="200025bd7000ffdbdf251a00000008009a00010000000800010002000000"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r9, 0x89e1) 15:45:52 executing program 0: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x4000, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000080)) futex(&(0x7f000000cffc), 0x180, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x5, 0x2, 0x9) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") futex(&(0x7f000000cffc), 0x85, 0x0, 0x0, &(0x7f0000048000), 0x5000000) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000000)=0x5, 0x4) r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000540)=ANY=[], &(0x7f0000000400)) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000200)={0xb, @pix={0x0, 0x6, 0x32314d56, 0x9, 0x7, 0x8000, 0x5, 0xe3, 0x1, 0x4, 0x0, 0x7}}) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x200000, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000100)={0x6, 0x1, 0x6, 0x7fffffff, 0x1000}, 0x14) 15:45:52 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'/10], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:53 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$sndseq(r0, &(0x7f0000000180)=[{0x9, 0x3f, 0x20, 0xdf, @tick=0x2, {0x4, 0x1}, {0x0, 0x80}, @control={0x5, 0x3, 0xfffffffe}}, {0x80, 0xc5, 0x8, 0x5, @tick=0x9, {0x3f, 0x1}, {0x40, 0x1}, @raw8={"a9df2ed1784a48b3e4176be4"}}, {0x0, 0x4, 0x4, 0x3, @time={0x1, 0xf2}, {0x1, 0x4}, {0x9, 0xf0}, @raw8={"5cdb13c398b326544ed32963"}}, {0x40, 0x1, 0x77, 0x1, @time={0x3f, 0xff}, {0x9, 0x8c}, {0xed, 0x3}, @result={0x4, 0x80000001}}], 0x70) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080)) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x3) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:53 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x3d) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:53 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r3, 0x0, 0x0) r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r4, &(0x7f0000000180)='.//ile0\x00', r4, &(0x7f00000007c0)='./file0/f.le.\x00') r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000080)={0x4, r5}) writev(r6, &(0x7f0000000200), 0x0) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:53 executing program 0: futex(&(0x7f000000cffc), 0x180, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000000140), 0x80, 0x0, &(0x7f0000000180)={0x77359400}, &(0x7f00000001c0), 0x0) getresuid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)) socket(0x10, 0x80002, 0x0) futex(&(0x7f000000cffc), 0x85, 0x0, 0x0, &(0x7f0000000000), 0x4ffffff) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x42) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, r4}, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000180)={0x2, 0x6, 0x0, 0xffffffff, r4}, 0x10) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000002c0)={r4, 0x7}, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0x6]}, &(0x7f0000000080), &(0x7f0000000100), 0x8) 15:45:53 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="f08bdbca65a927b1c2d8f919bcdde58901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r3, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f00) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000f40)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r5, &(0x7f0000000180)='.//ile0\x00', r5, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$PPPIOCSDEBUG(r5, 0x40047440, &(0x7f0000000440)=0x9) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r6, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f00) r8 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f00000009c0)=@nat={'nat\x00', 0x1b, 0x5, 0x4e8, 0x330, 0xf0, 0x238, 0x0, 0x330, 0x418, 0x418, 0x418, 0x418, 0x418, 0x5, &(0x7f00000003c0), {[{{@ipv6={@empty, @loopback, [0xffffff00, 0xffffffff, 0xffffffff, 0xffffff00], [0xff, 0xff000000, 0xff000000, 0xff], 'veth1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x2c, 0x2, 0x1, 0x48}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x10, @ipv4=@loopback, @ipv4=@empty, @icmp_id=0x68, @port=0x4e23}}}, {{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@hl={{0x28, 'hl\x00'}, {0x1}}, @common=@ah={{0x30, 'ah\x00'}, {[0x4d6, 0x4d4], 0x3, 0x5}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@remote, @ipv6=@remote, @port=0x4e23, @icmp_id=0x68}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0xe, '/\b'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @rand_addr="9035cb0e1fd1932868fac3b19b035c32", [0xffff00, 0x0, 0xffffffff, 0xffffffff], [0xff, 0x7f, 0xff, 0xffffff00], 'veth1_to_bond\x00', 'bond_slave_1\x00', {}, {0xff}, 0x3c, 0x3, 0x3, 0x10}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x7f, 0x1, "c97d953b18bfb92369679de1d3bf289d95ff4c3483e97e7a799fd25d77d1"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x548) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0xcc, r4, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10001}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr="5be90ae499af6594e87f83dd1d96798b"}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'tunl0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x51f}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x803}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}]}, 