2b7e9c6bc3469c3e39e8c2ea6da1838dde5f2f6e26b7928b51eaa613337aeaeec3b2a47908829b28961f31c4179f7d1aac7760d106c4fcead98c02cd83d417ef31237ad0cdde713bbe5d07cbb4d4899a4a1b150c36b0d5d71656f5985a869aa26971426e1bfbd7cde7b8c1fbb40b58445b864611f43c83d0f26526a6d2b3273c41fdbd46e5e78960f413cef7610eef4618736c1e58ae82ef25e70aa5e4773891cf5c94783b04f3d1b3815ec1ebaf9aaf55b27d6ca9c8ed61ef29e734de2c77a949cac06bb6b046b6539a28418017d3430a85615971b7834b795a5c3d4501dd658907ad36dea6756011ebaaa13ad25b6b3cfc8b173d22bae651d7c5b9db1e5cb467af0d7652e64d5a826dbd3939d20b73642ca33796f7db166f0ee8bc089fc1e8f5f47b27b2182f33b2585c058cbdfaec1ebc99c0d7edfdfeea5a1c1671f1f5d17fcb751251e365622eb084fc95b9fbb86d650986f262bd0a73f8afc6ae75596860e8486678b085c771677b3b8f6c3bdf6168082d7ae3ff0e477e5f8046a994e59de5109a222b9cf49e1bc702948eeefa837a15039156bb12d98c28e8119398cfc92d7cff0a67745ce706ba5d6387662d365466d543dbdccb2c1ceaca57dec56e52d4be622e67c770a64fdd8a9e011e33cbd6269c17f7ad4280fc5b9278666ee87d4b52338edf2bb96d57bf551a5e5fd00d6d02e97822308c910e8df3d180b4e7e0ac6465a3158a5e0f7ecb0b72482bc96dde373f2977a1326400dd2d418aef97a9d78b5db0c4437cbe50a059c2713317e9e0d621d0fd431e693afcd4e45c9cf820aabcfd2594bbe0a2e7591e9a47e44064daac6302c33d410a2e7989dcaae1273709d0cccd8e90e6e346d31d68220327b790566f1e0b3be7b2277abeb66a5b0f8205d100b0161c851d7932672fb3b4316cfec6275f1f16667090d94ae6ac7e101dfe4ad2e20292697fd147ddcc9b2de2eaee29a3afe04e9ab3dc9f04d3fe29cf9e78c272c11b99b473ee189ec5b01310f498e6b2aea248c9d5cce6a03dc54d6021791d0c83a168a1664fe3bca157ac876bd969aad211ce4190780da3dc52f02f2c91d53dfe6c03e40defd079937c200a9a6e190e3e90877987f6b39927f9f165843e49edef703df4dc8c526d4524cdfa1d0b30fd15441fbcd71a8de55bafd6cc1f8727a4c8465d64fa03ec27a73fb7d9e4bbc1ea1fe08b0db868a1243cf6fc5bef72410f59502dcfaec757a36be81e4543da3167b4a8a50ff5dbf2dbad2a1af91c32c808874d4eee400e3d076cb15669bc1bd6b8feae0506ef398fb4692595340cd211180ac4814526f59d6f04d264eb7517854d35af1d16522fa7e65325f39edb2344a25435b7bff23f182e711fdd8b37a6964d66b029e122c37e6f485a95b106152318ee3b96d6d5acdf8b2f1cbfc0ea468cae634ec4322d8f37f5404a2775b4d8d86412567ea5585ac5612b3270267393771909cb272000f8aa384868da72ef58c0377606012dc9557141aa462dcd3bbada61e59cc2bef1282edac3b41d4b357f4ecfcc30fd7d14867fa843bb7fe42912609fd708d2fe737807bda86c17a8765921650faa4e8a8c8374137c58c06a2a26a17a76fa9281c08be4a93e5b7fc82ccf37f23c082553509625c55ce031f4d9f2549905da5bb8294cd3115409b9771479190c4daa8ea7ee385829fc4d760a0eb94523db38059b63a08f7a19f6099be545e452dbd686006d253d1018564dbb2f219262bd801d69d77cedde98dc1f5f9108a746538345475a553aae12fc9c02bfcc3c8237f4a20777aef7b627ad3cddcf35196eb105a84413756d04906e2d1253ee8c785450e12271e76f996f44f21eaf46163834a37fab1e19976fe86b79df1bd61b6ee9becfd6faaff5bf16e7b65f4658b75e135e4e290ed4d4c022703b79249f2a20d19a829de5123a4c0b43daac860e405efbdaece0de43f1ab29d866b2068f575ff59713c671302c9c0d7dce5498740490eaa4ef7f1e22e939ce0c459cd35dcc4d364bc4fc6dee8b716523ac517bf1972cef633f45cc05748a411bd3ae32d66328fcc8b847108f6c9520f8a9657c5fb89e73f8f7b452cb53eb52384b4d7626bd98fb70e68bdc5000da4a235f69ede73a29bffc7e6d6804844a8fef45db7b77b195f4588a2470ea0993c3b82098d4c0e43756b949c90d051e0c989c88a1f544725f0dce2c0a73cb6bc02a840cf835a880d0ae0c10e3519a15d0a93cd029b535837cf86e84a26e9c78dfca8e2c8fe44eeef9aa8085a573da2b24dbc6b89095c2f72a9cd7806bb836da250a59e5e051fd034c77503fdae8aa73557e7b6a5e3ffd275a2a230afdd9888c4a04045b561ac6c6cd55f6c4dd2bf271c6e22b3b0a0f62d5fa3dbd63d0973cfdacedeb478b1c221d987e33b8d982ed96df3ce517d573dc917e25b251b2cdc3c32cf668b459f7644b62c33b5334ca8492d8fde152d38c1dda3f89168ac83047648236d1f0681cae18e9a110d43721f2255dca8c18295c42803ff40bb497aa4b25e85449665a4484840f3082f0686cd91405e149b23f5219e4cf6f5c44ad699c7f37f292286df7d9975e3593ce893fa0db7416784f2c19d81b3e60cb65f8604f68aebcc89c71326c8bd7004da5eef7a93a9bdc5680ec4c10d116fe5c980d447b9052c208a477c5bf21a830452ba3e1154b6a93276c49dede75579d6882b1c25843e2aa709a099456356c0d99ce190760f874a57de3772c2635b08c25ddb") ioctl$RTC_PIE_OFF(r3, 0x7006) 15:20:42 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000014c0)="11dca5055e0bcfec7be070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000620920144f88cd8bf8fa050030cea0e283d9b22703305b8fe23074bc015a41200581e5ef57c5000000000000000bcb"], 0x1}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 15:20:42 executing program 1: setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, 0x0, 0x44f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:20:42 executing program 2: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) r0 = inotify_init1(0x80000) r1 = inotify_add_watch(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000040)) inotify_rm_watch(r0, r1) 15:20:42 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x5, 0x591000) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000080)={0xc, 0x8, 0xfa00, {&(0x7f0000001440)}}, 0x10) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) llistxattr(&(0x7f0000000280)='./file0\x00', &(0x7f0000000440)=""/4096, 0x1000) 15:20:42 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000e6a000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) 15:20:42 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x0) fcntl$setflags(r0, 0x2, 0x1) 15:20:42 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x1) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) llistxattr(&(0x7f0000000280)='./file0\x00', &(0x7f0000000440)=""/4096, 0x1000) 15:20:42 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @sdr={0x31327d5b, 0x4}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x0) 15:20:42 executing program 1: setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, 0x0, 0x44f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) [ 365.656812] overlayfs: filesystem on './file0' not supported as upperdir 15:20:42 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg(r0, &(0x7f0000000700)={&(0x7f0000000180)=@ipx={0x4, 0xd3b, 0x100000000, "7efca76a1f0e", 0x100000001}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000040)="b6a24ba116dff32a9b2631207d009c4d343483247970a837c3a39602f3b57b0e628c3554b4ecfbb6c6411f965cb251e1242491f66c99dfc993", 0x39}, {&(0x7f0000000240)="ade24b3c08d85f02e7207400776dbf2637f6ca3b7240d193df88527b1bb0f8854d43cd3360a2cda77dc3bb4fbf2e923777a31954606452259d30c9371e9a2dffdf2b2908c2437d39758be347da2649e975d3473c3f2d2cf9088e18eb0dff880b7fa6c310917964a80b7519489ea20ce6cc5cb79f0c5393ac26cb2cf370dea651dbe379ba06275dfda75c1bbba6080df9ae5cec6cdb0e56", 0x97}], 0x2, &(0x7f0000000340)=[{0x38, 0x12f, 0x2, "55de7516e10e67dd1eb9db6668148ee52a8177af151e108b9b8518d67d95b68cfc15cb33"}, {0x10, 0x11e, 0x1}, {0x40, 0x10e, 0x101, "f12ad09916ed0df96ecc79806b115bb2af01bcc052604051257350645c73e2046764bcf347744e20a8f2388fe3827f01"}, {0xb8, 0x11e, 0x1ff, "c2f130125963ac2f858775a28fec63dbe88b2b1030df37af41f8388504035e30f79d3f32556d735ae8954cd0f3181a794c9025c0f48c32bc7c1205dab93e626badc7c05353b0afa37b28742c15184babe02ab3d59438b7d0ec69ba35f7faea2251b27a077fedebfd69eb3bcbbcdceeacbb0bcb9712d7eaa2e2d166c8c944d0d35f5ffcc9d8be31e4c59cafb9fe60a4689e19a4aeac26e4ec5f7affbae2ffffeecb740337"}, {0x88, 0x10e, 0x100000001, "f45475f1419c20ac0c61968f1681dedcd11df6d8d9d609516c9f21e474aba8f73bf2a1fbe7dcf70ff77840802357f63f380639eee0f50c7b450ee93d2fa5e588c161010fcedc02439771030c634f944895b8b755222dd27bcc8cd84090782fa55f3e6446dd8725a02dbf394625ef5690649a"}, {0x110, 0x10c, 0x6, "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"}, {0xb0, 0x105, 0x1, "4b5eb8952cec62214f2a800c9de7b0e2204b2ed92e147050187b2133475d4aa3b954f0677c1a0a70d4fa1d278b928a5c964054c917a171337c40e886251bbf8ef3af11222ccc2dbe7dc2bb28ff059e5b48df2cfc1e790216718062285efda5091a0d4c8d7233a0d380507fdc0d67faefeca6a93362e70a9cd405324c4ec237be6edfe1bb591cafbb974711377ec58a92fd76ee5294f9282df042734c"}], 0x388}, 0x40000) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000000000)=0xd4) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r1, 0x0) 15:20:42 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af00, &(0x7f0000000040)={@my}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) 15:20:42 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) r2 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x2, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xd2, 0x0, &(0x7f0000000100)="02d29547c1a3642ff22f0c1adebbd29921307819de3c43b8d4912a32006bf6efcf55d2acae95eb43109e701d464f720a056bc35fb4790aec4d4788598eb2971328e8c7ed3c5d8eb5f25661d4225ad738a8166dd942af36f6f93335170ad1ed566f437e7a930a7ad70d7f8ca00f7c96e34fe8aaf2e9f0aa868b857109768bd77d1603defae84a57282df1c2f9ae9408b15a775d23d1343f1cb3adf28ddfce499f89df29407e8f3f2703f8a7226d9014d0e440cff65bd204827d03825a502627838ff4aba99bc480e3f765c5f9f6f4ce575fe9", &(0x7f0000000200), 0x7fff}, 0x28) r3 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x3, 0x8002) sendto$inet(r1, 0x0, 0xaf, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000280)=@assoc_value, &(0x7f00000002c0)=0x8) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r4 = gettid() recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) tkill(r4, 0x14) [ 365.783510] overlayfs: filesystem on './file0' not supported as upperdir 15:20:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000014c0)="11dca5055e0bcfec7be070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000620920144f88cd8bf8fa050030cea0e283d9b22703305b8fe23074bc015a41200581e5ef57c5000000000000000bcb"], 0x1}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 15:20:45 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) openat(r0, &(0x7f0000000000)='./file0\x00', 0x20000, 0x40) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000d30000/0x3000)=nil, 0x3000, 0xffffffffffffffff, 0x401e, r0, 0x3) 15:20:45 executing program 1: setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, 0x0, 0x44f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:20:45 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) llistxattr(&(0x7f0000000280)='./file0\x00', &(0x7f0000000440)=""/4096, 0x1000) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x400080, 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) 15:20:45 executing program 2: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af00, &(0x7f0000000040)={@my}) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x400, 0x0) 15:20:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0xaf, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) r2 = fcntl$getown(r0, 0x9) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @tid=r2}, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000080)={{r3, r4+30000000}, {0x0, 0x9}}, 0x0) r5 = gettid() r6 = syz_open_dev$vcsn(&(0x7f0000000200)='/dev/vcs#\x00', 0x6, 0x1b1180) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r6, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000500)={&(0x7f00000002c0)={0x230, r7, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x118, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x467}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1c00000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9d4a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc9}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x409d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_MEDIA={0x104, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6a}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1bd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xead}]}, @TIPC_NLA_MEDIA_PROP={0x4}]}]}, 0x230}, 0x1, 0x0, 0x0, 0x4840}, 0x94) recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) tkill(r5, 0x14) 15:20:45 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) llistxattr(&(0x7f0000000280)='./file0\x00', &(0x7f0000000440)=""/4096, 0x1000) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r0, 0xc004aea7, &(0x7f0000000180)=0x8) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000140)=&(0x7f00000000c0)) openat$capi20(0xffffffffffffff9c, &(0x7f0000000080)='/dev/capi20\x00', 0x20000, 0x0) 15:20:45 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x0) ioctl$PPPIOCGIDLE(r0, 0x8010743f, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x0, 0x100000001}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000240)={r1, @in={{0x2, 0x4e22, @rand_addr=0xfb}}, 0x5, 0x2, 0x2, 0x7}, 0x98) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x80000000, 0x5) 15:20:45 executing program 1: setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, 0x0, 0x44f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) [ 368.654536] overlayfs: filesystem on './file0' not supported as upperdir 15:20:45 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000000)=0x101, &(0x7f0000000040)=0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x40000, 0x0) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x0) 15:20:45 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af00, &(0x7f0000000040)={@my}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x6000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@ipv4={[], [], @broadcast}, @in6=@initdev}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f00000000c0)=0xe8) write$P9_RSYMLINK(r1, &(0x7f0000000080)={0x14, 0x11, 0x1, {0x2, 0x0, 0x6}}, 0x14) 15:20:45 executing program 1: setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, 0x0, 0x44f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) close(r0) [ 368.792608] overlayfs: filesystem on './file0' not supported as upperdir 15:20:48 executing program 1: setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, 0x0, 0x44f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) close(r0) 15:20:48 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000240)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x0) 15:20:48 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000014c0)="11dca5055e0bcfec7be070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000620920144f88cd8bf8fa050030cea0e283d9b22703305b8fe23074bc015a41200581e5ef57c5000000000000000bcbb61c10b1"], 0x1}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 15:20:48 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = add_key(&(0x7f0000000000)='.request_key_auth\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)="99b50f5a1dfbdc65a6ac7753cfd73c228a8265edf36acd80ddd2e0c5b6d5d40ba70c73db527b7006091ea78e", 0x2c, 0xfffffffffffffffa) r1 = request_key(&(0x7f00000001c0)='ceph\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000340)='\x00', 0xfffffffffffffffc) keyctl$search(0xa, r0, &(0x7f0000000140)='id_legacy\x00', &(0x7f0000000180)={'syz', 0x0}, r1) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rtc0\x00', 0x260402, 0x0) ioctl$RTC_PLL_GET(r2, 0x80207011, &(0x7f00000003c0)) llistxattr(&(0x7f0000000280)='./file0\x00', &(0x7f0000000440)=""/4096, 0x1000) 15:20:48 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x400000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {r1, 0x2}}, 0x10) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af00, &(0x7f0000000240)) 15:20:48 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") userfaultfd(0x800) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000100)=0x18, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0xaf, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = gettid() recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) tkill(r3, 0x14) 15:20:48 executing program 1: setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, 0x0, 0x44f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) close(r0) 15:20:48 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0x9, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x1, 0x11, r0, 0x0) 15:20:48 executing program 1: setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, 0x0, 0x44f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(0xffffffffffffffff) 15:20:48 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x0) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000300)=""/3) 15:20:48 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6cd75022a16469723d006c65302c776f726b6469723d2e2f66696e74ff6727f32b4b1be4124cb31190a1df7a8417449be9d2e3493b69d6ce0a15687f00"/91]) llistxattr(&(0x7f0000000280)='./file0\x00', &(0x7f0000000440)=""/4096, 0x1000) 15:20:48 executing program 1: setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, 0x0, 0x44f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(0xffffffffffffffff) [ 371.708362] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 15:20:48 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000300)={{0xa, 0x4e22, 0x1ff, @dev={0xfe, 0x80, [], 0xe}, 0x2}, {0xa, 0x4e21, 0x9, @rand_addr="ee1be87ec300f2c68f221d0933ae2be8", 0x80000001}, 0x8, [0x4, 0x3f, 0x1, 0x1, 0x0, 0x6, 0x5, 0x1]}, 0x5c) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{}, {0x0}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000000180)={r1, &(0x7f0000000240)=""/185}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x0) sendfile(r0, r0, &(0x7f00000004c0), 0x1) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000001c0)={0x0, 0x80000, r0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000380)={r2, 0x80000, r0}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000003c0)={0x0, 0x200, 0x10, 0xfffffffffffffffb, 0x7ff}, &(0x7f0000000400)=0x18) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000500), 0x4) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000440)={r3, 0x80000000, 0x100000001, 0x8, 0xffff, 0x3}, &(0x7f0000000480)=0x14) 15:20:48 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0xaf, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000140)={{0x2, 0x4e23, @loopback}, {0x1, @dev={[], 0x4}}, 0x20, {0x2, 0x4e24, @loopback}, 'gre0\x00'}) r2 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f00000000c0)={0x3, 'hsr0\x00', 0x1}, 0xffffffffffffffd4) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = gettid() recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) tkill(r3, 0x14) [ 371.834979] overlayfs: unrecognized mount option "l×P"Ądir=" or missing value [ 371.851873] overlayfs: unrecognized mount option "l×P"Ądir=" or missing value 15:20:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000014c0)="11dca5055e0bcfec7be070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000620920144f88cd8bf8fa050030cea0e283d9b22703305b8fe23074bc015a41200581e5ef57c5000000000000000bcbb61c10b1"], 0x1}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 15:20:51 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x100, 0x0) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x3ac, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xf51}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x40}]}, @TIPC_NLA_LINK={0x5c, 0x4, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8749}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}]}, @TIPC_NLA_BEARER={0x118, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xfffffffffffffffa, @empty, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'nlmon0\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x167}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x250b, @ipv4={[], [], @broadcast}}}, {0x14, 0x2, @in={0x2, 0x4e22, @local}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5665}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}]}, @TIPC_NLA_LINK={0x98, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xba87}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0x88, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x22d0}]}]}, @TIPC_NLA_NET={0x64, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x291}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7ff}, @TIPC_NLA_NET_ADDR={0x8}]}, @TIPC_NLA_LINK={0x38, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3b90}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffc01}]}]}, @TIPC_NLA_NODE={0x24, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffffffffffd}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5e}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10001}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x3ac}}, 0x4001) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af00, &(0x7f0000000040)={@my}) 15:20:51 executing program 1: setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, 0x0, 0x44f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(0xffffffffffffffff) 15:20:51 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x0) 15:20:51 executing program 0: setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, 0x0, 0x44f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:20:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$selinux_policy(0xffffffffffffff9c, 0xfffffffffffffffd, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xbcd1) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000740)=@gcm_128={{}, "c78bdd0a147c88ca", "a3250e7608e10318d13353140168ba82", "8839b528", "0969e2aa799824f2"}, 0x28) modify_ldt$read(0x0, &(0x7f0000000780)=""/35, 0x23) bind$inet(r2, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0xaf, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$KVM_SET_XSAVE(r3, 