0xcc}, 0x1, 0x0, 0x0, 0x10}, 0x4) close(r7) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 1532.703171] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING 15:45:53 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) writev(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)="ee", 0xc}], 0x1) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') r2 = openat(r1, &(0x7f0000000080)='./file0\x00', 0x44000, 0x140) bind$pptp(r2, &(0x7f0000000100)={0x18, 0x2, {0x2, @dev={0xac, 0x14, 0x14, 0x2a}}}, 0x1e) 15:45:53 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) recvmmsg(r0, &(0x7f0000000700)=[{{&(0x7f0000000200)=@nl=@proc, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000280)=""/169, 0xa9}, {&(0x7f0000000340)=""/210, 0xd2}, {&(0x7f0000000440)=""/198, 0xc6}, {&(0x7f0000000540)=""/24, 0x18}], 0x4, &(0x7f0000000600)=""/237, 0xed}, 0xfffff5c0}], 0x1, 0x11080, &(0x7f0000000740)) writev(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)="ee", 0xc}], 0x1) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x11b140, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000000100)=""/54, &(0x7f0000000140)=0x36) 15:45:53 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$KDDISABIO(r1, 0x4b37) ioctl$sock_proto_private(r0, 0x89ed, &(0x7f0000000000)="e0bb110ced95900f6d3d2ad6f40e1e84785c7c9fe8f5fdf163b798d9faece3b6644e2063875a74d8eb5d1d95b355ffae83e737a530af1e1a3d34e683415e3b9755edaea1cef90778ceddb1d7f6924b22af384ec1d177") ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) 15:45:53 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) writev(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)="ee", 0xc}], 0x1) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) 15:45:53 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r3, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f00000000c0)=r6) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_to_bond\x00', r6}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) mmap(&(0x7f000005d000/0x400000)=nil, 0x400000, 0x0, 0x392d6ad36ec2c8b2, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r7, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f00) setsockopt$SO_RDS_TRANSPORT(r7, 0x114, 0x8, &(0x7f0000000040)=0xffffffffffffffff, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) 15:45:53 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000080)={0x8, 'veth1_to_bridge\x00', {'ip6gretap0\x00'}, 0xf801}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) writev(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)="ee", 0xc}], 0x1) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 15:45:53 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r1, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) writev(r1, &(0x7f0000000580)=[{&(0x7f00000000c0)="ee", 0xc}], 0x1) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) 15:45:54 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000200)={0x2, {{0xa, 0x4e23, 0x0, @rand_addr="bc3890ba7287cbe15a33d3293e7d34eb", 0xfffffbf0}}}, 0x88) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) writev(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)="ee", 0xc}], 0x1) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 15:45:54 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f00) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x42) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, r5}, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000180)={0x2, 0x6, 0x0, 0xffffffff, r5}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r6, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f00) r7 = creat(&(0x7f0000000140)='./file0\x00', 0x42) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000300)=ANY=[@ANYBLOB="dd000000595ad762e6f8337ffcc33c21c99b229708cd6c8a3f00006a010d99bca9243a3700cb0b7800000000000000000000000400ce549387780dfadbe1cb", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, r10}, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000180)={0x2, 0x6, 0x0, 0xffffffff, r10}, 0x10) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f0000000100)={r10, 0x7fff}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000180)={r5, 0x100, 0x5, 0xfff9, 0x3f, 0x7, 0x8, 0xffffffc1, {r11, @in={{0x2, 0x4e22, @loopback}}, 0xfffffffe, 0x0, 0x3f, 0x8784, 0x30e7}}, &(0x7f0000000240)=0xb0) 15:45:54 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) writev(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)="ee", 0xc}], 0x1) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f00) getsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000000080)=0x3f38ef57, &(0x7f0000000100)=0x4) 15:45:54 executing program 0: openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) futex(&(0x7f000000cffc), 0x180, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") futex(&(0x7f000000cffc), 0x85, 0x0, 0x0, &(0x7f0000048000), 0x5000000) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/avc/cache_stats\x00', 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000240)={&(0x7f00000002c0)=@ax25, 0x80, &(0x7f0000000000)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, &(0x7f00000001c0)=""/4, 0x4, 0x7301}, 0x3f02) r2 = creat(0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB='$', @ANYRES16=r3, @ANYBLOB="6fa72cbd7000fbdbdf25140000b9fdddf0bca8e98661e1b75ecd009400ea204c000580f9fd028075a08fd82ca3bcd5d59f7a0c76d66fbc1282d7f6e66d117fc0aa5126c66bd5610000d9b4de64fbf0ff11e50b66ebdc4724061e334470308d9cf902549c9ebd04b3"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x55) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r3, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4000) 15:45:54 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-control\x00', 0x206000, 0x0) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x8}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4801) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:54 executing program 5: r0 = dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000180)={0x401, 0x6, 0x6, 0xcf9}, 0x8) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300)='nl80211\x00') sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r1, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x4}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x95}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x10001}}]}, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x8804) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="438d9d3b466d8f0013e3"], 0xa) bind$vsock_dgram(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710, @hyper}, 0x10) close(r4) r5 = syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0x81, 0x10000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000240)={{0x3, 0x0, 0x7fff, 0x3, 0x3f}}) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r2, 0x0, r4, 0x0, 0x80000001, 0x0) 15:45:54 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x8) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:54 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) r3 = eventfd2(0x0, 0x80000) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:54 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000640)={'broute\x00', 0x0, 0x4, 0xce, [], 0x4, &(0x7f0000000500)=[{}, {}, {}, {}], &(0x7f0000000540)=""/206}, &(0x7f00000006c0)=0x78) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r2, 0xc1205531, 0x0) read$fb(r2, &(0x7f0000000700)=""/87, 0x57) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000800)='/selinux/commit_pending_bools\x00', 0x1, 0x0) connect$bt_rfcomm(r3, &(0x7f0000000840)={0x1f, @any, 0x4}, 0xa) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) socketpair(0x1e, 0x6, 0x0, &(0x7f00000004c0)={0x0, 0x0}) recvmsg$kcm(r6, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f00) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r6, 0x29, 0x41, &(0x7f0000000440)={'filter\x00', 0x2, [{}, {}]}, 0x48) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x40, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000380)={0xffc3373d331d26a5, 0x2, 0x401, r4, 0x0, &(0x7f0000000340)={0x980928, 0x7, [], @value=0x200}}) ioctl$RNDADDTOENTCNT(r8, 0x40045201, &(0x7f00000003c0)=0xff) connect$inet6(r5, &(0x7f0000000400)={0xa, 0x4e22, 0x5e, @empty, 0x6}, 0x1c) sendmmsg$unix(r7, &(0x7f00000002c0)=[{&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000040)="9bf57a3b8de2bce96b344863ad4e", 0xe}, {&(0x7f00000001c0)="a29c6800000622142a424a58d0a13d6d992968dca25d4c9feb7323748ed588c9c58fd181d183263563fd6205d537ae0cea62c43b51a81520f6b3c822e8614eb0362d7e31e5ed06946377c375ecb04e4af608f0de8282caeb7c3a72797493652467af5facdcc78941b571c89cadd04c9baaca40d5a12c453ee5b17e4019c1f8abfc032c46cc45cb47e6a70bb6510e", 0x8e}], 0x2, 0x0, 0x0, 0x840}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) 15:45:54 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="7c272563d2a8bdd3000085d751"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x25800, 0x0) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x2, 0x0) ioctl$SOUND_PCM_READ_RATE(r1, 0x80045002, &(0x7f0000000400)) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r4, 0xc034564b, &(0x7f0000000080)={0x15, 0x34363248, 0x0, 0x3, 0x0, @stepwise={{0x0, 0x2}, {0x1cb63325, 0x7}, {0x8, 0x5}}}) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000280)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES16=r5, @ANYBLOB="0c9b25bd7000fedbdf25010000000800010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x5}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0xd8, r5, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x7c, 0xc, 0x0, 