0x5000aea5, &(0x7f0000000340)={"a0a100901f1da84cc2427bfe6548e8321bb1bf40ef4be8e740b6909f028e680d04dfbfa20ec2637e17ed373ed03366ca6af0247f5fbfd8ca053d2a493bcde5c82c513bed7284feb4b6a9328afca8c4af78b934b3e1c236d669dcd618beb20c966287ad7f899dcbf503ec1f8a692b2aa4f9f2d1baf3b84d57961fa4d9b41c6b1280206c7d38a3e48e61778e8e8594af6d562716b7d125197672f0709b140157e357f62e83a18cb87b201e98901286070fc5f2c572979c4a41124658687baa2d5c43ef046c8ea9d69951ef1ec707e4a3352dd7d324fe4fe24a4810247f1a2a3218b9d32a49a6c4a6cea6d84bd0a7a59d550d40e4d237e486dc26207d5ffd7a637941dcc274169569154e7ba58e2d57a6b6681b64fe06690044f4f2ab9f891a3d28643a25212d38f2e7fd02896cca2541a92da3c944bee5c0e3e4ff0bfb3f22ea0588b821e13cc854745b6eeb1364e702514332c06f0890b808a890ed5e5ea19b2ec970e5cac63419f2e7f66c6325071b43dab347a2f9d2e1a79c9a869e1518c4d54d995867d75b0ef9fc1b9017ffc966d2ac1fd24ad6eb5daa0ec82d79feb5422006fab149fd9efbfb859572808aba336cfd517e8c30adf3923911b0ebb618a34624abd8d23a0b120e5779acbe110c80cce07562c38687dba29b3310ddf817d3764cb7ad0b41c0bc4c9edb782dff3ff69955c3fb7df6471378e29aac85cbd1b7a93ba762dbca4910cb93ff0470e94ecd2d18878953265ab6b3ff0ca8d4c3882ef7aa645cf387ba0185248a87e24c62b6846cc27ae2634447b6b79d3ccbea714f66a945298447b5cc39525834a6b6fdeaaa27475e36b2f1b9e0daa137cc8b4183a3f343c3e08cb0dc7b4b248f53a646d3b7df88b0d415ae1c59a877956ef18d151f22995556655c51f894d3d957d27be22fc57118b826af2613372765cbe4e4919323e70c45cfd49f135440532a21c365bad93bad920b347465d85cad3032965195f3abd1082afba3f77f589c1917e0bc9c39f666cc8a8862a82efc5260db7d1f01ec4cf29a676a153c192ac19672a8852a9d626f7e305b362f3c0f768c2f56224d9083479c0aaec334977b2abe0bd2e17d9c0019f978158b2311eb68801b16aa101c1df318fdfdf307a31ed4afb867be5ccf7d895b436a044a964809a10d7e7b6f58960b20a60a12ed8e036ee47087c75ca68d176169cd91f35ad0b8312119762b87e9bc75cb1c07075b802f652332f8ebbe5742c9498cf5d16ef7c3196ee46f37f104a9de0d08951a5c31e36093333642c3ecde143b264035f7a0cf1979bc806be8e65354817b238182223bc9b2e635d4c5e45615d588dd48a4429eb2cbbcf12e2abf0573c724265c5b44c0d3374ed92b493b4dcada0ba23f9205f7b131dbb60a36915e3d2798815fc4bf135129424fcb21bf97c985c415240546a3c04cb4c98b"}) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r4 = gettid() recvmmsg(r2, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) tkill(r4, 0x3d) r5 = syz_open_dev$admmidi(&(0x7f00000007c0)='/dev/admmidi#\x00', 0x3, 0x90082) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r3) r6 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x57, 0x14080) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r6, 0xc1105511, &(0x7f00000001c0)={{0x6, 0x5, 0x6, 0x400, '\x00', 0xff}, 0x2, 0x20000133, 0x5, r4, 0x2, 0x2, 'syz1\x00', &(0x7f0000000180)=['/dev/admmidi#\x00', 'procem1vboxnet1,^-vboxnet1eth0wlan1mime_type\x00'], 0x3b, [], [0x8001, 0x7, 0xfff, 0x5]}) r7 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x2, 0x10400) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r7, 0x84, 0x20, &(0x7f0000000100)=0x10000, 0x4) 15:20:51 executing program 1: setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, 0x0, 0x44f) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:20:51 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000240)=""/192, &(0x7f0000000040)=0xc0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x98040, 0x0) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x0) 15:20:51 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af00, &(0x7f0000000040)={@my}) rt_sigaction(0x80, &(0x7f0000000140)={&(0x7f00000000c0)="0f14bb04000000660fe8358400000066440f79dbc4a2792a900a000000f2400f5d8fe1560000d98302000000c441fbc2697c0bc483b95db45a05000000f1abc4c2f19b0493", {0xfffffffffffffbcd}, 0x10000000, &(0x7f00000001c0)="660fd536c46151e989b41300000f38c99c331c5e0000c4e3b17c57af07c40239906c1a78f24f0f2ddbc4a1d17c87d379473dc4820107f6c4c1ea2aa3ae000000460f16d8"}, &(0x7f00000002c0)={&(0x7f0000000240)="36670f1b34a865660f6f3431c442fd303a47c02c7f9d2636d9f90f38c9c5c4a2c5ba39c4223da73502000000c4a1c9fc38c401e556a10f000000", {}, 0x0, &(0x7f0000000280)="c4623d45dd66460f3a41767127f2afc421bdf85b67c4c2b9b8fff3470fbdf43e0f380237c4828d3ac5c441fa167708c401792e5d86"}, 0x8, &(0x7f0000000300)) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x5, 0x400000) connect$vsock_dgram(r1, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10) 15:20:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r1 = socket$inet(0x2, 0x4000000000000001, 0x8000000000023) bind$inet(r1, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0xaf, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = gettid() r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x80000, 0x0) ioctl$EVIOCGABS0(r3, 0x80184540, &(0x7f00000001c0)=""/43) recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) tkill(r2, 0x14) r4 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)="1872dfc29798f8b7cc70163a72eef5c055e2617ec1934b52fc8f405ddc683352deee1f85f6ab9dcfd7781a48e5b615", 0x2f, 0xfffffffffffffffd) keyctl$revoke(0x3, r4) 15:20:51 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x0) write$selinux_load(r0, &(0x7f0000000000)={0xf97cff8c, 0x8, 'SE Linux'}, 0x10) 15:20:51 executing program 1: setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, 0x0, 0x44f) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:20:54 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000014c0)="11dca5055e0bcfec7be070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000620920144f88cd8bf8fa050030cea0e283d9b22703305b8fe23074bc015a41200581e5ef57c5000000000000000bcbb61c10b1"], 0x1}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 15:20:54 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af00, &(0x7f0000000040)={@my}) r1 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x0, 0x0) getsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000140), &(0x7f00000001c0)=0x4) ioctl(r0, 0xfffffffffffffff6, &(0x7f0000000080)="3d497c731c05f25b383c2ac1d775eb1ea6c0eaa9838fa1756b7cbf336944c39ee18b31d26c0b1bb7e3c56d5c41af123b82f3eb49838d2b2d72afa6a9885fbeeca248dd1ae36eec03ddf41ffbec9548c38b947e55ef6ca98d3c8f2c6ac6d095f99c00454de775074f") openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 15:20:54 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) ioctl$CAPI_GET_FLAGS(r0, 0x80044323, &(0x7f0000000000)) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x0) 15:20:54 executing program 0: setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, 0x0, 0x44f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:20:54 executing program 1: setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, 0x0, 0x44f) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:20:54 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0xaf, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x4, &(0x7f00000001c0)=[0xee01, 0xee00, 0xffffffffffffffff, 0xffffffffffffffff]) lchown(&(0x7f00000000c0)='./file0\x00', r2, r3) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r4 = gettid() recvmmsg(r1, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}, 0x7}], 0x40002e7, 0x0, 0x0) tkill(r4, 0x14) r5 = accept(r0, &(0x7f0000000200)=@rc, &(0x7f0000000300)=0x80) setsockopt$bt_hci_HCI_FILTER(r5, 0x0, 0x2, &(0x7f00000002c0)={0x7fff, 0x6, 0x0, 0x7f}, 0x10) 15:20:54 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x0) 15:20:54 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:20:54 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, 0xfffffffffffffffd) 15:20:54 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) write$P9_RWRITE(r0, &(0x7f00000001c0)={0xb, 0x77, 0x2, 0x9}, 0xb) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffdfffff, 0x11, r0, 0x0) accept$unix(r0, &(0x7f0000000000), &(0x7f0000000180)=0x6e) 15:20:54 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af00, &(0x7f0000000040)={@my}) socketpair(0x9, 0x80002, 0x4, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000100)={@local, @loopback, 0x0}, &(0x7f0000000140)=0xc) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000280)={@ll={0x11, 0xff, r2, 0x1, 0x603e2da7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, {&(0x7f00000001c0)=""/70, 0x46}, &(0x7f0000000240), 0x1}, 0xa0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000080)=0x100000000, 0x4) 15:20:54 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0xaf, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) r2 = shmget$private(0x0, 0x4000, 0x190, &(0x7f0000ffc000/0x4000)=nil) getresuid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000140)) getgroups(0x4, &(0x7f0000000180)=[0xee00, 0xee01, 0xffffffffffffffff, 0xee00]) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@multicast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@initdev}}, &(0x7f00000002c0)=0xe8) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000003c0)={0x0}, &(0x7f0000000400)=0xc) r8 = fcntl$getown(r0, 0x9) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000440)={{0xf65, r3, r4, r5, r6, 0x24, 0xffffffffffffffb2}, 0x431, 0x7, 0x101, 0x1, r7, r8, 0x7}) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r9 = gettid() recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) tkill(r9, 0x4) 15:20:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000014c0)="11dca5055e0bcfec7be070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000620920144f88cd8bf8fa050030cea0e283d9b22703305b8fe23074bc015a41200581e5ef57c5000000000000000bcbb61c10b1f445"], 0x1}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 15:20:57 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) fsetxattr$security_smack_transmute(0xffffffffffffffff, &(0x7f0000000340)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000440)='TRUE', 0x4, 0x3) 15:20:57 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x0) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x0) 15:20:57 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:20:57 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f00000000c0)='\x00', 0xffffffffffffffff}, 0x30) sched_setparam(r1, &(0x7f0000000040)=0xc) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0xaf, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x400, 0x0) ioctl$BLKGETSIZE64(r3, 0x80081272, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r4 = gettid() recvmmsg(r2, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) tkill(r4, 0x14) 15:20:57 executing program 2: r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x5c, 0x608100) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000680)=@broute={'broute\x00', 0x20, 0x4, 0x478, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000200], 0x0, &(0x7f00000001c0), &(0x7f0000000200)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x40, 0x8100, 'caif0\x00', 'bond0\x00', 'rose0\x00', 'nr0\x00', @broadcast, [0x0, 0xff, 0xff, 0xff], @random="4c7c2ee4d8cd", [0xff, 0x0, 0xff, 0x0, 0xff, 0xff], 0x106, 0x106, 0x13e, [@realm={'realm\x00', 0x10, {{0xce9f, 0x41, 0x1}}}, @arp={'arp\x00', 0x38, {{0x338, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff0000ff, @multicast2, 0xffffffff, @dev={[], 0x2a}, [0xff, 0x0, 0x0, 0xff], @remote, [0x0, 0xff, 0xff, 0x0, 0x0, 0xff], 0x14, 0x81}}}], [], @common=@dnat={'dnat\x00', 0x10, {{@remote, 0xfffffffffffffffc}}}}, {0x5, 0x4, 0x6065, 'vxcan1\x00', 'vlan0\x00', 'teql0\x00', 'bond0\x00', @remote, [0xff, 0x0, 0x5453568c6a56bbb1, 0x0, 0xff, 0xff], @local, [0xff, 0xff, 0x0, 0xff, 0xff], 0x9e, 0x9e, 0xee, [@cpu={'cpu\x00', 0x8, {{0x43d9, 0x1}}}], [], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x9, 'syz1\x00', 0x7}}}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x2, [{0xd, 0x41, 0xe867, 'ip6gre0\x00', 'veth1_to_team\x00', 'nr0\x00', 'batadv0\x00', @dev={[], 0x1c}, [0x0, 0x0, 0x0, 0xff, 0xff, 0xff], @remote, [0x0, 0x0, 0x0, 0xff, 0xff], 0x6e, 0x6e, 0xb6, [], [], @common=@ERROR={'ERROR\x00', 0x20, {"fa18017ed80c26bdcb17734784de3ac523ba24d86a1ba76c28b5f9fce4b1"}}}, {0x3, 0x40, 0x890d, 'hsr0\x00', 'veth0\x00', 'syz_tun\x00', 'erspan0\x00', @local, [0x0, 0x0, 0xff, 0xff, 0xff], @broadcast, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], 0xa6, 0xa6, 0xd6, [@mac={'mac\x00', 0x10, {{@local, 0x1}}}], [], @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0xfffffffffffffffe}}}}]}]}, 0x4f0) getpeername$packet(r0, &(0x7f0000003480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000034c0)=0x14) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000003500)=r2) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af00, &(0x7f0000000040)={@my}) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/load\x00', 0x2, 0x0) recvfrom$netrom(r0, &(0x7f0000000700)=""/205, 0xcd, 0x2, 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000000c0)={0x9, 0x0, 0x5, 0x0, 0x0, [{r0, 0x0, 0x8}, {r1, 0x0, 0xd1}, {r1, 0x0, 0x4}, {r1, 0x0, 0x6}, {r3, 0x0, 0x6}]}) 15:20:57 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000240)={0x8000, 0x1, 0x7f, 0x52c4}, 0x8) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x0) sendto$unix(r0, &(0x7f0000000000)="1596a795c750e002714f8ab906aad11aa13091649aa4d9e6dbf84a360dce4de7032232057570ad21d8f96a30924677fd1091f3dffa193ed14eaaf948017c8a2f0ce126e28e81dd414efefdd1c5d1533ad5695056e24cd776fe06f754570614b8af338b70ea40fabb49ad269c608c3a4abbc86d7f22", 0x75, 0x44000, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) 15:20:57 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0x7, @sdr={0xff77775f, 0x12}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x0) 15:20:57 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af00, &(0x7f0000000040)={@my}) socket$rxrpc(0x21, 0x2, 0x2) 15:20:57 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x49d, 0xac, 0x7, {0x4, @win={{0x6, 0xffff, 0x6, 0x8001}, 0x7, 0x0, &(0x7f0000000180)={{0x7, 0x2, 0x8, 0x9}, &(0x7f0000000040)={{0x1, 0x7a, 0x3, 0x44}, &(0x7f0000000000)={{0x4, 0x8, 0x1, 0xffff}}}}, 0x6, &(0x7f0000000240)="7fd79077adb4a84518d75ab377015ee35677f7b87092f67b053badf756b154898c7d3f206e88967cac7c2e720d7e70407ba8c1f7df91a6b7177663ea96bac16fb46c3bb59b1885c9d2a4d2b90b5fd21a603ec22208e0b65d2b88425f9625b36bf2db7cb81a010cfc133229bccf660a5a3b97a6a22acbb74286637e5e34a8f771833b65437c533ceb883e7a8b45e204a797e27e98b67b72e5025a41eb2607c7610a5e0e72955224ac057aed274aab71bf438a833d1197fcb9da01e3f9c7ba9db364ba1a123f8e4a5221f369cfe80707a388a3aa", 0x7}}}) ioctl$KVM_GET_CPUID2(r0, 0xc008ae91, &(0x7f0000000440)={0x2, 0x0, [{}, {}]}) 15:20:57 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:20:57 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="24000000220007031dfffd946fa2830002200a0009000300741d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 15:21:00 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000014c0)="11dca5055e0bcfec7be070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000620920144f88cd8bf8fa050030cea0e283d9b22703305b8fe23074bc015a41200581e5ef57c5000000000000000bcbb61c10b1f445"], 0x1}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 15:21:00 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000240)='/dev/swradio#\x00', 0x0, 0x2) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000180)=0x1) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x400, 0x2000) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f0000000280)) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x11, r0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000000)) 15:21:00 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:21:00 executing program 0: 15:21:00 executing program 2: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x4, &(0x7f0000000080)=""/124) r1 = syz_open_dev$sndpcmc(&(0x7f0000001440)='/dev/snd/pcmC#D#c\x00', 0x9, 0x181042) r2 = syz_open_dev$sndpcmc(&(0x7f0000001480)='/dev/snd/pcmC#D#c\x00', 0x2, 0x400000) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f00000014c0)=r2) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x604600, 0x0) ioctl$PPPIOCCONNECT(r3, 0x4004743a, &(0x7f00000001c0)=0x2) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af00, &(0x7f0000000380)={@my}) r5 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000400)={'syz', 0x2}, &(0x7f0000000440)="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", 0x1000, 0xfffffffffffffff9) keyctl$assume_authority(0x10, r5) setsockopt$netrom_NETROM_N2(r3, 0x103, 0x3, &(0x7f0000000040)=0x5f3, 0x4) write$FUSE_LSEEK(r4, &(0x7f0000000100)={0x18, 0x0, 0x2, {0x1}}, 0x18) write$UHID_INPUT2(r1, &(0x7f0000001500)={0xc, 0x1a, "398a1cefa5f62e993350336535ceec6feaf7b70f96731c0ac8db"}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f00000002c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000200), 0x3, r6, 0x1c, 0x1, @ib={0x1b, 0xbc96, 0x0, {"6c24e7b2bd6d1fcb6d9a5fe87aa4a0ae"}, 0x780, 0x1b48, 0x1ff}}}, 0xa0) 15:21:00 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0xaf, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) timer_create(0x7, &(0x7f0000000400)={0x0, 0x1b}, &(0x7f0000000440)=0x0) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) timer_settime(r2, 0x0, &(0x7f00000004c0)={{r3, r4+30000000}, {0x0, 0x989680}}, &(0x7f0000000500)) r5 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000100)={{{@in=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@remote}}, &(0x7f0000000200)=0xe8) r7 = getgid() stat(&(0x7f0000000340)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x9, &(0x7f0000000240)=[0xee00, 0xffffffffffffffff, 0xee00, 0xffffffffffffffff, 0xee00, 0xffffffffffffffff, 0xffffffffffffffff, r7, r8]) write$P9_RGETATTR(r5, &(0x7f0000000280)={0xa0, 0x19, 0x2, {0x4, {0x20, 0x0, 0x8}, 0x8, r6, r9, 0x1, 0x1000, 0x40d9, 0x3, 0x8001, 0xff, 0x5, 0x10000, 0x100, 0x3ff, 0x0, 0x4, 0x32cc, 0xa1d}}, 0xa0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000580)) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000005c0)={0x7, 0x0, 0x2, 0x81}) getsockopt$EBT_SO_GET_INFO(r5, 0x0, 0x80, &(0x7f0000000380)={'filter\x00'}, &(0x7f0000000640)=0x78) ioctl$DRM_IOCTL_SG_FREE(r5, 0x40106439, &(0x7f0000000600)={0x7, r10}) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r11 = gettid() setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000540)={0x40, 0x3, 0x1}, 0x10) recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) tkill(r11, 0x14) 15:21:00 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:21:00 executing program 0: 15:21:00 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000240)={0x0, @bt={0x4, 0x800, 0x1, 0x2, 0x0, 0xdfb8, 0x7, 0x1358, 0x2, 0x1, 0x5, 0x2, 0xffffffffffff00c8, 0x4, 0x10, 0x2}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0xe730, {0x5, 0x6, 0x0, 0x800, 0x4, 0x4}, 0x8, 0x6}, 0xe) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x0) 15:21:00 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af00, &(0x7f0000000040)={@hyper}) 15:21:00 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0xaf, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)="0a011d65deed430edfb8f383d3ec8a9ccf638e1743a5a70813e3284a86df98efcbc04cc67104b1852bd8640b8ceb213fa997fd5598edb40accb1f71425dfc46e6c438914348cc75895d7be5d003ddb79babe9a134d31763e5b30223afbb7ff0f10568b838798fdbda0395155df08f05a45498852fb9215ca2450d800db2ec6978e9be26dfc15c119e08dd5e5a2ccc286b91ad1ddd7a2ccba418dd21f64c56699b6a58bbf5043483ed5270ec833c1f5161a00272aae89ca948fd424986ad5", 0xbe, 0xfffffffffffffffb) r3 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$negate(0xd, r2, 0x1, r3) gettid() ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={r1}) setsockopt$inet6_udp_int(r4, 0x11, 0x6f, &(0x7f0000000100)=0x9c, 0x4) recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 15:21:00 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:21:03 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000014c0)="11dca5055e0bcfec7be070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000620920144f88cd8bf8fa050030cea0e283d9b22703305b8fe23074bc015a41200581e5ef57c5000000000000000bcbb61c10b1f445"], 0x1}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 15:21:03 executing program 0: 15:21:03 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000280)=0x80, 0x4) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) bind$vsock_stream(r0, &(0x7f0000000240)={0x28, 0x0, 0x0, @my=0x1}, 0x10) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000400)={0x2, 0x4}, 0x2) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000440)={0x0, 0x8b, "bb78f5387c17acf3fc7a396432e726828c99f4e5dd4d1ea13f3aece16e760266991fdc14a5f6e60266c4b922623a60e1474f514f0c50010ca22f82bcb3fea10cfe321caf67959f00686a2a62918633e4dc5e9c476fa74a40218bea643b30e602938d6eaaea7a2c9c173aae4d3d9f894e945822474705c64d36e7de1864518bb78d949fe611df4a6cd7df90"}, &(0x7f00000002c0)=0x93) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000)={r1, 0x9}, &(0x7f0000000040)=0xffffffffffffffc1) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYBLOB="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"], &(0x7f0000000180)=0xe9) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000500)={0x7, &(0x7f0000000300)=[{0x6d, 0x101, 0x1, 0x4}, {0x2, 0xde3, 0x40, 0x7}, {0x100, 0x4, 0x40, 0x4}, {0x9, 0x8, 0xfffffffffffffffa, 0x4}, {0x6, 0x0, 0x800, 0x100000001}, {0x0, 0xfffffffffffffff7, 0xac5e, 0x3800000000000}, {0x3, 0x5, 0x5, 0x80000000}]}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000340)={r3, 0x1417c0000, 0xfff, 0x8001, 0x1ff, 0xcd, 0x2, 0x3fe0, {r3, @in={{0x2, 0x4e21, @empty}}, 0xfffffffffffff801, 0x97a, 0x99a3, 0x40}}, &(0x7f00000001c0)=0xb0) 15:21:03 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x400000, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000280), &(0x7f00000002c0)) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0x10000, 0x0) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f00000000c0)=&(0x7f0000000080)) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{}]}) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000200)={0x0, @aes256}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) capset(&(0x7f00002d0ff8)={0x1998032c}, &(0x7f0000000100)) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x14) write$FUSE_POLL(r1, &(0x7f00000001c0)={0x18, 0xfffffffffffffff5, 0x2, {0x55}}, 0x18) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af00, &(0x7f0000000040)={@my}) 15:21:03 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:21:03 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0xaf, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) timer_create(0x2, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = gettid() timer_create(0x3, &(0x7f0000000240)={0x0, 0x13, 0x7, @thr={&(0x7f0000000140)="070102bc6f353809f80ac225d3c65203da3f452fd256c16c54eb3f80a8760ad032caa31c882e57695d8723ea1cc41a771b9b04d81201ad99c137e4b4eef5d122a3f3ca903dff6ab0fa8d40b79448516ac1c39d1c15e3e28c41d05c7ffe0c1bc41a0e9ffdf03af219b3cfd05b72683e88d276b8f88fee416cf8baa07fc95a72ebba07957fde236f18025488b6b1289db697cef49abe6cdadfee72fc977a98267adb35512f76776e8ca9c57abc22cb271715c6983cd1edcc979f2d930911c170d6922c2e7931b54f6af49307cfc8fc5d7e24b7fc8efc0ae09f491acb0812cf881f19f408db8352f609d453", &(0x7f00000000c0)="3d5fa0"}}, &(0x7f0000000280)) recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) tkill(r2, 