0x1, [{0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf82b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa29f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3cc91ae1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc838}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2abfe258}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2ec81beb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x63fa322c}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x56a7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x480456a3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe9fb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x383224bb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6b425e3e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2e051aeb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf77a}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0xd8}, 0x1, 0x0, 0x0, 0x85}, 0x90) 15:45:54 executing program 4: r0 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000540)=ANY=[], &(0x7f0000000400)) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f0000000000)={0x2, 0x81}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r3, 0x0, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r4, 0x0, 0x0) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) mmap(&(0x7f000005d000/0x400000)=nil, 0x400000, 0x0, 0x392d6ad36ec2c8b2, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) 15:45:54 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f00000004c0)={0x9f0000, 0x9c7, 0x80, 0xffffffffffffffff, 0x0, &(0x7f0000000480)={0x9b0953, 0x8001, [], @p_u32=&(0x7f0000000440)=0xb3}}) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x42) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, r6}, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000180)={0x2, 0x6, 0x0, 0xffffffff, r6}, 0x10) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000500)={r6, 0x49, "64c301abc93b1208c9585f5c7f3a45f6088cbeed873001941777f86f5212d9246462b312062afb6f5de9029639e20bf9baf2cdce0ed4f5ef0e09466a0279d9d778076ab32f4a0ea814"}, &(0x7f00000005c0)=0x51) writev(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)="ee", 0xc}], 0x1) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) r7 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r7, 0x84, 0x1b, &(0x7f0000000540)=ANY=[], &(0x7f0000000400)) ioctl$SG_SET_KEEP_ORPHAN(r7, 0x2287, &(0x7f0000000080)=0x8) 15:45:54 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:55 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer2\x00', 0x80, 0x0) bind$unix(r1, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xfffffffffffffcef) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, './/ile0\x00'}, 0x6e) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/autofs\x00', 0x200, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000280)=0xffffffff) r3 = open(&(0x7f0000000680)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x8000, 0x140) renameat(r3, &(0x7f0000000180)='.//ile0\x00', r3, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f0000000440)) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, 0x0) socketpair(0x2, 0xa, 0x8, &(0x7f0000000640)={0x0, 0x0}) recvmsg$kcm(r4, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f00) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r5, 0x0, 0x0) flistxattr(r5, &(0x7f0000000340)=""/141, 0x8d) read$alg(r4, &(0x7f0000000000)=""/108, 0x6c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x52649, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1}, 0x0, 0xf, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) r7 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r8, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r8, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000580)={'batadv0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000005c0)={'netpci0\x00', r9}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000180)=0x81, 0x4) r10 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r10, 0x84, 0x1b, &(0x7f0000000540)=ANY=[], &(0x7f0000000400)) ioctl$DRM_IOCTL_AGP_ALLOC(r10, 0xc0206434, &(0x7f00000002c0)={0x9, 0x0, 0x10000, 0x1f}) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000000300)={0x8, r11, 0x10000, 0xffffffffffffffca}) 15:45:55 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fcntl$setsig(r1, 0xa, 0x1d) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000540)=ANY=[], &(0x7f0000000400)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r4, 0x4008af23, &(0x7f0000000040)={0x1, 0x3}) r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x3, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000001480)='/dev/null\x00', 0x4c00, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001b00)='IPVS\x00') io_setup(0xab9, &(0x7f0000001880)=0x0) ioctl$TIOCSERGETLSR(r5, 0x5459, &(0x7f00000002c0)) io_cancel(r8, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x7, 0x0, r5, &(0x7f00000018c0)="d9419609", 0x4, 0x7fff, 0x0, 0x1, r6}, &(0x7f0000001940)) sendmsg$IPVS_CMD_GET_DEST(r6, &(0x7f00000016c0)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001680)={&(0x7f0000000300)=ANY=[@ANYBLOB="82e4b13392ded97d29216b08b49c0062dab0aeadcca5b9b3fcf56542a1f984331732ff0171833309d2fc6f309c7ebcdfb0ff34234e460ae6a74ae75fb8d26355f56751cbfcbd10eaa555295976c52b8000ee1c40ea596797bb92caa0516508df6d58e6ca78c97604122303d2b00600ea2495463e102098db0252a65ff5bd7249abbce6e7ab83cf8dd20e7fd975845cb89492d3318e1e908d9dffbf5a1ebee2103610df3f86da0f379e1870d0f8", @ANYRES16=r7, @ANYBLOB="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"], 0x60}, 0x1, 0x0, 0x0, 0x55}, 0x20000000) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000580)={0xc4, r7, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvtap0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x1}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x84}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x79}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @broadcast}}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x36}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2385}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20040}, 0x4) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x54, r7, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x419df2d3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x20}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x54}}, 0x0) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r9, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r9, 0x0, 0x0) fsetxattr$security_ima(r9, &(0x7f0000000000)='security.ima\x00', &(0x7f00000001c0)=@v2={0x3, 0x2, 0x12, 0x7c91, 0x8a, "75111b10c6c1ffd815a0d9236333c10d2a9997efebb9902422ad0ad2d27ed667a0eded0c8bc69d76be5bb45f89b2fb97904aa5bb2283865889fb8cd70740bb16e866ad8eb05135446af127cc66bd8eb048be5fc2a00c0f7307b65c3a4fe3654f436371001fecdcafc6098a231a3aac5a6bf782b0ffbe351db096e07376de8c9f40c38e932ec78a8a580d"}, 0x93, 0x0) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x2080, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r10, 0x8905, &(0x7f0000000140)) r11 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r11, 0xc1205531, 0x0) ioctl$BLKREPORTZONE(r11, 0xc0101282, &(0x7f0000000280)={0x4729}) mmap(&(0x7f000005d000/0x400000)=nil, 0x400000, 0x0, 0x392d6ad36ec2c8b2, 0xffffffffffffffff, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000a00)=ANY=[@ANYBLOB="050000000000000002004e227f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000a00000002004e21ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e22ac1e010100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e237f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e21ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e230000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e22ac14143300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e20e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e237f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e22e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002044e227f0000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003b8b94bee602"], 0x590) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) [ 1534.257681] audit: type=1804 audit(1579880755.027:283): pid=27197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir926441775/syzkaller.5vQr5P/2226/file0" dev="sda1" ino=16617 res=1 15:45:55 executing program 0: futex(&(0x7f000000cffc), 0x180, 0x0, 0x0, 0x0, 0x0) socket(0x1f, 0x2, 0x0) futex(&(0x7f000000cffc), 0x85, 0x0, 0x0, &(0x7f0000048000), 0x5000000) 15:45:55 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r3, 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000180)=0xc) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:55 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000140)=0x9, 0x4) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) writev(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)="ee", 0xc}], 0x1) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x302, 0x0, 0x0, 0x9, 0x0, @link_local}, 0x10) accept(r1, 0x0, 0x0) fsetxattr$security_capability(r1, &(0x7f0000000080)='security.capability\x00', &(0x7f0000000100)=@v1={0x1000000, [{0x6, 0x6}]}, 0xc, 0x2) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 15:45:55 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000000)) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x2000) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x6) mmap(&(0x7f000005d000/0x400000)=nil, 0x400000, 0x0, 0x392d6ad36ec2c8b2, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) 15:45:55 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x97, 0x80084, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) 15:45:55 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) mmap(&(0x7f000005d000/0x400000)=nil, 0x400000, 0x0, 0x392d6ad36ec2c8b2, 0xffffffffffffffff, 0x0) r4 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000540)=ANY=[], &(0x7f0000000400)) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r5, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f00) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xac, 0x1, 