0x14) 15:21:03 executing program 0: 15:21:03 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:21:03 executing program 5: prctl$PR_SET_TSC(0x1a, 0x3) r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r1, 0x709, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40080) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000)={0x0, 0xfffffffffffffffe}, &(0x7f0000000040)=0x8) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000280)=0x7ff, 0x2) r3 = fcntl$getown(r0, 0x9) ptrace$getenv(0x4201, r3, 0x2, &(0x7f0000000240)) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000180)={r2, 0x5}, &(0x7f0000000400)=0xaffc5a0db556404) 15:21:03 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000014c0)="11dca5055e0bcfec7be070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000620920144f88cd8bf8fa050030cea0e283d9b22703305b8fe23074bc015a41200581e5ef57c5000000000000000bcbb61c10b1f4451c"], 0x1}}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 15:21:03 executing program 0: 15:21:03 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af00, &(0x7f0000000140)={@my}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000000)={'TPROXY\x00'}, &(0x7f0000000080)=0x1e) 15:21:03 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:21:03 executing program 0: 15:21:03 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x0) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x8001, 0x0, &(0x7f0000000300), 0x80000, &(0x7f0000000580)=ANY=[@ANYBLOB="6f6c64616c6c6f632c106301800000737569643ddd9bea561f6b0a660c379b2a4be5384cca9388f283de6fbcb0ddf9c3bb578287497d476b4d44b2c8960d55aa6908d296fd3f3be724920cc500e6216323e8c2d5bb95cd0461709390346ccbc3315b342b4d069bf04b1ba6039e2e8da9f8a23663e1866eda2a31ac3cc0dc8d25bb770d7215f6131345ed46171cf5f0c4d0d5200f380615c40385041eb12d10f5216008ea7f3a9290491690017cc94ab7632302a2062b5b612731bd764132158d09fdc41800b415b0", @ANYRESHEX=r1, @ANYBLOB="2c6f726c6f762c67727071756f74612c6a71666d743d30931c337666736f6c642c6e6f626c6f636b5f76616c69646974792c6e6f7265636f766572792c6a6f75726e616c5f636865636b73756d2c736d614a6b66736861743d70726f637070703176626f786e6574302c646f6e745f6d6561737572652c66736e616d653d6b657972696e6776626f786e657430657468306e6f6465762c00"]) fcntl$setflags(r0, 0x2, 0x0) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000240)=""/232) ioctl$VIDIOC_G_EDID(r0, 0xc0285628, &(0x7f0000000440)={0x0, 0x7f, 0x7, [], &(0x7f0000000400)=0x3ff}) recvmsg$kcm(r0, &(0x7f00000008c0)={&(0x7f0000000480)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000500)=""/17, 0x11}, {&(0x7f0000000700)=""/171, 0xab}], 0x2, &(0x7f00000007c0)=""/255, 0xff}, 0x40) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video1\x00', 0x2, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000340)='/dev/md0\x00', 0x400001, 0x0) clock_gettime(0x0, &(0x7f0000000940)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000980)={0x0, 0x0}) futimesat(r0, &(0x7f0000000900)='./file0\x00', &(0x7f00000009c0)={{r2, r3/1000+30000}, {r4, r5/1000+30000}}) 15:21:03 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000200)={0x0, &(0x7f00000000c0)}) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000140)) 15:21:03 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:21:06 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x3ff, 0x4) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x1000004, 0x15, r0, 0x0) 15:21:06 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0xaf, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = gettid() syz_open_dev$vivid(&(0x7f0000000140)='/dev/video#\x00', 0x3, 0x2) recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) tkill(r2, 0x14) fsetxattr$trusted_overlay_nlink(r0, &(0x7f00000000c0)='trusted.overlay.nlink\x00', &(0x7f0000000100)={'L-', 0x7}, 0x28, 0x1) 15:21:06 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af00, &(0x7f0000000040)) 15:21:06 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x11, r0, 0x0) 15:21:06 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:21:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000014c0)="11dca5055e0bcfec7be070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000620920144f88cd8bf8fa050030cea0e283d9b22703305b8fe23074bc015a41200581e5ef57c5000000000000000bcbb61c10b1f4451c"], 0x1}}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 15:21:06 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:21:06 executing program 5: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x2001, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$IMCLEAR_L2(r0, 0x80044946, &(0x7f0000000240)=0x6) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000280)={0x8, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000000)={0x400, 0x0, 0x3014, 0x9, 0x84, 0xff, 0x4, 0x1}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000001c0)={0x4}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x0) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000380)) sendto$inet6(r0, &(0x7f0000000040)="8813fbfcf0e009b138461ce2ab3767b0aac024a95b1b7b2e09b5cd4050295064d5af923ef8c1a5b09633389229d0f0f5202923cd16", 0x35, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={{0x0, 0x2710}, {r1, r2/1000+10000}}) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000140)={0xb, {0x8, 0x8, 0xfffffffffffffff8, 0x400}}) 15:21:06 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]}) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) ioctl$TIOCGSID(r0, 0x5429, 0x0) 15:21:06 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = dup3(r0, r0, 0x80000) r2 = mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffff9c, 0x7fe0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer={0x40086303, r2}], 0x3b, 0x0, &(0x7f0000000080)="39634dc7067438799c01da9e1529e44ddbaefad2a56e4e77a3d15c965b79e672fa4563a5afa450c5245b4d3273d7178645bf09e017d92b24a4d5e8"}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af00, &(0x7f0000000040)={@my}) 15:21:06 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0xaf, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendmmsg(r0, &(0x7f0000000a00)=[{{&(0x7f0000000240)=@isdn={0x22, 0x7f, 0xfffffffeffffffff, 0x200, 0x7fff}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000002c0)="cb51e544f80d1df0cec55f8ec8df2e431cc90ca67c05efc1b189f38da2587531e142cc35ab360f11adf84e7aa737d167b8d9c773340ec5fb1a59c412256c609e1993cfe6b7f1e7782d6f38d859ff7174992a8ff2cf2ff7ca79a99b8a831799f594d331c8c4222d1b3a2fce79693fc4a5b3591ecc90cb31e31cbcd9f95379a0b32315a1382dcaa35193167da081b3c414f33e8e4756b36c11f76f604512f14abb0fe0869d7bec9484147524be26f3e0c6e7dd8d97db4952a901a1d7e49b241f70603a7f5dbc7c2b8cd6497de030440945", 0xd0}, {&(0x7f00000003c0)="f364b60bcaaa2ce37e33bbdd257ec8deb68906542a12e4d9f622bf61137fac36822941e2afeac35969672eb129835d3f5a0b1da61502f620600cc48324a8de5293ddb94502a5bd", 0x47}, {&(0x7f0000000440)="6cd2f8d359c977577692307846d145f8631b124ef726aec1ed066c90ac04693fc1457065a914ba8ce8de95568dc2029bf8e21996a8811052b0ab87f7f7c9aac3130706f4774dff0bd18480802bd139411be58d9053400ba8b39529b2b5c7f4f3447516d429d08d583a90aba03e880010694038f0f4036dd0ccf7365ba5d8ee7613dff28e24f3ddb24b4673e1bf6cbec436a9464a0ceb673dc506608d2644addd40e8e9a16a2f84a1b09cdbc104de3684", 0xb0}, {&(0x7f0000000500)="88ced3b92cea77d8341902b0cb7bd293943c059244cf90b665ee02849f67e1421f75f7f01de609540ae85a56d7bf8b8bd589f163d4038737dbaef57b564812f59c1870f31ab45a7ecb0d4fe631b41c432ce44aff4933b2e06ea3066f0cd42d2ca151dad8c1bf63a3431c65b766c6b2f5f210b312a531572150f043004fc4281a80674bd4d87e", 0x86}, {&(0x7f00000005c0)="9c226aeabbc8ad6a7ced791e70a07a4d5685918af15623d0011ec904fb93360974b87492b64dc7cf5c88ec42b8c54221002f6f2bc4ab2eef9c9d059c1d35ab046451ae6d710759ccbfdbbb5eb84525a5937d31ede888781c1d17c30da915c01c7d4af0d55d2c3e1a7bd4af8a6ae1418f5ba0aeeca2e59c42c036c04fd294b9989bfe32b025dc409c2a070183cf3b0befb2ba83638f90c5d122845c45b0e08726c6331576e923f123a61373dcb26a1ec92ea7804ab78672696320cdad27ad88d8b29390a076b9732f1b752d70454031c749ed7f2a3bf91cf373d7aeb554fe5c0c5221392be9faabf4800763de15ea75871d12", 0xf2}], 0x5, &(0x7f0000000740)=[{0xf8, 0x113, 0x2, "42e4a95aab2f01edab77bfc256f17e9402af12fd2e2f6ee0718cbd0fca3363724538088735fd5cea2a7d9a78753f972b0b7cdbbab1d7adc89cbef60b4ad9482455ee266a6e30713411d7045629ed7ab38b38c667eda64f8a9e024dd02e6b0a403c1c6f3e4144f4ef7df06a1d2295912996ebeeb78b0cbaebbd915b867d631f9393f6575093f261b9bac6134d8efae07d34f7209b0e9bf15ecc359f97d8ce7b0697b1c7a0309742811eeac5ff36a88c23c2479284f74c1f306dfd0e0e5038e312f8450edc85c033a028dc98e7c17d4a036e8db7e918b8bdfd424203d5a117e81e75"}, {0x90, 0x10f, 0x3, "460b634b0fd7c0a00d2c1921ec70244ae869f45ee274e9470154afba938d68e0dbbebcf0da25b0f442f689c3e8b3dc0a4cfd5f0ffef92fe34bb10c55d6bc58fde644e1e93e7893092b898c7b57723935a33b6f27e192207789a3baac7209b07c306a74463227b932588bb57922d82fa8ed32a5285b3152a96ffdf51aef"}], 0x188}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000900)="93a100c8339a18c07e0e34211d28c8330aa46249415981bb191a48c8352862b59425c67c589e8fa9576318e9ac2f8c829949cf087fa34b2a8c115af69013a0ac2a2ef88e1820bb9e3c02880ddfbe4c403f91835955795e4be8d2be98ba1925a253e5bcc928a6cfe3e81258379312039b0a8be99a3d94fe996d4904597153f30d27044e5c488bc3a0afdd554bcc", 0x8d}, {&(0x7f0000000b00)="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", 0x1000}], 0x2, &(0x7f0000001b00)=[{0x100, 0x101, 0x8, "9fdd2ac13ea296c70071a6d04a1fbfb447c4fffb0d0f6378638aad1b25163285647a169cd434bbe50c8ee3729eb0dd4a3861da1d19fb44690a5f408709496ddb16fad86cc81db56fbe04fae559c38378031e26ff60cd57b58220ef34350b4636ec4b1d8c3ab36ee27ac5fbcf49b3184962501fc2ad25694c39dd10db16ed300ca3f654ae45b23797b6b7898805502731986f104b4dc1724ef991447a6d1da866e686a047c105476b365a92e48c4a56b123c83f0628c0f495a961a93855bcd3a6e7d917c3b90afb315d42a7b78a41030bf011e2ba65da24b5140e4de5c78ea643783be8def8dfacaa1a87"}, {0xa8, 0x10e, 0x2, "4ac11f332663a7c7aa03236be2e24eaf3b5d5b7b4a7004550cd18ddc9b82a307658207a27964eda0f1b45e64592f5ecb1c424007ae17048747d88505a2764e60f0885cb5964bcfa3901ab17ebef65d3b1b855fad8883b53fbecc379b8b3fb097f0f7b7d1c3e1be98e2ee50c4c750b76501e152b4eafd4b7accb1dde091a514e2f4511b9e8bfb747f651366d59705642445fc8f9f85"}, {0x88, 0x101, 0xffffffffffffff80, "b6c3ecb8c6ac80189fcff8d560eabb96ec03ad5739312d87f39252ceeed1a1deec8f25d3be37ccf7051a2a856118941393504addf684eab4b4ecff4b31e2c24143b3ca4954e32ec153d90e615378f005b0fdc6f3c6de3c82346ac147bfbb2ad9d3c9a853f2b35830ec765ef80b7d6143b1e6d1"}], 0x230}}], 0x2, 0x4000040) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) r2 = gettid() recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r3 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x2, 0x204000) ioctl$RTC_IRQP_READ(r3, 0x8008700b, &(0x7f0000000200)) tkill(r2, 0x14) lsetxattr$trusted_overlay_origin(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.origin\x00', &(0x7f0000000140)='y\x00', 0x2, 0x3) 15:21:06 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:21:06 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) setsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000240)="839b647e2cc92bcd13fe03639c7789fcf275e7a92492e62e8acd469a9801b1eb6d862025611e5de64dc12aed5d4a7a16f76499d920c9aa094fa2e91ecfd7027cb9ee2956a74cb4278612574d66045e196c7116f57907b8d362cc3b3412a57b63dbfb3757ad929ce9a58e89fa72198cda6aa6ed6798fa84ad3186cff61caa029fcb7a66bdfc675414f4f17ece4cee1c7e4497251eaea28f9a9f840a29ba191cb5ed0b25bc0d44584e2d", 0xa9) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x2e, @remote, 0x4e21, 0x3, 'wlc\x00', 0x20, 0x4a, 0x4}, {@remote, 0x4e24, 0x2, 0x5, 0x5, 0x8}}, 0x44) 15:21:06 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af00, &(0x7f0000000040)={@my}) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xfffffffffffffffb, 0x1) ioctl$VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000080)={0x5, 0x34324948, 0x1, @stepwise={0x4, 0x9, 0xee2, 0x5, 0x800000, 0x5}}) 15:21:06 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:21:06 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x100000002011, r0, 0x0) 15:21:06 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="c0dca5055e0bcfec7be070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0xaf, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) r2 = socket$bt_bnep(0x1f, 0x3, 0x4) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = dup(r1) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, &(0x7f00000000c0)={0x0, 0x0, 0x200a, 0x1}) r4 = gettid() dup(r2) ioctl$DRM_IOCTL_MARK_BUFS(r3, 0x40206417, &(0x7f0000000140)={0x4c, 0x0, 0x0, 0x5, 0x1f, 0x3ff}) recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe46}}], 0x2da, 0x0, 0x0) tkill(r4, 0x20) 15:21:07 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000014c0)="11dca5055e0bcfec7be070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000620920144f88cd8bf8fa050030cea0e283d9b22703305b8fe23074bc015a41200581e5ef57c5000000000000000bcbb61c10b1f4451c"], 0x1}}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 15:21:07 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0xfd91) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11011, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 15:21:07 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af00, &(0x7f0000000040)={@my}) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x6, 0x400000) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) 15:21:07 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) ioctl$IMCLEAR_L2(r0, 0x80044946, &(0x7f0000000000)=0x10000) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000040)={@ipv4={[], [], @remote}}, &(0x7f0000000180)=0x14) mmap(&(0x7f0000f6b000/0x2000)=nil, 0x2000, 0xffffffffffffffff, 0x11, r0, 0x4) 15:21:07 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:21:07 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:21:07 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000000)=0xe8) r2 = getgid() write$P9_RGETATTR(r0, &(0x7f0000000340)={0xa0, 0x19, 0x1, {0x1000, {0x4, 0x2, 0x3}, 0x20, r1, r2, 0x3ff, 0x49d, 0x6, 0x1, 0x7, 0x1000, 0xfffffffffffffffe, 0x7, 0x2, 0x0, 0x7, 0x6, 0x570, 0x0, 0x6}}, 0xa0) syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x800) 15:21:07 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) [ 390.740265] audit: type=1400 audit(1560525667.371:60): avc: denied { map } for pid=11024 comm="syz-executor.0" path="socket:[40075]" dev="sockfs" ino=40075 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=packet_socket permissive=1 15:21:07 executing program 2: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r0 = accept(0xffffffffffffff9c, &(0x7f0000000080)=@isdn, &(0x7f0000000000)=0x80) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000100)=0x10000, 0x4) 15:21:07 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:21:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0x4d0, 0x0, 0x4000000c], [0xc1]}) [ 390.976957] kvm [11059]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 15:21:07 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0xaf, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = gettid() recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r3 = fcntl$dupfd(r0, 0x0, r1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@remote, @in6=@ipv4={[], [], @initdev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @initdev}}, 0x0, @in6=@mcast1}}, &(0x7f00000001c0)=0xe8) getgroups(0x4, &(0x7f0000000200)=[0xee00, 0x0, 0xffffffffffffffff, 0xee01]) r6 = geteuid() write$P9_RSTATu(r3, &(0x7f0000000240)={0x8e, 0x7d, 0x2, {{0x0, 0x66, 0x4, 0x0, {0xc, 0x0, 0x6}, 0x20000000, 0x5, 0x80000000, 0xffffffffffffff00, 0xd, 'ppp0:{ppp0\'!}', 0x4, 'ppp0', 0xb, 'md5sum)user', 0x17, 'vmnet1GPLsecurityvmnet1'}, 0x13, '&procvboxnet0user-,', r4, r5, r6}}, 0x8e) tkill(r2, 0x14) [ 391.030398] protocol 88fb is buggy, dev hsr_slave_0 [ 391.035725] protocol 88fb is buggy, dev hsr_slave_1 [ 391.200165] protocol 88fb is buggy, dev hsr_slave_0 [ 391.205738] protocol 88fb is buggy, dev hsr_slave_1 15:21:08 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000014c0)="11dca5055e0bcfec7be070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000620920144f88cd8bf8fa050030cea0e283d9b22703305b8fe23074bc015a41200581e5ef57c5000000000000000bcbb61c10b1f4451c"], 0x1}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 15:21:08 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, 0x0, 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:21:08 executing program 2: ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af00, &(0x7f0000000040)={@my}) r0 = dup(0xffffffffffffff9c) ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f0000000000)=0x98) prctl$PR_GET_SECUREBITS(0x1b) 15:21:08 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 15:21:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0x4d0, 0x0, 0x4000000c], [0xc1]}) 15:21:08 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0xaf, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f0000000380)=0xe8) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x6, 0x1, &(0x7f0000000240)=[{&(0x7f0000000140)="d882d81ed395faf0fcdfda5e82f947cce133112d81f60b030a506b928cfab042747a85f2b1914c3cf1abbf79703eef7a03eef3167a7c9d00a5c8899b545e18da4d8372fe80d9a2cb2a1afc50cb2ff2dfa1c6693dc2eab7519c54bffeabcf9d6babf37e1579be1e58749fc6987429169b2676db6a9e01ce445b75d42625497b222a2ef3ad6a27d37fcbffb3801364a48b1d72b8bbbb680a2d8e05fad7e67aabf6ff63f5e7e6fa2a07a6766f9943f6e3344fd70a297d6d902b6bbaf7580da6738aa817947ad1dfd4fb82e7988fb6f9a1f33bb7", 0xd2, 0x8}], 0x2002800, &(0x7f0000000480)={[{@nonumtail='nnonumtail=1'}, {@shortname_mixed='shortname=mixed'}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'GPL'}}, {@uid_gt={'uid>', r2}}, {@fowner_gt={'fowner>', r3}}, {@measure='measure'}, {@smackfsdef={'smackfsdef', 0x3d, '.lo'}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x75, 0x38, 0x62, 0x64, 0x37, 0x63, 0x77], 0x2d, [0x37, 0x61, 0x3f], 0x2d, [0x38, 0x63, 0x33, 0x32], 0x2d, [0x39, 0x31, 0x35, 0x39], 0x2d, [0x63, 0x7d, 0x37, 0x36, 0x75, 0x76, 0x38, 0x77]}}}]}) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r4 = gettid() recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0xfffffffffffffffd, 0x0) tkill(r4, 0x14) 15:21:08 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, 0x0, 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:21:08 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x0) io_setup(0x7f17, &(0x7f0000000000)=0x0) io_submit(r1, 0x4, &(0x7f0000000580)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x6ff, r0, &(0x7f0000000040)="d45b6bff066fb540fc0a4f35a6fb57822c263a4b152827e57794e9b58bad0336b37cd002dd52a3a89862c6e467fb", 0x2e, 0x0, 0x0, 0x2, 0xffffffffffffff9c}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x7, r0, &(0x7f0000000240)="574df9db0f722f2eaca8f1c792f20ba6cf8ac3ce61ad79bfcae9d544426017729866ab6a294d91da825e6ffcaf8eb5ce4e27949aee8609d163cede16ff1e4063e7a877c723f08ec37af09c889981edfedc963f8cec5a8610b63aee1b36b857612630e70ba589d51c555d70634bd2e5d71dbefda6d77067f3310752c7275827a79d5b84585c4052e0296dd8cbdac8395ec0d8b2357eb551d6cddfbb83a9dc5b327e12", 0xa2, 0x9, 0x0, 0x2, r0}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x9, r0, &(0x7f0000000300)="9877017d105dc14b7f5d0aca81d5733d635f642a977926cf1a42b890ad4e46941a23835410b72cf0cc9986f0e9775fb6dcba1511dbc26328bb2e25117939932c7af625d0c79c4472b420fd0d33f70a4402aa2d2a964d6f9ccb005dbf3af7d7d02723b4e7899730bb338611185828da568499f8c9b38643af8db03c6437d9845c640cde402c5ccb86b76aae53bb28b03c016d211b17040592ebe1cdc341dddb72c9cd730273930dfb013a962a59f5f8062ef16cdd1e2378a39469c9fa1d6eedbc2eafeefc", 0xc4, 0x9, 0x0, 0x3, r0}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7, 0x8, r0, &(0x7f0000000440)="510e101632e09310019070c894a381b04fe6bd985f1306c5902efb2a826094569b7a9f0b72443655ba9b7342f12a1b4ef82e864793aa593e10ebaa2cc860da5123e82ce3bbadd7ecc72b9125273bf720110f842dc2205cfda627bdf6d30552a1ead6168215bca5d78680c680b49cf6719fddb4276cc273f3159438502882187995d6161685e7206f6bb9dcae62eabf4bad8b366463bb00c03c1d6800f356e1329d044932a8c4e6c6f9a9821625d806fa969f59c1fc4c9638226c3019ca0cde96f79e91b05887103f89eb89985dd7b8d66e1273d2fdd6c31f45970873ca4d1bd2065963b8f18eb75d73c60012bdda62df1b8dbb55eca526f972f6869410", 0xfd, 0x7, 0x0, 0x2, r0}]) 15:21:08 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000014c0)="11dca5055e0bcfec7be070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000620920144f88cd8bf8fa050030cea0e283d9b22703305b8fe23074bc015a41200581e5ef57c5000000000000000bcbb61c10b1f4451c"], 0x1}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 391.607815] kvm [11078]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 15:21:08 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af00, &(0x7f0000000040)={@my}) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x1, 0x280c01) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000140)) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000000080)={'nat\x00'}, &(0x7f0000000100)=0x78) 15:21:08 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, 0x0, 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:21:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0x4d0, 0x0, 0x4000000c], [0xc1]}) 15:21:08 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) timer_create(0x4, &(0x7f00000000c0)={0x0, 0x13}, &(0x7f0000000100)=0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x2, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(r3, 0x4038564f, &(0x7f0000000240)={{}, 0x8, 0x7, 0x8}) fallocate(r0, 0x31, 0x4, 0xbde0) ioctl$KVM_REINJECT_CONTROL(r3, 0xae71, &(0x7f00000002c0)={0x6a}) timer_gettime(r2, &(0x7f0000000140)) bind$inet(r1, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0xaf, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x11, 0x5, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r4 = gettid() recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000280)={0x0, r3}) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x800, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f00000001c0)={0x3f, 