0x1, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x8}, @CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x36}}}}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_SEQ_ADJ_REPLY={0x54, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1e6}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xfd}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xffff}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xffffffff}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8489}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8116}]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r6 = open$dir(&(0x7f0000000000)='./file0\x00', 0x41, 0x80) fanotify_mark(r4, 0x41, 0x9, r6, &(0x7f0000000040)='./file0\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f0000000440)=[{0xd0, 0x111, 0x7, "914f4c5acfcb3e530fdd02c1994a199b0f0d7c7b91e93c007489269cf1dac38c1c77990c43645788cb56dcf5c40baa3e9e968e77d559b1ac3eae15e2660cb0a66501dcc8cdeb47bd1ead4762b1c103563f042f34e44ab6c47aebef8280d168708825329e2986199d95b91a4d4ff50e5f945584f9ae106f99f62ec878c87e930dacdd6821632aabaa0bf1fa04f226c039814c2fcf49c412b8bc811d757a291c3a1bb39776afd3f5fe89d5e7cd08ece4bca272a28698a8c596f32e550b3011"}, {0xc0, 0x115, 0xffffffff, "81f96772a0dd3060fe454ff53035103aea0321f9da91631ef6fe8290d5513dee0df0a84dd87e5b5cf91439939d00903dc651de6fd35162cde77f74b0220e9fcb37fd03318dd2d574edf575427e45d29db13b7532f85a042db01874898e065fd2729d692722da65bfb51ee6ef179427480df926093e43492d391590b6009c22f909415acb72757a1697fc572cd45afec7a03da437f524301cbfb024ff03a30bc216bfd54902a5b69dedeac2b411867b82"}], 0x190}, 0x20040000) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f00000001c0)={0x8, 0xffff, 0x4, 0xf21, 0x7, 0x25eb, 0x7fffffff, 0x5, 0x0}, &(0x7f0000000200)=0x20) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000240)={r8}, 0x8) 15:45:55 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000180)=&(0x7f0000000080)) 15:45:55 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8004, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="ae69cfa54579e54f0600000000000000655832ff0f0000b1101b1d060b", 0x1d}], 0x1) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x42080, 0x0) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x42) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, r5}, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000180)={0x2, 0x6, 0x0, 0xffffffff, r5}, 0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000140)={r5, @in={{0x2, 0x4e20, @loopback}}, 0xb484, 0x8e8, 0x2, 0x18, 0xe6}, &(0x7f0000000200)=0x98) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000240)=@assoc_value={r6, 0x20}, 0x8) 15:45:55 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ca9a0000a927b18901"], 0xa) close(r2) socket(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) r3 = openat$cgroup_ro(r1, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$SG_GET_LOW_DMA(r3, 0x227a, &(0x7f0000000180)) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:55 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$VIDIOC_DBG_G_REGISTER(r1, 0xc0385650, &(0x7f0000000080)={{0x0, @addr=0x5}, 0x8, 0x4, 0x9}) writev(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)="ee", 0xc}], 0x1) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 15:45:55 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f00) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x42) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, r5}, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000180)={0x2, 0x6, 0x0, 0xffffffff, r5}, 0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000100)={r5, @in6={{0xa, 0x4e23, 0x8, @remote, 0x2}}}, &(0x7f0000000000)=0x84) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) 15:45:56 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) writev(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)="ee", 0xc}], 0x1) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x10100, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 15:45:56 executing program 0: futex(&(0x7f000000cffc), 0x180, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") futex(&(0x7f000000cffc), 0x85, 0x0, 0x0, &(0x7f0000048000), 0x5000000) socketpair(0x11, 0x3, 0xfd, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f00) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, 0x0, 0x0) 15:45:56 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="88c700001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="f00000a927b189010000"], 0xa) close(r2) socket(0x10, 0x3, 0x4) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r3, 0x0, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r4, 0x0, 0x0) writev(r4, &(0x7f0000000280)=[{&(0x7f00000002c0)="1608cbc458631fe5e81d7f934619bb33e1b080151aea68891af40e5b7bdb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d2498c57a46d53226b9c4f5ec8a96b9766bdcdfd1793977ee143304237bc5bb", 0x63}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:56 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) writev(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)="ee", 0xc}], 