0x80000001}) tkill(r4, 0x14) 15:21:08 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000014c0)="11dca5055e0bcfec7be070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000620920144f88cd8bf8fa050030cea0e283d9b22703305b8fe23074bc015a41200581e5ef57c5000000000000000bcbb61c10b1f4451c"], 0x1}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 15:21:08 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000014c0)="11dca5055e0bcfec7be070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000620920144f88cd8bf8fa050030cea0e283d9b22703305b8fe23074bc015a41200581e5ef57c5000000000000000bcbb61c10b1f4451c"], 0x1}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 15:21:08 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x0) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:21:08 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af00, &(0x7f0000000040)={@host}) 15:21:08 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000014c0)="11dca5055e0bcfec7be070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000620920144f88cd8bf8fa050030cea0e283d9b22703305b8fe23074bc015a41200581e5ef57c5000000000000000bcbb61c10b1f4451c"], 0x1}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 15:21:08 executing program 5: r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000000)) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r1, 0x0) [ 391.862587] kvm [11110]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 15:21:08 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x0) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:21:08 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000014c0)="11dca5055e0bcfec7be070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000620920144f88cd8bf8fa050030cea0e283d9b22703305b8fe23074bc015a41200581e5ef57c5000000000000000bcbb61c10b1f4451c"], 0x1}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 15:21:08 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x88000) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af00, &(0x7f0000000040)={@my}) 15:21:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0x4d0, 0x0, 0x4000000c], [0xc1]}) 15:21:08 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) get_mempolicy(&(0x7f0000000240), &(0x7f0000000280), 0x88cf, &(0x7f0000f76000/0x3000)=nil, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f00000002c0)={0x3, 0x0, @pic={0xbec1, 0xcea, 0x1, 0xffffffff00000000, 0x6, 0x1, 0x3, 0x9, 0x4, 0x4, 0x90b, 0x4, 0x7f, 0x1, 0x7ff, 0x1}}) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000180)=0x4, &(0x7f00000001c0)=0x4) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x0) ioctl$TCGETX(r0, 0x5432, &(0x7f00000003c0)) [ 391.990130] protocol 88fb is buggy, dev hsr_slave_0 [ 391.995333] protocol 88fb is buggy, dev hsr_slave_1 [ 392.136182] kvm [11150]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 [ 392.240188] protocol 88fb is buggy, dev hsr_slave_0 [ 392.245355] protocol 88fb is buggy, dev hsr_slave_1 [ 392.310142] protocol 88fb is buggy, dev hsr_slave_0 [ 392.315286] protocol 88fb is buggy, dev hsr_slave_1 15:21:11 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0xaf, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = gettid() ioctl$FICLONE(r0, 0x40049409, r1) recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SIOCGIFMTU(r3, 0x8921, &(0x7f0000000140)) tkill(r2, 0x14) syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x7ff, 0x200) 15:21:11 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x0) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:21:11 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000014c0)="11dca5055e0bcfec7be070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000620920144f88cd8bf8fa050030cea0e283d9b22703305b8fe23074bc015a41200581e5ef57c5000000000000000bcbb61c10b1f4451c"], 0x1}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r1, 0x17) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 15:21:11 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000240)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000000)=0x100000000, 0x8) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x0) execveat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)=[&(0x7f0000000180)='^,wlan0\'vboxnet0\x00', &(0x7f00000001c0)='/dev/swradio#\x00', &(0x7f0000000200)='/dev/swradio#\x00'], &(0x7f0000000400)=[&(0x7f00000002c0)='/dev/swradio#\x00', &(0x7f0000000300)='user/trusted)procmd5sum\x00', &(0x7f0000000340)='\xb0posix_acl_accesscgroupkeyring@ppp1}eth0\x00', &(0x7f0000000380)='/dev/swradio#\x00', &(0x7f00000003c0)='/dev/swradio#\x00'], 0x1500) 15:21:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0x4d0, 0x0, 0x4000000c], [0xc1]}) 15:21:11 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x80000, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af00, &(0x7f0000000000)={@my}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000001340)={{0x2, 0x4e24, @local}, {0x306, @dev={[], 0xc}}, 0x8, {0x2, 0x4e24, @empty}, 'bridge0\x00'}) finit_module(r0, &(0x7f0000001300)='/dev/vcs\x00', 0x1) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000140)={'nat\x00', 0x0, 0x0, 0x0, [], 0x7, &(0x7f0000001200)=[{}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}]}, 0xe8) 15:21:11 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000014c0)="11dca5055e0bcfec7be070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000620920144f88cd8bf8fa050030cea0e283d9b22703305b8fe23074bc015a41200581e5ef57c5000000000000000bcbb61c10b1f4451c"], 0x1}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r1, 0x17) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 15:21:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0x4d0, 0x0, 0x4000000c], [0xc1]}) 15:21:11 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:21:11 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) sendmsg$inet(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000240)="b73a0ad01fb3488906e33f736dac61577077447b290280479b01a1c1c3c2f4cbcfc0bb4a549ac0f4e01ab5646cb63a28c09b74d447aad9c2de5bed06802e57a4e0034d3f1651b9dd92076f83efd433bd5663de092968e76b6f731ec2ddc7911251780e81380cbfca99425a025ae140b5ff405a87472ae6ec370cdf832809832ecfa8e93e8cd5910cbd4596ca1a4514", 0x8f}, {&(0x7f0000000300)="47385ba74d78cf2bf9e2ae8aab8f6a7c4733794fe7ddb8d603e8ab3a322bad23c23d70535b588a71000ed7ff1c8305c5a5f047af23be3c0df8a3f9dbf1ec01d072f3f5c237ebfadc443c048615b1225335303f6d3b26886b59b9329c3437df0275db6778c38099b8caee3015423add94c5604fe4a23330ce3de6dacb112052d97671c7bb46de958280ef3e63a17889fdbe63c109d974aa5d78ad45a746234ae96cb11e141454f47786a96cc4a7689a53b2310bef27ef4c619fad21736bf2a33ddfca33e5bb29da154b01964d1725ba3ee2874b5f183ee067d7066485af25eae01fd25566c1485ad673191c719257fc10", 0xf0}, {&(0x7f0000000000)="62e184e36a87bb39e11371f9f903941fe3e8d2fb8d97748d37bec3f425573c2cb28288466885a8fa2b050d8766ce3283d82f4d89584725ddb3ad3d21d0afec63206eff371a43286068ca7b3b9b8d95bc5ac4e63ee14e37bca0c588723ddf84084a2532", 0x63}, {&(0x7f0000000180)="f0519c52ff47fe4474d8933a8991143fdb16ef37e427209d0518796b2b0cdd42af38aec1a327dc4dbd26995aaf1816edb6f8ac3f253d592811af41bf9b8ec1f4cd043b78c7b0efc4d21b497a72bf9be07432c6dcd962e036f83a04d61f58bda3951e246c7f53a445ddf50828d3ff016643019303222cad0dfe7d7b6ec20d", 0x7e}, {&(0x7f0000000400)="adf7a4879dffba0b89cca7b44082289ac958517ee6a52a736c165ba2630f3adfd0569a52f370e4af513c24bfdfd07107e99186f37547391ae5d8c07bda6b118749c1f51426d32e80a5141df1fc642a63708b3d578695e7063f42a2c990e45ba2061d69ac7d7b58f617490da50c179e6b31e396992424d9196a4d66812bd4ac687dd0de4d78ba763b2b55c3f55dc4f52c7bfc2cbd7c8e31bec3c070f26095fcea15491be508e95d0d5973d1f59c0cec1aaf5432c669cccc94", 0xb8}, {&(0x7f00000004c0)="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", 0x1000}, {&(0x7f00000014c0)="cd99bcf3b188c91403e5422ce62e", 0xe}, {&(0x7f0000001500)="217a72095525a8376040edd2490094edb11d4083aee0df971cf99f16", 0x1c}], 0x8, &(0x7f00000015c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x69}}, @ip_retopts={{0x64, 0x0, 0x7, {[@noop, @timestamp={0x44, 0xc, 0x80000000, 0x0, 0x10000, [{[@dev={0xac, 0x14, 0x14, 0x1f}], 0x80000000}]}, @cipso={0x86, 0x33, 0x1ff, [{0x0, 0xf, "b39fa78526395438f0b67c69db"}, {0x0, 0xb, "0bc8d9a2b79a864170"}, {0x0, 0x9, "77afe081c46b0a"}, {0x7, 0x4, "ac27"}, {0x7, 0x6, "9191b492"}]}, @ra={0x94, 0x6, 0x2}, @timestamp={0x44, 0x8, 0xc8, 0x1, 0x1ff, [{[], 0x3ff}]}, @ra={0x94, 0x6, 0x8001}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x98}, 0x20000080) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x0) 15:21:11 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000014c0)="11dca5055e0bcfec7be070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000620920144f88cd8bf8fa050030cea0e283d9b22703305b8fe23074bc015a41200581e5ef57c5000000000000000bcbb61c10b1f4451c"], 0x1}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r1, 0x17) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 15:21:11 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x2, 0x1, &(0x7f0000000080)=""/195, &(0x7f00000001c0)=""/207, &(0x7f00000002c0), 0x4000}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af00, &(0x7f0000000040)) 15:21:11 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0xaf, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/mls\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000180)={0x1}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0xc, &(0x7f00000000c0)='{(XGPL[ppp0\x00', 0xffffffffffffffff}, 0x30) timer_create(0xfffffffffffffffd, &(0x7f0000cd0000)={0x0, 0x2c, 0x0, @tid=r3}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r4 = gettid() recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) tkill(r4, 0x14) 15:21:11 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) fanotify_init(0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ceph(&(0x7f00000001c0)='ceph\x00', &(0x7f0000000240)='./file0\x00', 0xe5, 0x9, &(0x7f00000006c0)=[{&(0x7f0000000280)="d6cdbb6887", 0x5, 0x1}, {&(0x7f00000002c0)="5324b55a1332c687fd477bf4300b242b04b64ec466701066d0605bbe15102a1f4277a59338cf", 0x26}, {&(0x7f0000000300)="fa50f4c6dca6543193a08752386b94429bdda82146ef1755aabd6b3752e5491c5ee902494c3329f113927801f1b72ac9fd48eb39783077a262e4fc2ba330132ff5bfde85", 0x44, 0xc94}, {&(0x7f0000000380)="55d6c26968a15ad2714562cae5aa36e7a9155ba23f5b3bebe3a517464de877564c184c690d54e9748ae4f8884886ae63ae", 0x31, 0x8}, {&(0x7f00000003c0)="51756967ec9c84111dfc5a6c8c6ca6bdb466fddb462969bdf8b4520c8d956c58251f5a86b03b2ad224fc3609fde7c4ae49f0629a7c7184000f5e00e2da5009cb0be99a284ea488f5f0c359be74b4d33d0dd6393cc2b348389a92941b65ef36400ca4e156771fdd", 0x67, 0x7ff}, {&(0x7f0000000440)="1800c5f997248126580a535ab3374486732cf4c38be8abaa0f698626372244d5c275ab05aadd78e0a3f58389b0f122daddc873ea411a17327c6515feffc00f320b9883c5c8db4601cb5ab05e74bb2f89cd120b2b127ef40bc341f04729cf7ca00df9a6b4", 0x64, 0xe8d}, {&(0x7f00000004c0)="0d59460fc20dad7445a6c1d1c9fb49c481753f1c96cdc2b6c3a17ee33227c7191dc317417e7ec9b8d15d27ea05eb3db4303048d23ad471a5928205829f069301bf36223cb58f6cfabb4b6a1806ce4a62b3e0140da4ce67071f60d3db207d9c294848b4d71bae68856ec1e69a201d0054db3db7885db6edf2516da02bfd408f3af21e00087883d7a3682985007617e1dc771e5f927af453c21dc9a7cce0622ef4e908cce1ee2cf0ae3164878570d85e73ed0971200dc8c0", 0xb7, 0x10000}, {&(0x7f0000000580)="5e4aab9030138d8e8e22f9010ca9dcd5a67cee108efae889960b63888a4002b60fd4987ca9ea9629360517db84d0a0ec61c2c29ced6b0ea78b784fbd91e40d0575d0d1a19a2e075fe5a855a838a0c779a724aff1cc2e4500598ec320bacc4595f7ab6653ae0ecfb46eee6b7c2b1d603f4a956679267ba96de8e48c1caae4717ebe8b88d582940b46d7e859c7ec08a8eed4317c85069a39a2e16561c6ba4529864d96862b53f1b7de5e6b791f452ed2869ed22dac5f643417e91c68c42a86d681", 0xc0, 0x8}, {&(0x7f0000000640)="72036f6afb9789ad36f7a784fde3beac406160ddd70d04ac4e349d3dba192a307d9442c5ded5de4af3a233f92f7c6b9e74af41c288684b28673ff9f20c485c6d48df2d8e61348de68efe6c20e5ccf3c7d6c628", 0x53, 0x649a}], 0x400, &(0x7f00000007c0)='/dev/swradio#\x00') ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x8200, 0x80) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000180)='./file0\x00') 15:21:11 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:21:11 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000014c0)="11dca5055e0bcfec7be070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000620920144f88cd8bf8fa050030cea0e283d9b22703305b8fe23074bc015a41200581e5ef57c5000000000000000bcbb61c10b1f4451c"], 0x1}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(0x0, 0x17) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 15:21:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0x4d0, 0x0, 0x4000000c], [0xc1]}) 15:21:11 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:21:11 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af00, &(0x7f0000000040)={@my}) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x7, 0x103080) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000080)={0x1000, 0xea4}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) [ 395.104639] ceph: device name is missing path (no : separator in /dev/loop5) 15:21:11 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, 0x0, 0x0) close(r0) 15:21:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0x4d0, 0x0, 0x4000000c], [0xc1]}) [ 395.195736] ceph: device name is missing path (no : separator in /dev/loop5) 15:21:11 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, 0x0, 0x0) close(r0) 15:21:11 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000240)) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x0) 15:21:11 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x100000000, 0x40) ioctl$SCSI_IOCTL_PROBE_HOST(r1, 0x5385, &(0x7f00000000c0)) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x56000, 0x0) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000100)) ioctl$RTC_UIE_ON(r2, 0x7003) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000000)=""/17, &(0x7f0000000140)=0x11) ioctl$UI_SET_RELBIT(r2, 0x40045566, 0xfffffffffffffffd) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af00, &(0x7f0000000040)={@my}) [ 396.150167] net_ratelimit: 18 callbacks suppressed [ 396.150172] protocol 88fb is buggy, dev hsr_slave_0 [ 396.160549] protocol 88fb is buggy, dev hsr_slave_1 [ 396.390140] protocol 88fb is buggy, dev hsr_slave_0 [ 396.395314] protocol 88fb is buggy, dev hsr_slave_1 [ 396.470133] protocol 88fb is buggy, dev hsr_slave_0 [ 396.475270] protocol 88fb is buggy, dev hsr_slave_1 [ 396.870150] protocol 88fb is buggy, dev hsr_slave_0 [ 396.875301] protocol 88fb is buggy, dev hsr_slave_1 [ 397.271335] protocol 88fb is buggy, dev hsr_slave_0 [ 397.276421] protocol 88fb is buggy, dev hsr_slave_1 15:21:14 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getitimer(0x2, &(0x7f00000000c0)) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0xaf, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = gettid() recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) tkill(r2, 0x14) 15:21:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0x4d0, 0x0, 0x4000000c], [0xc1]}) 15:21:14 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, 0x0, 0x0) close(r0) 15:21:14 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x0) 15:21:14 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x102, 0x0) fadvise64(r0, 0x0, 0xd2, 0x1) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af00, &(0x7f0000000040)={@my}) 15:21:14 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000014c0)="11dca5055e0bcfec7be070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000620920144f88cd8bf8fa050030cea0e283d9b22703305b8fe23074bc015a41200581e5ef57c5000000000000000bcbb61c10b1f4451c"], 0x1}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(0x0, 0x17) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 15:21:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0x4d0, 0x0, 0x4000000c], [0xc1]}) 15:21:14 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) close(r0) 15:21:14 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x20000000, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x0) 15:21:14 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af00, &(0x7f0000000040)={@my}) ioctl$TCSBRKP(r0, 0x5425, 0x3d) 15:21:14 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x3, @broadcast}, 0xfffffffffffffeab) sendto$inet(r1, 0x0, 0xaf, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) r2 = fcntl$getown(r1, 0x9) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x4) timer_create(0x5, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @tid=r2}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendto(r0, &(0x7f0000000000), 0x0, 0x4000004, &(0x7f0000000100)=@ax25={{0x3, @default, 0x4}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80) r3 = gettid() recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) tkill(r3, 0x15) 15:21:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0x4d0, 0x0, 0x4000000c], [0xc1]}) 15:21:14 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x6, 0xfffffffffffffffd, {0xb, @vbi={0x7f, 0x4, 0x57, 0x30395056, [0x2, 0x49be], [0xfa1, 0xff], 0x109}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x0) 15:21:14 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1a, &(0x7f0000000000)=""/28, &(0x7f0000000040)=0x1c) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x0) renameat(r0, &(0x7f0000000240)='./file0\x00', r0, &(0x7f0000000280)='./file0\x00') ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000001c0)=@req={0x28, &(0x7f0000000180)={'team_slave_1\x00', @ifru_names='bridge_slave_0\x00'}}) 15:21:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0x4d0, 0x0, 0x4000000c], [0xc1]}) 15:21:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0x4d0, 0x0, 0x4000000c], [0xc1]}) 15:21:15 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x0) 15:21:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000014c0)="11dca5055e0bcfec7be070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000620920144f88cd8bf8fa050030cea0e283d9b22703305b8fe23074bc015a41200581e5ef57c5000000000000000bcbb61c10b1f4451c"], 0x1}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(0x0, 0x17) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 15:21:17 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af00, &(0x7f0000000040)={@my}) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x29, 0x8000) r2 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x7ff, 0x10000) renameat(r1, &(0x7f0000000080)='./file0\x00', r2, &(0x7f0000000100)='./file0\x00') write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f0000000140)={0x2, 0x7f}, 0x2) [ 401.440238] net_ratelimit: 22 callbacks suppressed [ 401.440245] protocol 88fb is buggy, dev hsr_slave_0 [ 401.458868] protocol 88fb is buggy, dev hsr_slave_1 [ 401.590269] protocol 88fb is buggy, dev hsr_slave_0 [ 401.595461] protocol 88fb is buggy, dev hsr_slave_1 [ 402.390535] protocol 88fb is buggy, dev hsr_slave_0 [ 402.395659] protocol 88fb is buggy, dev hsr_slave_1 [ 402.630210] protocol 88fb is buggy, dev hsr_slave_0 [ 402.635329] protocol 88fb is buggy, dev hsr_slave_1 [ 402.710248] protocol 88fb is buggy, dev hsr_slave_0 [ 402.715390] protocol 88fb is buggy, dev hsr_slave_1 [ 406.550183] net_ratelimit: 18 callbacks suppressed [ 406.555193] protocol 88fb is buggy, dev hsr_slave_0 [ 406.560307] protocol 88fb is buggy, dev hsr_slave_1 [ 406.790168] protocol 88fb is buggy, dev hsr_slave_0 [ 406.795274] protocol 88fb is buggy, dev hsr_slave_1 [ 406.870200] protocol 88fb is buggy, dev hsr_slave_0 [ 406.875341] protocol 88fb is buggy, dev hsr_slave_1 [ 407.270262] protocol 88fb is buggy, dev hsr_slave_0 [ 407.275797] protocol 88fb is buggy, dev hsr_slave_1 [ 407.670223] protocol 88fb is buggy, dev hsr_slave_0 [ 407.675403] protocol 88fb is buggy, dev hsr_slave_1 15:21:25 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) close(r0) 15:21:25 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0x4d0, 0x0, 0x4000000c], [0xc1]}) 15:21:25 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x0) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/context\x00', 0x2, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000100}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0xd0, r1, 0x29, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe8}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x7541}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9d3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x38000000000000}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9a69}]}, 0xd0}, 0x1, 0x0, 0x0, 0x1}, 0xc000) 15:21:25 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000014c0)="11dca5055e0bcfec7be070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000620920144f88cd8bf8fa050030cea0e283d9b22703305b8fe23074bc015a41200581e5ef57c5000000000000000bcbb61c10b1f4451c"], 0x1}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x0) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 15:21:25 executing program 2: ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)={@my}) syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x1f, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x3) 15:21:25 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4, @loopback}, 0x10) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x4, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = gettid() recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000000c0)="ecfea4bbe7e75395be0ccf610eeaacc6c8f52aac2bc8dad17889ae3bc4237509abed2edd39bbc6499a2a7277dedcb0e1c252a44365dc6d383eacd6a8ea521577f34138f977f6a1e8b7c911173f1051c336cf9e3b84180f", 0x57, 0x800, &(0x7f0000000140)={0x2, 0x4e21, @multicast1}, 0x10) tkill(r2, 0x14) 15:21:25 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af00, &(0x7f0000000040)={@my}) r1 = shmget$private(0x0, 0x2000, 0x80, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000080)=""/148) 15:21:25 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000000)) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x0) 15:21:25 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0x4d0, 0x0, 0x4000000c], [0xc1]}) [ 408.878238] kvm [11330]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 15:21:25 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) ioctl$DRM_IOCTL_AGP_ENABLE(r0, 0x40086432, &(0x7f0000000000)=0x9) ioctl$VIDIOC_S_JPEGCOMP(r0, 0x408c563e, &(0x7f0000000240)={0x7, 0x0, 0x0, "6811497b6689be65841feeecc71ae91bb535e83f02e4e1ab845c60049a4df9d814df8050b1073419a23615a92e23d57421720fb1117e9085060e05c5", 0x7, "d15f627bde27329ee4463b3c041853363279da42a9d16e157cbbdf6d0902ce715c1f435d7a152d94951970ea300e0a6da3849d612f460fd489fb9e5c", 0x20}) 15:21:25 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af00, &(0x7f0000000040)={@my}) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xfffffffffffffffd, 0x200400) ioctl$TCSETX(r1, 0x5433, &(0x7f0000000080)={0x400, 0x7, [0x0, 0x9, 0x100000000000000, 0x3f, 0x7], 0x2f7}) 15:21:25 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffff7fffffff, 0x11, r0, 0x0) [ 408.977313] kvm [11352]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 [ 411.830109] net_ratelimit: 22 callbacks suppressed [ 411.830114] protocol 88fb is buggy, dev hsr_slave_0 [ 411.840304] protocol 88fb is buggy, dev hsr_slave_1 [ 411.990184] protocol 88fb is buggy, dev hsr_slave_0 [ 411.995300] protocol 88fb is buggy, dev hsr_slave_1 [ 412.790171] protocol 88fb is buggy, dev hsr_slave_0 [ 412.795276] protocol 88fb is buggy, dev hsr_slave_1 [ 413.030187] protocol 88fb is buggy, dev hsr_slave_0 [ 413.035413] protocol 88fb is buggy, dev hsr_slave_1 [ 413.110200] protocol 88fb is buggy, dev hsr_slave_0 [ 413.115305] protocol 88fb is buggy, dev hsr_slave_1 [ 416.950179] net_ratelimit: 18 callbacks suppressed [ 416.950183] protocol 88fb is buggy, dev hsr_slave_0 [ 416.960565] protocol 88fb is buggy, dev hsr_slave_1 [ 417.190162] protocol 88fb is buggy, dev hsr_slave_0 [ 417.195261] protocol 88fb is buggy, dev hsr_slave_1 [ 417.270171] protocol 88fb is buggy, dev hsr_slave_0 [ 417.275309] protocol 88fb is buggy, dev hsr_slave_1 [ 417.670157] protocol 88fb is buggy, dev hsr_slave_0 [ 417.675280] protocol 88fb is buggy, dev hsr_slave_1 [ 418.070182] protocol 88fb is buggy, dev hsr_slave_0 [ 418.075406] protocol 88fb is buggy, dev hsr_slave_1 15:21:35 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) close(r0) 15:21:35 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x1000, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) r2 = getuid() ioprio_set$uid(0x3, r2, 0x3) getsockopt$inet_tcp_int(r1, 0x6, 0x908df96ed2b53589, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f0000000080)={0x0, @reserved}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0x7, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000b75000/0x4000)=nil, 0x4000, 0x8, 0x11, r1, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000340)={0x7, 0x40, 0x4, {0x0, @sliced={0x6, [0x3, 0xffff, 0x7, 0x3, 0x3, 0x7, 0x8000, 0x7f, 0xe856, 0x4e, 0x1, 0xda6c, 0x4, 0x71, 0x1, 0xff, 0xb066, 0x6486, 0x6, 0xfffffffffffffffe, 0x2000, 0x100000001, 0xfff, 0x1, 0x4, 0x1, 0x9, 0xfffffffffffffe01, 0x6, 0x5, 0x1, 0xffffffff7fffffff, 0x0, 0x9, 0x400, 0x4, 0x80000000, 0x4, 0xff, 0x6f37aade, 0x3, 0x0, 0x4, 0x7, 0x2, 0x400, 0x2cc2, 0x3], 0xf}}}) sendfile(r0, r0, 0x0, 0xad1) ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f0000000140)) 15:21:35 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0x4d0, 0x0, 0x4000000c], [0xc1]}) 15:21:35 executing program 2: r0 = getpgid(0xffffffffffffffff) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$rose(r1, 0x104, 0x5, &(0x7f0000000100)=0x8, 0x4) sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x4) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af00, &(0x7f0000000040)={@my}) 15:21:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0xaf, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = gettid() recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) fstatfs(r0, &(0x7f00000000c0)=""/152) tkill(r2, 0x14) 15:21:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000014c0)="11dca5055e0bcfec7be070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000620920144f88cd8bf8fa050030cea0e283d9b22703305b8fe23074bc015a41200581e5ef57c5000000000000000bcbb61c10b1f4451c"], 0x1}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x0) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 15:21:35 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000c88000/0x3000)=nil, 0x3000, 0xffffffffffffffff, 0x11, r0, 0x0) 15:21:35 executing program 0: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0x4d0, 0x0, 0x4000000c], [0xc1]}) 15:21:35 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00') r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, r1, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x40, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x4) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x7ff, 0x20100) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000180)={{0xc, @multicast2, 0x4e21, 0x2, 'lc\x00', 0x28, 0x401, 0x7b}, {@remote, 0x4e21, 0x4, 0x9, 0xffff, 0x80}}, 0x44) r3 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r3, 0x0) 15:21:35 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0xfffffffffffffffd, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x0) [ 419.079379] kvm [11373]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 15:21:35 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af00, &(0x7f0000000040)={@my}) r1 = dup3(r0, r0, 0x80000) ioctl$VIDIOC_ENUMAUDIO(r1, 0xc0345641, &(0x7f0000000000)={0x2, "065e23e5afa9c25232da21d01f555788db87ff6576b4cc522abfe68977ffca4f", 0x0, 0x1}) 15:21:35 executing program 0: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0x4d0, 0x0, 0x4000000c], [0xc1]}) [ 419.145387] kvm [11395]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 [ 419.190540] kvm [11406]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 [ 422.230222] net_ratelimit: 22 callbacks suppressed [ 422.230226] protocol 88fb is buggy, dev hsr_slave_0 [ 422.240313] protocol 88fb is buggy, dev hsr_slave_1 [ 422.390223] protocol 88fb is buggy, dev hsr_slave_0 [ 422.395670] protocol 88fb is buggy, dev hsr_slave_1 [ 423.190141] protocol 88fb is buggy, dev hsr_slave_0 [ 423.195227] protocol 88fb is buggy, dev hsr_slave_1 [ 423.430187] protocol 88fb is buggy, dev hsr_slave_0 [ 423.435595] protocol 88fb is buggy, dev hsr_slave_1 [ 423.510166] protocol 88fb is buggy, dev hsr_slave_0 [ 423.515341] protocol 88fb is buggy, dev hsr_slave_1 [ 427.350187] net_ratelimit: 18 callbacks suppressed [ 427.350192] protocol 88fb is buggy, dev hsr_slave_0 [ 427.360380] protocol 88fb is buggy, dev hsr_slave_1 [ 427.590182] protocol 88fb is buggy, dev hsr_slave_0 [ 427.595427] protocol 88fb is buggy, dev hsr_slave_1 [ 427.670181] protocol 88fb is buggy, dev hsr_slave_0 [ 427.675315] protocol 88fb is buggy, dev hsr_slave_1 [ 428.080165] protocol 88fb is buggy, dev hsr_slave_0 [ 428.085272] protocol 88fb is buggy, dev hsr_slave_1 [ 428.470193] protocol 88fb is buggy, dev hsr_slave_0 [ 428.475449] protocol 88fb is buggy, dev hsr_slave_1 15:21:45 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(0xffffffffffffffff) 15:21:45 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0x9, 0x0, 0x3ff, 0xfac, 0x0}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000180)={r1, 0x68, "ddd0a9c798084f95650b9411dd1e3432661fe19846bef303270db53e75eb1ee34487044250e185b05bfde64d34d9eabc8c3a912b9aad6d390c573f8f4b2648fa6f21c422ca1e47687f091c35a58caa84fba1de5754cabb60f9bb5fe165b3ee145e936a1d921a9bfc"}, &(0x7f0000000240)=0x70) 15:21:45 executing program 0: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0x4d0, 0x0, 0x4000000c], [0xc1]}) 15:21:45 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0x6, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, 0x0, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$capi20(0xffffffffffffff9c, 0x0, 0x200000, 0x0) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000100)=0x1c) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') ftruncate(r3, 0x7fffffff) chown(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) clone(0x900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_ax25_SIOCDELRT(r2, 0x890c, &(0x7f0000000300)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @null, @netrom, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}) execve(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af00, &(0x7f0000000040)={@my}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) 15:21:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000014c0)="11dca5055e0bcfec7be070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000620920144f88cd8bf8fa050030cea0e283d9b22703305b8fe23074bc015a41200581e5ef57c5000000000000000bcbb61c10b1f4451c"], 0x1}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x0) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 15:21:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0xaf, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = gettid() recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x4100, 0x0) ioctl$VT_OPENQRY(r3, 0x5600, &(0x7f0000000100)) tkill(r2, 0x14) 15:21:45 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x0) ioctl$sock_x25_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@null=' \x00', 0xe, 'nlmon0\x00'}) 15:21:45 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0x4d0, 0x0, 0x4000000c], [0xc1]}) 15:21:46 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(0xffffffffffffffff) [ 429.310916] kvm [11416]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 15:21:46 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0xaf, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000140)={r2, 0x7476}, 0x8) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = gettid() recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) tkill(r3, 0x14) 15:21:46 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) lsetxattr$security_smack_entry(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.SMACK64EXEC\x00', &(0x7f0000000180)='*\x00', 0x2, 0x3) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x200000, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x0) syz_open_dev$swradio(&(0x7f00000001c0)='/dev/swradio#\x00', 0x0, 0x2) 15:21:46 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0x4d0, 0x0, 0x4000000c], [0xc1]}) 15:21:46 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000000)) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) socket$bt_rfcomm(0x1f, 0x4b05f49e916fdcec, 0x3) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x80000, 0x0) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) 15:21:46 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af00, &(0x7f0000000040)={@my}) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000080)=""/223) r2 = semget$private(0x0, 0x2, 0x80) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000000)) [ 429.402930] kvm [11437]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 15:21:46 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(0xffffffffffffffff) 15:21:46 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0x4d0, 0x0, 0x4000000c], [0xc1]}) [ 429.454935] kvm [11454]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 [ 429.565414] kvm [11469]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 15:21:48 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="a8ad299c4880345eb2d640d0749d9d923fd36d604170fc4544bb3f3414c578c6f51d4666abdd") r1 = socket$inet(0x2, 0x3, 0x8) bind$inet(r1, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0xaf, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x9}}, 0x0) r4 = gettid() ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000140)={0x3, 0x6, 0x64fc, 'queue0\x00'}) recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) tkill(r4, 0x14) 15:21:48 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000014c0)="11dca5055e0bcfec7be070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000620920144f88cd8bf8fa050030cea0e283d9b22703305b8fe23074bc015a41200581e5ef57c5000000000000000bcbb61c10b1f4451c"], 0x1}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$cont(0xffffffffffffffff, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 15:21:48 executing program 1: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000469ffc)=0x7fe, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000cd2ff0)={0x2, 0x4e24}, 0x10) mmap(&(0x7f0000000000/0xda6000)=nil, 0xda6000, 0x3, 0x64031, 0xffffffffffffffff, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, 0x0, &(0x7f0000001140)) recvmsg(r0, &(0x7f0000edffc8)={0x0, 0x0, 0x0, 0x0, &(0x7f0000603000)=""/81, 0x51, 0x100000000000000}, 0x40002102) 15:21:48 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xd976, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af00, &(0x7f0000000040)={@my}) 15:21:48 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xfffffffffffffff8, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x0) syz_read_part_table(0x3, 0x4, &(0x7f0000000340)=[{&(0x7f0000000000)="3a35fad5aebbe337fc5a676a4ce306ca7c85d227186edd2bdab3de013c9b8edd6f70285836741f6cbf69", 0x2a, 0x3}, {&(0x7f0000000180)="4cc4e51abb72884c10cd3e0ffdae17aebdb62aa83dff3381869b37b5b4c9983b38a2d78afe7b2c4c8b085b6350b6a06637f0faae63f0cf06340ce5e2f6b84a0265", 0x41}, {&(0x7f0000000240)="9cabf9d9e0cf5e17ded5eba4f5a752ee26b97437adf9ec91b8132d5cba66e1c1b685e183119591336068bfb0c6ecbd4e79afcddbcea89f1af3968383e9aa426513ece0f6f42522476d5d4dfab2b79ce92030c043e14d76c8da8f103b3aec4deef4dcf0ddb7006a0c9a06ea", 0x6b, 0x5}, {&(0x7f00000002c0)="791b9b4962a84c02002bc4f04e5c53175c15f8b0e906bbb4adc350798748053b0575dceafcd211358d077e1c682904030eae41cf1bc1eda0287c2e932ee9271771d670548ee3d2b8eb6d0a8dd815021596e834d3342e1b77a6a3cef863443dbf939b550f5e600084606bf270742919a087b6bab1da0019", 0x77, 0x5}]) 15:21:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0x4d0, 0x0, 0x4000000c], [0xc1]}) 15:21:48 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb7fc86d4f66732e66617400020341000500077008f8", 0x16}], 0x8000, 0x0) 15:21:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0x4d0, 0x0, 0x4000000c], [0xc1]}) 15:21:49 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x0) [ 432.333558] kvm [11481]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 15:21:49 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af00, &(0x7f0000000040)={@my}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x101000, 0x81) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000340)={{{@in=@multicast1, @in=@multicast2, 0x4e21, 0x9, 0x4e20, 0x0, 0xa, 0x0, 0xa0, 0xff, r2, r3}, {0x400, 0x1, 0xffffffff, 0x84, 0x5, 0x726, 0xffff, 0x80}, {0x9, 0x9, 0x6}, 0x2, 0x6e6bb5, 0x0, 0x1, 0x2, 0x3}, {{@in=@empty, 0x4d5, 0x7e}, 0x2, @in6=@local, 0x0, 0x3, 0x3, 0x5881, 0x10001, 0x9, 0xfff}}, 0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6}}, &(0x7f00000001c0)=0xe8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000440)={0x200}, 0x1) getdents(r1, &(0x7f0000000480)=""/156, 0x9c) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vcan0\x00', r4}) 15:21:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0x4d0, 0x0, 0x4000000c], [0xc1]}) [ 432.380856] kvm [11502]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 15:21:49 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) fcntl$getflags(r0, 0x1) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x0) [ 432.467779] kvm [11513]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 [ 432.630142] net_ratelimit: 22 callbacks suppressed [ 432.630146] protocol 88fb is buggy, dev hsr_slave_0 [ 432.640588] protocol 88fb is buggy, dev hsr_slave_1 [ 432.790162] protocol 88fb is buggy, dev hsr_slave_0 [ 432.795309] protocol 88fb is buggy, dev hsr_slave_1 [ 433.590142] protocol 88fb is buggy, dev hsr_slave_0 [ 433.595404] protocol 88fb is buggy, dev hsr_slave_1 [ 433.830138] protocol 88fb is buggy, dev hsr_slave_0 [ 433.835287] protocol 88fb is buggy, dev hsr_slave_1 [ 433.910150] protocol 88fb is buggy, dev hsr_slave_0 [ 433.915432] protocol 88fb is buggy, dev hsr_slave_1 15:21:51 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xaf, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x36, 0x4, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x77359400}}, 0x0) r1 = gettid() recvmmsg(r0, &(0x7f0000003cc0)=[{{&(0x7f0000000180)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x0, &(0x7f0000000680)=[{&(0x7f0000000200)=""/193}, {&(0x7f0000000300)=""/157}, {&(0x7f00000003c0)=""/254}, {&(0x7f00000004c0)=""/98}, {&(0x7f0000000540)=""/25}, {&(0x7f0000000580)=""/226}], 0x0, &(0x7f0000000700)=""/126}, 0x3}, {{0x0, 0x0, &(0x7f0000003c00)=[{&(0x7f0000000780)=""/23}, {&(0x7f00000007c0)=""/237}, {&(0x7f0000000b00)=""/4096}, {&(0x7f00000008c0)=""/174}, {&(0x7f0000000980)=""/247}, {&(0x7f0000001b00)=""/124}, {&(0x7f0000001b80)=""/4096, 0x300}, {&(0x7f0000002b80)=""/118}, {&(0x7f0000002c00)=""/4096}], 0x0, &(0x7f0000000a80)=""/7, 0xffffffffffffff8b}, 0x1ff}], 0x4000024, 0x101, 0x0) tkill(r1, 0x14) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vfio/vfio\x00', 0x80002, 0x0) write$rfkill(r2, &(0x7f0000000ac0)={0x1ff, 0x5, 0x1, 0x1}, 0x8) r3 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x8000) setsockopt$nfc_llcp_NFC_LLCP_RW(r3, 0x118, 0x0, &(0x7f00000000c0)=0x2ae, 0x4) 15:21:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000014c0)="11dca5055e0bcfec7be070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000620920144f88cd8bf8fa050030cea0e283d9b22703305b8fe23074bc015a41200581e5ef57c5000000000000000bcbb61c10b1f4451c"], 0x1}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$cont(0xffffffffffffffff, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 15:21:51 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000000)=0x1) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000040)=0x18, 0x4) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0x8000b, @sdr={0x4c314356, 0x400000004000}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x1000001, 0x11, r0, 0x0) 15:21:51 executing program 2: ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af00, &(0x7f00000000c0)={@my}) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x6, 0x2000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff, 0x1, 0x8, 0x0, 0x2}}) 15:21:51 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0x4d0, 0x0, 0x4000000c], [0xc1]}) 15:21:51 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb7fc86d4f66732e66617400020341000500077008f8", 0x16}], 0x8000, 0x0) 15:21:52 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x7a79, 0x80000) syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x940, 0x4, &(0x7f0000000380)=[{&(0x7f0000000100)="2135ac9de99bb1f31f1ff96a6b169ece1cfea85fbf6e6b091f94286bfdec49b67596292ccb18c58de5a0fdeb1f9f93c26e389594346c9d88733e0deedd50af46c065e33df0d68079c1852a50088ac2eacd72244e0787b925027b8dee05960303e6c9", 0x62}, {&(0x7f00000001c0)="507dbdca882cfdb7d5e229774e414f2a73c61975061ac182e1a03b71a3d817e9ba896d55291cb73e27c64d5261b1b5ed3ee5c4c599b766d15f7733df30cbaf5cf08d7a990d7ac9589dc08d93214def785ddb12bdb1cd5f0b843a65bc39c060258cf92f833d7f50da4ecf620cea12c8968c24e01db65a6be23b9bdf19a8c3429bdef0b52d45bded9a0f226840fdb2a72fab3588380333750f775132e31c16ce1dbb3439878469f43f2f74c254c2647731f074b39a7f877a593a69e8d4a1d703ab7177d648c9e3b94dad0bd6f54481594cc32f71eaeba0b22ccc507bf7cc603eb8856314ba09914d48ec21", 0xea, 0x7ff}, {&(0x7f00000002c0)="2a5ed40680", 0x5, 0x86a9}, {&(0x7f0000000300)="2fe7a6dd2611b31d5f0b499d1234a6dbdd4cb6b2e38df0c065759b67e564be1529b575aa7cb9b0e8a3025ecf8dce31536d653a6d94a0cb51e00e7a10423a459d2656d9506161d4261e5bd9821359809f856acd20bcee0f9ca4bf6cea8cd92731328b24f0cea5483d9a426927db13901df4baf73e993881855fa95e837d69", 0x7e, 0x1}], 0x9, 0x0) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x5) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af00, &(0x7f0000000040)={@my}) 15:21:52 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e20, 0x3, @empty, 0x6}}}, &(0x7f0000000000)=0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000040)={0x85, 0x7fffffff, 0x1, 0x1, 0x81, 0xffffffff, 0x81b, 0x1e60, r1}, 0x20) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x0) 15:21:52 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0x4d0, 0x0, 0x4000000c], [0xc1]}) 15:21:52 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb7fc86d4f66732e66617400020341000500077008f8", 0x16}], 0x8000, 0x0) [ 435.356331] kvm [11530]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 15:21:52 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000180)="cf9184ec6abd842e60d24021b97c4ee07fa1b3d438fb1edf5afc248c46b261e24d475c98b79e5a2323f22c077d8588a9fa9e06a98ff6266876d1cec0a31672249a273233adce1b0f7b89d864d7cb54253a529c22f2ccca03770629b0aa08d397dc2a2c1706678a84fd714a367c", 0x6d, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x0) 15:21:52 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0x4d0, 0x0, 0x4000000c], [0xc1]}) [ 435.427150] kvm [11550]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 [ 435.524137] kvm [11567]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 [ 437.750159] net_ratelimit: 18 callbacks suppressed [ 437.750164] protocol 88fb is buggy, dev hsr_slave_0 [ 437.760327] protocol 88fb is buggy, dev hsr_slave_1 [ 437.990170] protocol 88fb is buggy, dev hsr_slave_0 [ 437.995310] protocol 88fb is buggy, dev hsr_slave_1 [ 438.070135] protocol 88fb is buggy, dev hsr_slave_0 [ 438.075303] protocol 88fb is buggy, dev hsr_slave_1 15:21:54 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r1 = socket$inet(0x2, 0x1, 0x9) bind$inet(r1, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0xaf, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = gettid() recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) tkill(r2, 0x14) 15:21:54 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000014c0)="11dca5055e0bcfec7be070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000620920144f88cd8bf8fa050030cea0e283d9b22703305b8fe23074bc015a41200581e5ef57c5000000000000000bcbb61c10b1f4451c"], 