0x1) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000080)='net/rfcomm\x00') socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB="c000000057b1605819e4d1655a8cee1fcde4e3d8d13f356d96d8c79599708da1c70bc2f954f4e122b82b6a3cdd7f68885653d4f4c49cca26cc4b392dbbb3d99ee01f92886452b2cf3dd38d6b6266b2f230d50b4e92b36cb98dbcd368598767d0b63334ca1f903938b2a8e81498ebc9b1f70796a9cffe279d7ac23ca9521dc8c12a4b026dd4ead78877ea2fd66776960ba5872d68c5f201a0f80300000000000000c6eb2358c1a6fb1553b286e20e8772ad4a95273c560f12c5a97a76ff64c89cba0bfd03"], &(0x7f0000000100)=0xc8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000140)={0xffff, 0x8, 0x0, 0x100, r4}, 0x10) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = creat(&(0x7f0000000140)='./file0\x00', 0x42) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, r9}, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000180)={0x2, 0x6, 0x0, 0xffffffff, r9}, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000300)={0xffff, 0xff39, 0x8205, 0x2, 0x4, 0x53f, 0x0, 0x7, r9}, 0x20) 15:45:56 executing program 2: ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000000)={0x80000001, 0x1, 0x4, 0x8, 0x10000, {0x77359400}, {0x4, 0x0, 0x7f, 0x20, 0x81, 0x7f, "383771f6"}, 0xffffff01, 0x2, @offset=0x3f, 0x1f8, 0x0, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000003c0)={0x100, 0x0, 0x10000, 0x200}) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f0000000400)={r3, 0x6}) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="28008000", @ANYRES16=r2, @ANYBLOB="3f02000000000000000001000000000000000f000000000c001473797a3000000000"], 0x28}, 0x1, 0xfffffff0}, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x427, 0x70bd25, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x4) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r5, &(0x7f0000000180)='.//ile0\x00', r5, &(0x7f00000007c0)='./file0/f.le.\x00') r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r6, 0xc1205531, 0x0) r7 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r7, &(0x7f0000000180)='.//ile0\x00', r7, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r7, 0xc06c4124, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000380)={r0, 0xb1, 0x7, r6}) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)={0xb0, 0x1, 0x7, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xd5}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8001}]}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3a91bd16}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_MASK={0xfffffffffffffd52, 0x1, 0x1, 0x0, 0x80000001}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x400}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x5}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x7de}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0xb0}, 0x1, 0x0, 0x0, 0x50}, 0x40800) ioctl$sock_rose_SIOCRSCLRRT(r4, 0x89e1) 15:45:56 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0x0) close(r2) socket(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="1608cbc458631fe5e81d7f934619bb33e1b080151adb64fad34e6cfbb010675d35a6de9396a194cb000f17971377858c14ab983f7e4c98ef7a1f078d8592ea8a96b9766bc39cd179", 0x48}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:45:56 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='pids.current\x00', 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r3, 0x0, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept(r4, 0x0, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) r6 = accept(r5, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000740)=ANY=[@ANYPTR=&(0x7f0000000600)=ANY=[@ANYRES16=r1, @ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYRES16=r1, @ANYRESDEC=r0], @ANYRES64=r1, @ANYBLOB="61498a2da01628dd422f9be54a5a0e0bb6b6af3084b8ef1756a9dc149692a79b3a2f3cea6a14c434c4b4634218de160d75fb4556582e01ebcd5a65c8ce0e8750cb97046c1b68cd1070d35da33331108371b9f9b09eba84d53a1eba49038724f9861999ef5d846f197b9a5c433b67870ea36a17b9755448a581305449586dffcdcc139936bb64fc8dd44e64ea6b2b973938f99bdf7a2b67fb44200d6dfb0472be3ea1ad3b11f21f4ef9e1089a05058dc6e682b7d2ca8c15224b44921e41e30ef1008da381813fdbfbf57fb4218f03a15d78a4a38bda3f8f43d40c8013894448a198c5d504e1868ea66ad0920b0a4df7f22882dbfb3a"], @ANYRES32=r3, @ANYBLOB="ad7c9d3daae085161f62f3cdbee759274af10271c69aa34f06d210e5caef0a83adcaa299d119dea5ffa14523b03c1af4b68bb822e3731006fb3b3f9665d984d5f593e63c49bab9637cd187f637bd8aa7b379d985a364343a5cf08cbf34b013d269b8734eba82a8e5310dab228e72", @ANYRES16=r4, @ANYRESOCT=r5, @ANYBLOB="61948b09cac20049c7e4ee782362c27a444056b6a50294406852a12aafe33d9236d052bd1f241c439bdd395d0807f017dba68a163d853bb15e49d4d6198140fd7ca91a514a114cd169f8be78d75788237ff7cef2292b7de18f1c4ca72bd58b00f8cf78c0ac0d078169168183c45323d14a8475d2dd7b2cd551541ed1c581fb06282abf00502d897378d4822a638cc9efe71472b33da97156b941e9eb562497350fbb13af1f4b9d171f5a69485af2284b5a0b3be31ae06a236853f0addb29206391ebbfad3f270cc48bb6b862", @ANYRES32, @ANYRESOCT=r6], &(0x7f0000000400)=0x8) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f00000003c0)={0x2, 0x10000}) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) r7 = open(&(0x7f0000000000)='.\x00', 0x280003, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r7, 0xc1205531, 0x0) ioctl$USBDEVFS_DISCARDURB(r7,