0x1}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$cont(0xffffffffffffffff, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 15:21:54 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb7fc86d4f66732e66617400020341000500077008f8", 0x16}], 0x8000, 0x0) 15:21:54 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x400, 0x400000) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000240)) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x7, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x8, 0x11, r1, 0xfffffffffffffffd) 15:21:54 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x2, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$KDENABIO(r0, 0x4b36) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af00, &(0x7f0000000040)={@my}) 15:21:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0x4d0, 0x0, 0x4000000c], [0xc1]}) 15:21:55 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000e70000/0x3000)=nil, 0x3000, 0xfffffffffffffffb, 0x11, r0, 0x0) 15:21:55 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0xaf, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = gettid() recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) tkill(r2, 0x14) r3 = dup2(r1, r0) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) 15:21:55 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb7fc86d4f66732e66617400020341000500077008f8", 0x16}], 0x8000, 0x0) 15:21:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0x4d0, 0x0, 0x4000000c], [0xc1]}) [ 438.386774] kvm [11586]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 15:21:55 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x400000, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2004}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r2, 0xc, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100000000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1ff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000044}, 0x80) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000080)="bbb8493c5d1a645810a04c4a4844a83e06dd6d7f4ba80f46e000fe383c76dc3e3eeb3187d300b8ee290030d951d4475d7d653ffff84cb603a51a9e85ea35a57dd009f22a78ab45ab468831d33a9e4c844c4618fa8e49d9b3a856c3b46d5bea1b59e86d9031626488881f9659f33d3bd75ebc9b288476e38907fe48d049a10c2001159f377649b348c3d390164b28b26785f69f1786eae50f975d52f29d384c4ca6d26fe0b9e0735953e16480e646107135665f86d4e6115e4bc2622e0ee06605ad0ff93c11410aaa5f18523061f6") ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af00, &(0x7f0000000040)={@my}) finit_module(r1, &(0x7f0000000300)='\x00', 0x1) 15:21:55 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) socket$nl_crypto(0x10, 0x3, 0x15) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x0) 15:21:55 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb7fc86d4f66732e66617400020341000500077008f8", 0x16}], 0x8000, 0x0) [ 438.470134] protocol 88fb is buggy, dev hsr_slave_0 [ 438.475375] protocol 88fb is buggy, dev hsr_slave_1 [ 438.498734] audit: type=1400 audit(1560525715.131:61): avc: denied { create } for pid=11619 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 [ 438.531792] kvm [11610]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 [ 438.870203] protocol 88fb is buggy, dev hsr_slave_0 [ 438.875994] protocol 88fb is buggy, dev hsr_slave_1 15:21:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000014c0)="11dca5055e0bcfec7be070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000620920144f88cd8bf8fa050030cea0e283d9b22703305b8fe23074bc015a41200581e5ef57c5000000000000000bcbb61c10b1f4451c"], 0x1}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 15:21:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0x4d0, 0x0, 0x4000000c], [0xc1]}) 15:21:57 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af00, &(0x7f00000000c0)={@my}) 15:21:57 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000200)=0x2, 0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x4, 0x8000) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) tkill(r3, 0x24) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r4, 0x0, 0xaf, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r5 = gettid() recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) tkill(r5, 0x24) getgroups(0x8, &(0x7f0000000240)=[0x0, 0xffffffffffffffff, 0xee00, 0xee00, 0xee01, 0xee01, 0xee00, 0xee00]) fstat(r4, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = getegid() setresgid(r6, r7, r8) ioctl$VIDIOC_DECODER_CMD(r1, 0xc0485660, &(0x7f0000000300)={0x1, 0x1, @raw_data=[0x6, 0x100000001, 0x1, 0x101, 0x9, 0x5, 0x0, 0x60d9, 0x8, 0x401, 0xfffffffffffff001, 0x20, 0xefc8, 0x592, 0x6, 0x26a]}) tkill(r5, 0x14) 15:21:57 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x0) 15:21:57 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb7fc86d4f66732e66617400020341000500077008f8", 0x16}], 0x8000, 0x0) 15:21:58 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x2c080, 0x0) 15:21:58 executing program 5: r0 = socket$isdn_base(0x22, 0x3, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r1, 0x0) 15:21:58 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) semget$private(0x0, 0xffffffffffffffff, 0x80) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x5, 0x14b000) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f00000000c0)=0xa3) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x10) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af00, &(0x7f0000000040)={@my}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x9a000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="0000000000006efbe13c0100", @ANYRES16=r3, @ANYBLOB="cfc327bd7000ffdbdf250e0000003800010008000b0073697000080004004e2400000c0007000400000011000000080004004e22000008000200ff000000080009002300000024000200080005000900000008000b000a0000000800050001000000080002004e24000008000400010000002400020008000500da0000000800090002000000080007000002000008000600080000000800040008000000"], 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 15:21:58 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0xaf, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x40, 0x101002) r3 = openat$cgroup_ro(r2, &(0x7f0000000200)='cpuset.effective_mems\x00', 0x0, 0x0) epoll_wait(r3, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x80000001) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000180)={'\x00', {0x2, 0x4e23, @broadcast}}) r4 = gettid() recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$RXRPC_SECURITY_KEY(r3, 0x110, 0x1, &(0x7f00000000c0)='^\x00', 0x2) tkill(r4, 0x14) 15:21:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0b") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0x4d0, 0x0, 0x4000000c], [0xc1]}) 15:21:58 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', 0x0, 0x7ff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb7fc86d4f66732e66617400020341000500077008f8", 0x16}], 0x8000, 0x0) [ 441.399951] kvm [11640]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 [ 441.514094] kvm [11669]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 [ 443.040152] net_ratelimit: 22 callbacks suppressed [ 443.040157] protocol 88fb is buggy, dev hsr_slave_0 [ 443.050559] protocol 88fb is buggy, dev hsr_slave_1 [ 443.190144] protocol 88fb is buggy, dev hsr_slave_0 [ 443.195283] protocol 88fb is buggy, dev hsr_slave_1 [ 443.990151] protocol 88fb is buggy, dev hsr_slave_0 [ 443.995290] protocol 88fb is buggy, dev hsr_slave_1 [ 444.230166] protocol 88fb is buggy, dev hsr_slave_0 [ 444.235287] protocol 88fb is buggy, dev hsr_slave_1 15:22:01 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', 0x0, 0x7ff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb7fc86d4f66732e66617400020341000500077008f8", 0x16}], 0x8000, 0x0) 15:22:01 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000000)={{0x89, @local, 0x4e21, 0x4, 'rr\x00', 0x10, 0x0, 0x6a}, {@multicast2, 0x4e22, 0x0, 0x8, 0x80, 0x4}}, 0x44) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0x5, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x0) fcntl$setflags(r0, 0x2, 0x1) 15:22:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0b") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0x4d0, 0x0, 0x4000000c], [0xc1]}) 15:22:01 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000014c0)="11dca5055e0bcfec7be070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000620920144f88cd8bf8fa050030cea0e283d9b22703305b8fe23074bc015a41200581e5ef57c5000000000000000bcbb61c10b1f4451c"], 0x1}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 15:22:01 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) lookup_dcookie(0x2, &(0x7f0000000080)=""/137, 0x89) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af00, &(0x7f0000000040)={@my}) 15:22:01 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0xaf, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f0000000100)=""/226) r3 = gettid() recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) tkill(r3, 0x14) [ 444.310115] protocol 88fb is buggy, dev hsr_slave_0 [ 444.315231] protocol 88fb is buggy, dev hsr_slave_1 15:22:01 executing program 5: r0 = userfaultfd(0x80800) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$cgroup_ro(r1, &(0x7f0000000000)='cgroup.events\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={0x0, 0xd30}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000001c0)={r2, 0x2}, 0x8) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r1, 0x0) 15:22:01 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', 0x0, 0x7ff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb7fc86d4f66732e66617400020341000500077008f8", 0x16}], 0x8000, 0x0) 15:22:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0b") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0x4d0, 0x0, 0x4000000c], [0xc1]}) [ 444.429506] kvm [11697]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 15:22:01 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2272, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, @buffer={0x1bd, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ff7f00000000}) 15:22:01 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x200000009, 0x1, {0xb, @pix_mp={0x1f, 0x1, 0x7b767d5d, 0x5, 0xe, [{0xf130, 0x8}, {0x6, 0x9}, {0x400, 0x5}, {0x6, 0x3}, {0x7, 0x200}, {0x0, 0x7}, {0x9, 0x80000000}, {0xfae, 0x4}], 0x6f6, 0x401, 0x7, 0x2}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x0) 15:22:01 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f00000003c0)) sendto$inet(r1, 0x0, 0xaf, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = gettid() recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0x4}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e24, 0xff, @dev={0xfe, 0x80, [], 0x28}, 0x40}}, 0x1d5f, 0x80, 0xff, 0x3, 0x4}, &(0x7f0000000200)=0x98) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000240)={r4, 0x4, 0xc672, 0xffffffffffffff97, 0x3, 0x1, 0x6, 0x401, {r5, @in={{0x2, 0x4e20, @local}}, 0xfff, 0x200, 0x1, 0xfffffffffffffffc, 0x3}}, &(0x7f0000000300)=0xb0) fcntl$setownex(r1, 0xf, &(0x7f0000000340)={0x0, r3}) tkill(r3, 0x14) [ 444.509116] kvm [11718]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 15:22:01 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb7fc86d4f66732e66617400020341000500077008f8", 0x16}], 0x8000, 0x0) 15:22:01 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/116, 0x74}], 0x20000223, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001680)={0x53, 0x0, 0x6, 0x0, @buffer={0x1bd, 0xb8, &(0x7f00000001c0)=""/184}, &(0x7f0000000040)="001afb82da22", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ff7f00000000}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = open(&(0x7f0000000080)='./file0\x00', 0x200, 0x10) ioctl$DRM_IOCTL_AUTH_MAGIC(r3, 0x40046411, &(0x7f00000000c0)=0x1ff) clone(0x4000000, &(0x7f0000000280), 0x0, 0x0, 0x0) vmsplice(r2, &(0x7f00000005c0)=[{&(0x7f0000000800)="9f43413d8a8f705e24d7a01f029b48d438b5102341bca0a0a5c9b7ced3d0e8c32e9396ce044f3338cf634b8ee65e0480ab78b3462992c34b66a3508ce9962c76c07360b115524086a2bbafa22b9a15e83e9e3cc2b5e93af96aafe31f7f52763cd113d4bfdbb4c9e8466d357c3da994807b888e991050c15db0fc0f2f5ecdc0476d1ce0b78f904e5fa3e34ef388de737eb885062ebff3b75ee1646f7ea2f09d7f4645d473bfbb76d7cba87de156ae6a8fa769b1da23f6dd549843fec3e9cf5bc758943d2fd58c629aa23a976f38f7c48895b2fa3e6a24e2f1", 0xd8}], 0x1, 0x6) 15:22:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7b") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0x4d0, 0x0, 0x4000000c], [0xc1]}) [ 444.711693] kvm [11737]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 15:22:04 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000014c0)="11dca5055e0bcfec7be070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000620920144f88cd8bf8fa050030cea0e283d9b22703305b8fe23074bc015a41200581e5ef57c5000000000000000bcbb61c10b1f4451c"], 0x1}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 15:22:04 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x0) 15:22:04 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb7fc86d4f66732e66617400020341000500077008f8", 0x16}], 0x8000, 0x0) 15:22:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7b") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0x4d0, 0x0, 0x4000000c], [0xc1]}) 15:22:04 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0xaf, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) fchdir(r1) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = gettid() recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) tkill(r2, 0x14) 15:22:04 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/116, 0x74}], 0x20000223, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001680)={0x53, 0x0, 0x6, 0x0, @buffer={0x1bd, 0xb8, &(0x7f00000001c0)=""/184}, &(0x7f0000000040)="001afb82da22", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ff7f00000000}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = open(&(0x7f0000000080)='./file0\x00', 0x200, 0x10) ioctl$DRM_IOCTL_AUTH_MAGIC(r3, 0x40046411, &(0x7f00000000c0)=0x1ff) clone(0x4000000, &(0x7f0000000280), 0x0, 0x0, 0x0) vmsplice(r2, &(0x7f00000005c0)=[{&(0x7f0000000800)="9f43413d8a8f705e24d7a01f029b48d438b5102341bca0a0a5c9b7ced3d0e8c32e9396ce044f3338cf634b8ee65e0480ab78b3462992c34b66a3508ce9962c76c07360b115524086a2bbafa22b9a15e83e9e3cc2b5e93af96aafe31f7f52763cd113d4bfdbb4c9e8466d357c3da994807b888e991050c15db0fc0f2f5ecdc0476d1ce0b78f904e5fa3e34ef388de737eb885062ebff3b75ee1646f7ea2f09d7f4645d473bfbb76d7cba87de156ae6a8fa769b1da23f6dd549843fec3e9cf5bc758943d2fd58c629aa23a976f38f7c48895b2fa3e6a24e2f1", 0xd8}], 0x1, 0x6) 15:22:04 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000000)) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) 15:22:04 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb7fc86d4f66732e66617400020341000500077008f8", 0x16}], 0x8000, 0x0) 15:22:04 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r2 = openat$cgroup_procs(r0, &(0x7f0000000540)='cgroup.procs\x00', 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) socket$vsock_dgram(0x28, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r3, 0x111, 0x4, 0x0, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000003c0), &(0x7f0000000400)=0x4) recvfrom$rxrpc(0xffffffffffffffff, &(0x7f0000000280)=""/158, 0x9e, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') connect$ax25(r3, &(0x7f0000000440)={{0x3, @null, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) ioctl(0xffffffffffffffff, 0x8912, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000004}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x100, 0x70bd27, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4004800) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f00000000c0)={'veth1_to_bridge\x00', 0x400}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0x0, 0x1}, 0x20) syz_emit_ethernet(0xfffffffffffffd0d, &(0x7f0000000040)={@broadcast, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x3, 0x5, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) unshare(0x40000000) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x15b) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000000180)={'nr0\x00', 0x3}) r5 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000080)={0x0, 0x8, 0x7, 0xfffffffffffffd93}, 0x8) r6 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r6, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="1a000000000000000000000000002000"]}) poll(&(0x7f0000000040)=[{}], 0x20000000000000e6, 0x0) sendfile(r2, r2, &(0x7f0000000000)=0x2000, 0x100000010a000202) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3) 15:22:04 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) readahead(r0, 0x6, 0x6) bind$inet(r1, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0xaf, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = gettid() recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) tkill(r2, 0x13) [ 447.469424] kvm [11760]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 15:22:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7b") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0x4d0, 0x0, 0x4000000c], [0xc1]}) 15:22:04 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000240)={0x3, &(0x7f00000001c0)=[{}, {0x0}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000300)={r1, &(0x7f0000000280)=""/124}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x100000000, 0x10}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000180)={r2, 0xb22}, 0x8) [ 447.577587] kvm [11792]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 [ 448.150157] net_ratelimit: 18 callbacks suppressed [ 448.150161] protocol 88fb is buggy, dev hsr_slave_0 [ 448.175949] protocol 88fb is buggy, dev hsr_slave_1 [ 448.300170] IPVS: ftp: loaded support on port[0] = 21 [ 448.390133] protocol 88fb is buggy, dev hsr_slave_0 [ 448.395404] protocol 88fb is buggy, dev hsr_slave_1 [ 448.481135] protocol 88fb is buggy, dev hsr_slave_0 [ 448.486221] protocol 88fb is buggy, dev hsr_slave_1 [ 448.870157] protocol 88fb is buggy, dev hsr_slave_0 [ 448.875259] protocol 88fb is buggy, dev hsr_slave_1 [ 449.270149] protocol 88fb is buggy, dev hsr_slave_0 [ 449.275361] protocol 88fb is buggy, dev hsr_slave_1 15:22:07 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000014c0)="11dca5055e0bcfec7be070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000620920144f88cd8bf8fa050030cea0e283d9b22703305b8fe23074bc015a41200581e5ef57c5000000000000000bcbb61c10b1f4451c"], 0x1}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 15:22:07 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x0, 0x0, 0x8000, 0x0) 15:22:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be0") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0x4d0, 0x0, 0x4000000c], [0xc1]}) 15:22:07 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz0', "75673a266a00794126a6acd6f806dc53024866970a2bae11aebdc589f9b8be383b84c65fcedebad7eef78fae0df6b658242c2d0576dde2ca67cfa7d75d3ccfd9ea871306944443e8a858d38b7caa968cb8ab7382dbd710e8bd073f29a52612"}, 0x63) ioctl$IMGETDEVINFO(r0, 0x80044944, &(0x7f0000000180)={0x8}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x0) 15:22:07 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0xaf, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f0000000100)={0x0, 0xff, 0x10}, &(0x7f0000000140)=0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000180)={r3, 0x9}, 0x8) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r4 = gettid() recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) tkill(r4, 0x14) 15:22:07 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) setpgid(r0, 0x0) 15:22:07 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0xa) mmap(&(0x7f0000e75000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r0, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0xce, &(0x7f0000000000)=""/49, &(0x7f0000000040)=0x31) r1 = syz_open_dev$midi(&(0x7f00000001c0)='/dev/midi#\x00', 0x9, 0x1) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0x9, @rand_addr="19ff78037557a4bdddb6445ecc36f95b", 0x1}}, 0x3, 0x2, 0x400, 0x8, 0x10}, &(0x7f00000002c0)=0x98) getsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000000380)=0xfffffffffffffff9, &(0x7f00000003c0)=0x4) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000300)={r2, 0x6}, &(0x7f0000000340)=0x8) 15:22:07 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x0, 0x0, 0x8000, 0x0) 15:22:07 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x558, &(0x7f0000000180)="c0dca5055e0bcfec7be07058e770935871d7c0371b8b3b92d099e85f52dcfbe4367962c23ced0255b08beec98bd29a1e5bc9bf6837fb28f78372e638516f378773148fed7042b10973d3f8699e3cae57a0c978655ad7f75da8d66b95dec454d8ae41c52b7059a3ecc4a4d4dbc81714df707d2f1bf856022a66fa33e2e8ec85227cf702f43a7820f834bd1416604ccd30d2b040fa") r1 = socket$inet(0x2, 0x1, 0x3) bind$inet(r1, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0xaf, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = gettid() recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) tkill(r2, 0x14) 15:22:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be0") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0x4d0, 0x0, 0x4000000c], [0xc1]}) [ 450.555154] audit: type=1400 audit(1560525727.191:62): avc: denied { map } for pid=11831 comm="syz-executor.5" path="socket:[42968]" dev="sockfs" ino=42968 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=socket permissive=1 15:22:07 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x0, 0x0, 0x8000, 0x0) 15:22:07 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x8000, 0x0) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x0) 15:22:10 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x0, &(0x7f0000000040), 0x8000, 0x0) 15:22:10 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000014c0)="11dca5055e0bcfec7be070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000620920144f88cd8bf8fa050030cea0e283d9b22703305b8fe23074bc015a41200581e5ef57c5000000000000000bcbb61c10b1f4451c"], 0x1}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 15:22:10 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be0") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0x4d0, 0x0, 0x4000000c], [0xc1]}) 15:22:10 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vfio/vfio\x00', 0x480000, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000180)=0xfffffffffffffffa, 0x4) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @rand_addr=0x7fff}, 0xfffffffffffffd68) sendto$inet(r2, 0x0, 0xaf, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x10200, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r4 = gettid() recvmmsg(r2, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) tkill(r4, 0x14) 15:22:10 executing program 2: r0 = perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x858, 0x20003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = add_key(&(0x7f00000000c0)='user\x00', &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='cpuset\'*$#\x00', r1) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000280)) r3 = socket$inet6(0xa, 0x400000000001, 0x0) getsockname$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @broadcast}, &(0x7f0000000380)=0x10) timer_create(0x7, &(0x7f0000000140)={0x0, 0x7, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000200)=0x0) timer_getoverrun(r4) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000680)=ANY=[]) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000003c0)) inotify_init1(0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) unshare(0x8000400) pselect6(0x40, &(0x7f00000000c0)={0x3}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0xf, 0x2, {{0x0, 0x0, 0x2}}}, 0x18) r6 = dup(r3) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r0) setsockopt$inet6_tcp_int(r6, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) r7 = open(&(0x7f0000000400)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, 0x0, 0x8000fffffffe) 15:22:10 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) [ 453.430116] net_ratelimit: 22 callbacks suppressed [ 453.430121] protocol 88fb is buggy, dev hsr_slave_0 [ 453.440639] protocol 88fb is buggy, dev hsr_slave_1 15:22:10 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0x5, @sliced={0x1, [0x401, 0xffffffffffff7fff, 0x3, 0x1020000000000000, 0x6, 0x100, 0x0, 0x1, 0x0, 0x9, 0x67ae, 0x0, 0x80, 0x3, 0x0, 0x2, 0x40, 0x8855, 0x2, 0xff, 0xd9f8, 0x1, 0x1f, 0x7fff, 0x282, 0x6, 0x3d, 0x8, 0x6f, 0x9, 0x6, 0x7, 0x5, 0x20, 0x70f, 0x5, 0x1f, 0x6, 0xfffffffffffeffff, 0x10001, 0x401, 0x2, 0x1, 0x80, 0x666, 0x0, 0x1, 0x9]}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x0) 15:22:10 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0x4d0, 0x0, 0x4000000c], [0xc1]}) 15:22:10 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x0, &(0x7f0000000040), 0x8000, 0x0) 15:22:10 executing program 5: syz_read_part_table(0x3, 0x6, &(0x7f00000004c0)=[{&(0x7f0000000040)="c429564922b7bb75278b81a28e081b138cd35cd800942928f18ff45db1d4af8026b797609277c5032ea2", 0x2a, 0x9}, {&(0x7f0000000180)="044dc5dec62a75efb3b36ee53a34434878c996f7a4cf2d0b7824c45cd039fa096dac8dcbea41ba57ed0e704cbcaeb142294a4a3baa", 0x35, 0x8001}, {&(0x7f0000000240)="5f4d949e71b53fa50ec9ea90c8f9545bc7a5b4147144b0d82758c58ff69c55c942968bad15db01e4da849092c856f863d9b47cea4bd327b2dacac50a6b50dead40b14b1c4cf44d540cccc8154bdeab55f64ee6e3cc5a45ddb39250976182812660c04828f865047b780c339c442845312fe676260b9833f1b40c82e777a8188d02715c72592d689ad9c64101d3db696653fe13e3278231b0ce2a82d750df0557", 0xa0}, {&(0x7f0000000300)="6ad7278ceb287d06b2c4c5c76bd8e0494cd1bbf4613c5b0b55fea77ad0ec730f3988fde3b72e33724ce6850e0305ad5304378bc369e433d94c1d246c8584d9ac30076a7d8773e9a1e1f8c58062af1b8a3318f660d0ac8c8549", 0x59, 0x6}, {&(0x7f0000000380)="a18d9fe118d111ca64a24d98cc2371f2f57fa83857c787e5f816b285675b743bc2f5cbba4c93ac6e4217ffb6cfc484f7cbfef6532211fc3733f095fdb872afbd83e5060ca25e3505417fc15dea1019e2eaf70d82acbef296c4590d22cb8bb28b4dcafb98a3f895c730aa7c2c662ea1de92688330586812fd0996bef96469672986413955", 0x84, 0x800}, {&(0x7f0000000440)="b84f7c67289e3ff30fcf506e203958befceffea6690b97ea4f1a37308bcc6db49d5239f6a2229b4394cc9c482495448e6cf7c0712b24ccd9b711342dd51e3a242f4fdcdd8124e03442d07bb5c47890e0d5e6f4a0a38836cfccfb940310477bb5a73c94225892eb1f167b", 0x6a, 0xf5}]) r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r0}) 15:22:10 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0x4d0, 0x0, 0x4000000c], [0xc1]}) [ 453.510742] kvm [11869]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 15:22:10 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0xaf, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = gettid() recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) tkill(r2, 0x14) r3 = semget$private(0x0, 0x3, 0x10) semctl$GETPID(r3, 0x3, 0xb, &(0x7f00000000c0)=""/118) 15:22:10 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0x4d0, 0x0, 0x4000000c], [0xc1]}) [ 453.590398] protocol 88fb is buggy, dev hsr_slave_0 [ 453.595745] protocol 88fb is buggy, dev hsr_slave_1 [ 454.400143] protocol 88fb is buggy, dev hsr_slave_0 [ 454.405410] protocol 88fb is buggy, dev hsr_slave_1 [ 454.630167] protocol 88fb is buggy, dev hsr_slave_0 [ 454.635701] protocol 88fb is buggy, dev hsr_slave_1 [ 454.710133] protocol 88fb is buggy, dev hsr_slave_0 [ 454.715261] protocol 88fb is buggy, dev hsr_slave_1 15:22:13 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000014c0)="11dca5055e0bcfec7be070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000620920144f88cd8bf8fa050030cea0e283d9b22703305b8fe23074bc015a41200581e5ef57c5000000000000000bcbb61c10b1f4451c"], 0x1}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 15:22:13 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x0, &(0x7f0000000040), 0x8000, 0x0) 15:22:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0x4d0, 0x0, 0x4000000c], [0xc1]}) 15:22:13 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xc, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000180)={0x0, @multicast2}, &(0x7f00000001c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00', r1}) 15:22:13 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x8000, &(0x7f0000000100)="c02bbe39f9449d31bb771fd96d7edacc0124884685842532448dcfe5e599302d2d38c840d29094edec53522db462106ec40a5348cd394a915a4e0300000000000000ee4e9507cd930d103b06f2bd820bfe215b1c19e2058c16894b553c35112fde78f4b30b6a82be197f27564a14eb7c952d2fe1eccffb08748fbf79af5c81de76ac4b1a1706707b973d12") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0xaf, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f00000002c0), &(0x7f0000000300)=0x10) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0xd8900, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5336, &(0x7f0000000200)={0x5, 0x6, 0x7, 'queue1\x00', 0x49}) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x100, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = gettid() recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) tkill(r3, 0x14) 15:22:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0x176, 0x0, 0x4000000c], [0xc1]}) 15:22:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0x4d0, 0x0, 0x4000000c], [0xc1]}) 15:22:13 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x0) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current\x00', 0x2, 0x0) 15:22:13 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x1, &(0x7f0000000040)=[{0x0}], 0x8000, 0x0) [ 456.573779] kvm [11929]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 15:22:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0x4d0, 0x0, 0x4000000c], [0xc1]}) 15:22:13 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0xaf, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = gettid() recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) tkill(r2, 0x14) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000140)={0xf593, 0x204, 0x30, 0x9760, 0x0}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000001c0)={r3, 0x2}, &(0x7f0000000200)=0x8) 15:22:13 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001680)={0x53, 0x0, 0x6, 0x0, @buffer={0x1bd, 0xb8, &(0x7f00000001c0)=""/184}, &(0x7f0000000040)="001afb82da22", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ff7f00000000}) [ 458.550155] net_ratelimit: 18 callbacks suppressed [ 458.555166] protocol 88fb is buggy, dev hsr_slave_0 [ 458.560471] protocol 88fb is buggy, dev hsr_slave_1 [ 458.790182] protocol 88fb is buggy, dev hsr_slave_0 [ 458.795425] protocol 88fb is buggy, dev hsr_slave_1 [ 458.870128] protocol 88fb is buggy, dev hsr_slave_0 [ 458.875333] protocol 88fb is buggy, dev hsr_slave_1 [ 459.280131] protocol 88fb is buggy, dev hsr_slave_0 [ 459.285254] protocol 88fb is buggy, dev hsr_slave_1 15:22:16 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000014c0)="11dca5055e0bcfec7be070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000620920144f88cd8bf8fa050030cea0e283d9b22703305b8fe23074bc015a41200581e5ef57c5000000000000000bcbb61c10b1f4451c"], 0x1}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 15:22:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) 15:22:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0x4d0, 0x0, 0x4000000c], [0xc1]}) 15:22:16 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x1, &(0x7f0000000040)=[{0x0}], 0x8000, 0x0) 15:22:16 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x2ba, 0x400200007fe, &(0x7f00000000c0)={0x2, 0x4004e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff012}], 0x1, &(0x7f0000000200)=""/20, 0xd57}, 0x300) 15:22:16 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) getresgid(&(0x7f0000000140)=0x0, &(0x7f0000000180), &(0x7f00000001c0)) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r1, r2, r3) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r4, 0x0, 0xaf, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r5 = gettid() recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) tkill(r5, 0x14) 15:22:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0x4d0, 0x0, 0x4000000c], [0xc1]}) 15:22:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0x4d0, 0x0, 0x4000000c], [0xc1]}) 15:22:16 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x1, &(0x7f0000000040)=[{0x0}], 0x8000, 0x0) [ 459.582919] kvm [11973]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 15:22:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) 15:22:16 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)}], 0x8000, 0x0) 15:22:16 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/status\x00', 0x0, 0x0) sendto$inet(r1, 0x0, 0xaf, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x10000000012, 0x4, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) gettid() getsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f0000000140)={@local, @broadcast}, &(0x7f0000000180)=0x8) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x101000, 0x0) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x100000000, 0x4, 0x1000}, 0x4) recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_PUBL_GET(r4, 0x0, 0x0) fcntl$setstatus(r4, 0x4, 0x44000) sendmsg$netlink(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0) io_setup(0x4ed4, &(0x7f0000000100)) creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000800)) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000840)={{{@in=@initdev, @in=@broadcast}}, {{@in=@initdev}, 0x0, @in=@local}}, &(0x7f0000000940)=0xe8) getegid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000980), &(0x7f00000009c0)=0xc) getpgid(0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, 0x0, &(0x7f0000000b80)) [ 459.670102] protocol 88fb is buggy, dev hsr_slave_0 [ 459.675251] protocol 88fb is buggy, dev hsr_slave_1 [ 459.778538] kvm [12006]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 15:22:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000014c0)="11dca5055e0bcfec7be070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000620920144f88cd8bf8fa050030cea0e283d9b22703305b8fe23074bc015a41200581e5ef57c5000000000000000bcbb61c10b1f4451c"], 0x1}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 15:22:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0x4d0, 0x0, 0x4000000c], [0xc1]}) 15:22:19 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)}], 0x8000, 0x0) 15:22:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) 15:22:19 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$inet6_buf(r1, 0x6, 0x7, 0x0, &(0x7f0000000100)=0xde) 15:22:19 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0xaf, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x8040) bind$tipc(r2, &(0x7f0000000180)=@id={0x1e, 0x3, 0x3, {0x4e24, 0x4}}, 0x10) r3 = gettid() recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f00000001c0)) tkill(r3, 0x14) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x81, 0x0) ioctl$KVM_SET_CLOCK(r4, 0x4030ae7b, &(0x7f0000000100)={0x4, 0x9}) 15:22:19 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x0) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current\x00', 0x2, 0x0) 15:22:19 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)}], 0x8000, 0x0) 15:22:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) 15:22:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0x4d0, 0x0, 0x4000000c], [0xc1]}) 15:22:19 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000000)) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) socket$bt_rfcomm(0x1f, 0x4b05f49e916fdcec, 0x3) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x80000, 0x0) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) 15:22:19 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb7fc86d4f66732e666174", 0xb}], 0x8000, 0x0) [ 462.824445] kvm [12051]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 [ 463.830672] net_ratelimit: 22 callbacks suppressed [ 463.830677] protocol 88fb is buggy, dev hsr_slave_0 [ 463.840761] protocol 88fb is buggy, dev hsr_slave_1 [ 463.990172] protocol 88fb is buggy, dev hsr_slave_0 [ 463.995266] protocol 88fb is buggy, dev hsr_slave_1 [ 464.790181] protocol 88fb is buggy, dev hsr_slave_0 [ 464.795282] protocol 88fb is buggy, dev hsr_slave_1 [ 465.030183] protocol 88fb is buggy, dev hsr_slave_0 [ 465.035317] protocol 88fb is buggy, dev hsr_slave_1 [ 465.120138] protocol 88fb is buggy, dev hsr_slave_0 [ 465.125360] protocol 88fb is buggy, dev hsr_slave_1 15:22:22 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000014c0)="11dca5055e0bcfec7be070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000620920144f88cd8bf8fa050030cea0e283d9b22703305b8fe23074bc015a41200581e5ef57c5000000000000000bcbb61c10b1f4451c"], 0x1}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 15:22:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x6, @loopback}, 0x10) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f00000000c0)='tunl0\x00') r2 = gettid() recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) tkill(r2, 0x14) 15:22:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0x4d0, 0x0, 0x4000000c], [0xc1]}) 15:22:22 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000000)) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) socket$bt_rfcomm(0x1f, 0x4b05f49e916fdcec, 0x3) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x80000, 0x0) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) 15:22:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) 15:22:22 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb7fc86d4f66732e666174", 0xb}], 0x8000, 0x0) 15:22:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) 15:22:22 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000000)) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) socket$bt_rfcomm(0x1f, 0x4b05f49e916fdcec, 0x3) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x80000, 0x0) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) 15:22:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, 0x0) 15:22:22 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb7fc86d4f66732e666174", 0xb}], 0x8000, 0x0) 15:22:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000004c0)="2371a57000000000d5f72a77dbb274bc000000") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0xaf, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$SIOCX25SFACILITIES(r2, 0x89e3, &(0x7f0000000400)={0x7e, 0x6, 0x4, 0xb, 0x2, 0x81}) r3 = gettid() recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) tkill(r3, 0x14) r4 = shmget(0x2, 0x2000, 0x1, &(0x7f0000ffb000/0x2000)=nil) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000440)={0x2}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@ipv4={[], [], @loopback}}}, &(0x7f00000001c0)=0xe8) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = getgid() shmctl$IPC_SET(r4, 0x1, &(0x7f0000000340)={{0x6, r5, r6, r7, r8, 0x2, 0x5}, 0x3, 0x1ff, 0x0, 0x100000000, r3, r3, 0x1}) 15:22:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) 15:22:25 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb7fc86d4f66732e666174000203410005", 0x11}], 0x8000, 0x0) 15:22:25 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000000)) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) socket$bt_rfcomm(0x1f, 0x4b05f49e916fdcec, 0x3) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) 15:22:25 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000014c0)="11dca5055e0bcfec7be070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000620920144f88cd8bf8fa050030cea0e283d9b22703305b8fe23074bc015a41200581e5ef57c5000000000000000bcbb61c10b1f4451c"], 0x1}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, 0x0) ptrace$cont(0x9, r1, 0x0, 0x0) 15:22:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) 15:22:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, 0x0) 15:22:25 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000000)) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) 15:22:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) 15:22:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, 0x0) 15:22:25 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb7fc86d4f66732e666174000203410005", 0x11}], 0x8000, 0x0) 15:22:25 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000000)) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) 15:22:25 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x10000, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000100)={{{@in=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={0x0, 0x5}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000300)=ANY=[@ANYRES32=r4, @ANYBLOB="060004001a008b0ab8000900"], 0x10) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000340), &(0x7f0000000380)=0x6) ioctl$SIOCAX25DELUID(r2, 0x89e2, &(0x7f0000000240)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r3}) bind$inet(r1, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0xaf, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r5 = gettid() recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) tkill(r5, 0x14) 15:22:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) 15:22:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x0, 0x2, [0x4d0, 0x0, 0x4000000c], [0xc1]}) 15:22:25 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb7fc86d4f66732e666174000203410005", 0x11}], 0x8000, 0x0) [ 468.950423] net_ratelimit: 18 callbacks suppressed [ 468.950428] protocol 88fb is buggy, dev hsr_slave_0 [ 468.960731] protocol 88fb is buggy, dev hsr_slave_1 [ 469.190176] protocol 88fb is buggy, dev hsr_slave_0 [ 469.195819] protocol 88fb is buggy, dev hsr_slave_1 [ 469.270140] protocol 88fb is buggy, dev hsr_slave_0 [ 469.275244] protocol 88fb is buggy, dev hsr_slave_1 [ 469.670162] protocol 88fb is buggy, dev hsr_slave_0 [ 469.675285] protocol 88fb is buggy, dev hsr_slave_1 [ 470.070176] protocol 88fb is buggy, dev hsr_slave_0 [ 470.075375] protocol 88fb is buggy, dev hsr_slave_1 15:22:28 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000014c0)="11dca5055e0bcfec7be070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000620920144f88cd8bf8fa050030cea0e283d9b22703305b8fe23074bc015a41200581e5ef57c5000000000000000bcbb61c10b1f4451c"], 0x1}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, 0x0) ptrace$cont(0x9, r1, 0x0, 0x0) 15:22:28 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000000)) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) 15:22:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) 15:22:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x0, 0x2, [0x4d0, 0x0, 0x4000000c], [0xc1]}) 15:22:28 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb7fc86d4f66732e666174000203410005000770", 0x14}], 0x8000, 0x0) 15:22:28 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1, &(0x7f0000000080)="c0dca5055e0bcfe87be030") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xfffffeb2, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @empty}, 0x14f) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000100)={0x1, 0x6, 0x4, 0x100000001, 0x8}, 0x14) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000b00)={'raw\x00', 0x1000, "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"}, &(0x7f00000000c0)=0x1024) r2 = gettid() recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) tkill(r2, 0x14) 15:22:28 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000000)) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) 15:22:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) 15:22:28 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb7fc86d4f66732e666174000203410005000770", 0x14}], 0x8000, 0x0) 15:22:28 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) 15:22:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x0, 0x2, [0x4d0, 0x0, 0x4000000c], [0xc1]}) 15:22:28 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup3(r0, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f0000000100)='\x00'}, 0x30) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000180)={[], 0x401, 0x1, 0x2d5, 0x100, 0x2, r2}) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0xaf, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvfrom$rose(r1, &(0x7f0000000200)=""/118, 0x76, 0x100, &(0x7f0000000280)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) socket$inet(0x2, 0x5, 0x7) r4 = gettid() recvmmsg(r3, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2f3}}], 0x1, 0x0, 0x0) tkill(r4, 0x14) [ 474.230138] net_ratelimit: 22 callbacks suppressed [ 474.230143] protocol 88fb is buggy, dev hsr_slave_0 [ 474.240263] protocol 88fb is buggy, dev hsr_slave_1 [ 474.390155] protocol 88fb is buggy, dev hsr_slave_0 [ 474.395344] protocol 88fb is buggy, dev hsr_slave_1 15:22:31 executing program 5: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, 0xffffffffffffffff, 0x8000000) 15:22:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) 15:22:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0x4d0], [0xc1]}) 15:22:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000014c0)="11dca5055e0bcfec7be070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000620920144f88cd8bf8fa050030cea0e283d9b22703305b8fe23074bc015a41200581e5ef57c5000000000000000bcbb61c10b1f4451c"], 0x1}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, 0x0) ptrace$cont(0x9, r1, 0x0, 0x0) 15:22:31 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb7fc86d4f66732e666174000203410005000770", 0x14}], 0x8000, 0x0) 15:22:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0xaf, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x161101, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$FUSE_INTERRUPT(r3, &(0x7f0000000100)={0x10, 0x0, 0x5}, 0x10) r4 = gettid() recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) tkill(r4, 0x14) 15:22:31 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) 15:22:31 executing program 5: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, 0xffffffffffffffff, 0x8000000) 15:22:31 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb7fc86d4f66732e66617400020341000500077008", 0x15}], 0x8000, 0x0) 15:22:31 executing program 5: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, 0xffffffffffffffff, 0x8000000) 15:22:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0x4d0], [0xc1]}) 15:22:31 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) 15:22:31 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb7fc86d4f66732e66617400020341000500077008", 0x15}], 0x8000, 0x0) [ 474.768640] kvm [12230]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 15:22:31 executing program 5: r0 = syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) 15:22:31 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) [ 474.835933] kvm [12244]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 [ 474.927574] kvm [12257]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 [ 475.190183] protocol 88fb is buggy, dev hsr_slave_0 [ 475.195416] protocol 88fb is buggy, dev hsr_slave_1 [ 475.430181] protocol 88fb is buggy, dev hsr_slave_0 [ 475.435306] protocol 88fb is buggy, dev hsr_slave_1 [ 475.510131] protocol 88fb is buggy, dev hsr_slave_0 [ 475.515253] protocol 88fb is buggy, dev hsr_slave_1 15:22:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000014c0)="11dca5055e0bcfec7be070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000620920144f88cd8bf8fa050030cea0e283d9b22703305b8fe23074bc015a41200581e5ef57c5000000000000000bcbb61c10b1f4451c"], 0x1}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r1, 0x0, 0x0) 15:22:34 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) accept$packet(0xffffffffffffff9c, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000180)={'team0\x00', r2}) sendto$inet(r1, 0x0, 0xaf, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = gettid() recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) tkill(r3, 0x14) 15:22:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0x4d0], [0xc1]}) 15:22:34 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb7fc86d4f66732e66617400020341000500077008", 0x15}], 0x8000, 0x0) 15:22:34 executing program 5: r0 = syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) 15:22:34 executing program 2: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) 15:22:34 executing program 5: r0 = syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) [ 477.766025] kvm [12266]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 15:22:34 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) 15:22:34 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb7fc86d4f66732e66617400020341000500077008f8", 0x16}], 0x0, 0x0) 15:22:34 executing program 2: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) 15:22:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0x0, 0x0, 0x4000000c], [0xc1]}) 15:22:34 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0xaf, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = gettid() recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r3, 0xc038563c, &(0x7f0000000100)={0x1, 0x0, {0x1ff, 0x225d, 0x3, 0x1}}) tkill(r2, 0x14) [ 477.918333] FAT-fs (loop1): bogus sectors per cluster 3 [ 477.940635] FAT-fs (loop1): Can't find a valid FAT filesystem [ 477.952431] kvm [12291]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 [ 479.350121] net_ratelimit: 18 callbacks suppressed [ 479.350125] protocol 88fb is buggy, dev hsr_slave_0 [ 479.360298] protocol 88fb is buggy, dev hsr_slave_1 [ 479.590139] protocol 88fb is buggy, dev hsr_slave_0 [ 479.595231] protocol 88fb is buggy, dev hsr_slave_1 [ 479.670199] protocol 88fb is buggy, dev hsr_slave_0 [ 479.675539] protocol 88fb is buggy, dev hsr_slave_1 [ 480.070171] protocol 88fb is buggy, dev hsr_slave_0 [ 480.075372] protocol 88fb is buggy, dev hsr_slave_1 [ 480.470147] protocol 88fb is buggy, dev hsr_slave_0 [ 480.475389] protocol 88fb is buggy, dev hsr_slave_1 15:22:37 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000014c0)="11dca5055e0bcfec7be070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000620920144f88cd8bf8fa050030cea0e283d9b22703305b8fe23074bc015a41200581e5ef57c5000000000000000bcbb61c10b1f4451c"], 0x1}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r1, 0x0, 0x0) 15:22:37 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) 15:22:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0x0, 0x0, 0x4000000c], [0xc1]}) 15:22:37 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb7fc86d4f66732e66617400020341000500077008f8", 0x16}], 0x0, 0x0) 15:22:37 executing program 2: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) 15:22:37 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) connect$pptp(r1, &(0x7f00000001c0)={0x18, 0x2, {0x1, @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1e) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0xaf, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x210080, 0x0) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000140)={0x4, &(0x7f0000000100)=[{0x200, 0x7}, {0x4, 0x55ee}, {0xf33, 0x6}, {0x5, 0x1000}]}) r4 = gettid() recvmmsg(r2, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$inet(0x2, 0x3, 0x0) tkill(r4, 0x14) 15:22:37 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) [ 480.778040] FAT-fs (loop1): bogus sectors per cluster 3 [ 480.804404] kvm [12314]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 [ 480.826688] FAT-fs (loop1): Can't find a valid FAT filesystem 15:22:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0x0, 0x0, 0x4000000c], [0xc1]}) 15:22:37 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) 15:22:37 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb7fc86d4f66732e66617400020341000500077008f8", 0x16}], 0x0, 0x0) 15:22:37 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) 15:22:37 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x81, 0x400) mq_getsetattr(r2, &(0x7f0000000100)={0x8, 0x7, 0x100, 0x3, 0x5, 0x80000001, 0x1, 0x9}, &(0x7f0000000140)) bind$inet(r1, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) r3 = shmget(0x2, 0x2000, 0x920, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_LOCK(r3, 0xb) sendto$inet(r1, 0x0, 0xaf, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) gettid() timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r4 = gettid() recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) tkill(r4, 0x14) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000380)={0xffffffffffffffff}, 0x113, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000400)={0x13, 0x10, 0xfa00, {&(0x7f0000000180), r5, 0x3}}, 0x18) [ 481.044188] FAT-fs (loop1): bogus sectors per cluster 3 [ 481.061564] kvm [12344]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 [ 481.066405] FAT-fs (loop1): Can't find a valid FAT filesystem 15:22:40 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000014c0)="11dca5055e0bcfec7be070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000620920144f88cd8bf8fa050030cea0e283d9b22703305b8fe23074bc015a41200581e5ef57c5000000000000000bcbb61c10b1f4451c"], 0x1}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r1, 0x0, 0x0) 15:22:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0x17b, 0x0, 0x40000080], [0xc1]}) 15:22:40 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) 15:22:40 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) 15:22:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0xaf, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x1, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) r3 = gettid() recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) tkill(r3, 0x14) 15:22:40 executing program 1: 15:22:40 executing program 1: 15:22:40 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) [ 483.818435] kvm [12364]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 15:22:40 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) 15:22:40 executing program 0: 15:22:40 executing program 1: 15:22:40 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x0, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) [ 483.958769] kvm [12381]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 [ 484.630138] net_ratelimit: 22 callbacks suppressed [ 484.630143] protocol 88fb is buggy, dev hsr_slave_0 [ 484.640196] protocol 88fb is buggy, dev hsr_slave_1 [ 484.790210] protocol 88fb is buggy, dev hsr_slave_0 [ 484.795356] protocol 88fb is buggy, dev hsr_slave_1 [ 485.590164] protocol 88fb is buggy, dev hsr_slave_0 [ 485.595330] protocol 88fb is buggy, dev hsr_slave_1 [ 485.830160] protocol 88fb is buggy, dev hsr_slave_0 [ 485.835297] protocol 88fb is buggy, dev hsr_slave_1 [ 485.910134] protocol 88fb is buggy, dev hsr_slave_0 [ 485.915253] protocol 88fb is buggy, dev hsr_slave_1 15:22:43 executing program 1: 15:22:43 executing program 0: 15:22:43 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x0, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) 15:22:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) 15:22:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000014c0)="11dca5055e0bcfec7be070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000620920144f88cd8bf8fa050030cea0e283d9b22703305b8fe23074bc015a41200581e5ef57c5000000000000000bcbb61c10b1f4451c"], 0x1}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) 15:22:43 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0xaf, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = gettid() accept$inet6(0xffffffffffffff9c, &(0x7f00000000c0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x1c) recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x222}}], 0x0, 0x0, 0x0) tkill(r2, 0x14) 15:22:43 executing program 0: 15:22:43 executing program 1: 15:22:43 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x40808, &(0x7f0000deaff0)={0x2, 0x3, @remote}, 0xc) fcntl$getownex(r0, 0x10, &(0x7f0000000340)={0x0, 0x0}) timer_create(0x0, &(0x7f00000001c0)={0x0, 0xe, 0x2000000000000002, @tid=r2}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000140)) clock_gettime(0x0, &(0x7f0000000180)) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) timer_settime(r3, 0x0, &(0x7f00000000c0)={{}, {r4, r5+30000000}}, 0x0) r6 = gettid() recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000000240)={0x0, {{0x2, 0x4e21, @multicast1}}}, 0x88) tkill(r6, 0x14) 15:22:43 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x0, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) 15:22:43 executing program 1: 15:22:43 executing program 0: [ 486.899176] kvm [12399]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 15:22:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) 15:22:43 executing program 0: 15:22:43 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0xfffffffffffffc93, 0x0, &(0x7f0000000140)={0x2, 0x3, @loopback}, 0x10) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = gettid() recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$inet(0x2, 0x2, 0xbfbb) tkill(r2, 0x14) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) 15:22:43 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x0, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) [ 487.129066] kvm [12425]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 [ 489.750142] net_ratelimit: 18 callbacks suppressed [ 489.750148] protocol 88fb is buggy, dev hsr_slave_0 [ 489.760227] protocol 88fb is buggy, dev hsr_slave_1 15:22:46 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000014c0)="11dca5055e0bcfec7be070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000620920144f88cd8bf8fa050030cea0e283d9b22703305b8fe23074bc015a41200581e5ef57c5000000000000000bcbb61c10b1f4451c"], 0x1}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) 15:22:46 executing program 1: 15:22:46 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]}) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) 15:22:46 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r1 = socket$inet(0x2, 0x4000800000000004, 0x1) bind$inet(r1, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0xaf, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = gettid() recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) tkill(r2, 0x14) getgroups(0x6, &(0x7f00000000c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0x0, 0xee00, 0xee01]) setfsgid(r3) 15:22:46 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x0, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) 15:22:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) 15:22:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dca5005e0bcfec7be070") r1 = socket$inet(0x10, 0x2, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="24000000220007031dfffd946f610500000000000543000000000000421ba3a20400ff7e280000001100ff5613d3475bb65f64000000000004000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 15:22:46 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x0, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) [ 489.956773] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 489.990145] protocol 88fb is buggy, dev hsr_slave_0 [ 489.995366] protocol 88fb is buggy, dev hsr_slave_1 15:22:46 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x80000, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x8c, r3, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipddp0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x10001}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @broadcast}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x5}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) bind$inet(r1, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) timer_create(0x7, &(0x7f0000000340)={0x0, 0x1d, 0x2}, &(0x7f0000000380)=0x0) timer_settime(r4, 0x0, &(0x7f00000003c0)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000000400)) connect$unix(r2, &(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e) sendto$inet(r1, 0x0, 0xaf, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r5 = gettid() recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) tkill(r5, 0x14) 15:22:46 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockname$inet(r0, 0x0, 0x0) close(r3) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r4 = socket$inet(0x2, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r3, 0x0, 0x10005, 0x0) 15:22:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) [ 490.032298] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 490.070160] protocol 88fb is buggy, dev hsr_slave_0 [ 490.075301] protocol 88fb is buggy, dev hsr_slave_1 15:22:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0xfffffffffffffff9, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x9}, {}, {}, {}, {}, {}, {0x0, 0x7fffffff}, {0x2}]}}) [ 490.174778] kvm [12471]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 [ 490.470196] protocol 88fb is buggy, dev hsr_slave_0 [ 490.475427] protocol 88fb is buggy, dev hsr_slave_1 [ 490.870135] protocol 88fb is buggy, dev hsr_slave_0 [ 490.875296] protocol 88fb is buggy, dev hsr_slave_1 15:22:49 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0x0, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) 15:22:49 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) timer_create(0x6, &(0x7f0000000280)={0x0, 0x27, 0x0, @thr={&(0x7f0000000180)="bac4f14b84962343c78e13", &(0x7f00000001c0)="18f71ffae47e8b2c05fabab3da82e90c0805f387b77b85cedfac4233100584a664a3ed10421daf1c93ab38add74d6eb32e09c83a8c4e474d0b64741ceb4f954db3780d1c6d1f5f1ec43462f83a3cfefc78a74a7c76978645734bbcdd4e6580afdc98ab5b94a260d568d8eb4d9f05141afaadcb5b9beca27283e49d5945e6dd197395826e9f9e1c242970bc5fed04f8ae1ddf1f7c7114578a83149655"}}, &(0x7f00000002c0)) bind$inet(r1, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0xaf, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = gettid() recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) tkill(r2, 0x14) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x6fdfc1dd7cdae1ff, 0x0) write$ppp(r3, &(0x7f0000000100)="b6d423e96d7405848ede7a077da8fe54f5620ea685ae3590031711b609630b3f10d053fac0f659c4091044db609400c39234c99f7719afd11490431be6e8b529ecd6711883fff4331a273b3be3679b50ce4b8c8a522ed8b1ffb610c4ced3cbf966a548be8d42837ccf", 0x69) 15:22:49 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000014c0)="11dca5055e0bcfec7be070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000620920144f88cd8bf8fa050030cea0e283d9b22703305b8fe23074bc015a41200581e5ef57c5000000000000000bcbb61c10b1f4451c"], 0x1}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) 15:22:49 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) 15:22:49 executing program 1: syz_emit_ethernet(0x98, &(0x7f0000000080)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "b60bcc", 0x62, 0x2c, 0x0, @local, @local, {[], @icmpv6=@echo_reply={0x81, 0x0, 0x0, 0x0, 0x0, "5bcbd04285c07f3b8b876372cd3a991173769cdb4a782abb867147ca30d333b4a3c1eae0c510f13a9b6f807af8f707e7221132b41fb7594d8f98696caa6ad11867338e23f2e452b78100be3f7b2cb2f78807b94855e62ca99b36"}}}}}}, 0x0) 15:22:49 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockname$inet(r0, 0x0, 0x0) close(r3) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r4 = socket$inet(0x2, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r3, 0x0, 0x10005, 0x0) 15:22:49 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0x6, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, 0x0, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$capi20(0xffffffffffffff9c, 0x0, 0x200000, 0x0) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000100)=0x1c) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') ftruncate(r3, 0x7fffffff) chown(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) clone(0x900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_ax25_SIOCDELRT(r2, 0x890c, &(0x7f0000000300)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @null, @netrom, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}) execve(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af00, &(0x7f0000000040)={@my}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) 15:22:49 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0x0, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) [ 492.980209] kvm [12489]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 15:22:49 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) 15:22:49 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0x0, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) 15:22:49 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="3bdca505717be0") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0xaf, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc010641d, &(0x7f0000000200)={r3, &(0x7f0000000140)=""/156}) r4 = gettid() ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x7) recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) tkill(r4, 0x14) socket$can_bcm(0x1d, 0x2, 0x2) 15:22:49 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) 15:22:49 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) 15:22:49 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x0) ioctl$sock_x25_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@null=' \x00', 0xe, 'nlmon0\x00'}) [ 493.138835] kvm [12510]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 [ 495.030176] net_ratelimit: 22 callbacks suppressed [ 495.030182] protocol 88fb is buggy, dev hsr_slave_0 [ 495.040268] protocol 88fb is buggy, dev hsr_slave_1 [ 495.190194] protocol 88fb is buggy, dev hsr_slave_0 [ 495.195369] protocol 88fb is buggy, dev hsr_slave_1 15:22:52 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, 0x0, 0x0) close(r0) 15:22:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) 15:22:52 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) 15:22:52 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0xaf, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = gettid() recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r3 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000100)={0x100000000, 0x0, 0x7fffffff, 0xff, 0x3, 0x5, 0x5}, 0xc) tkill(r2, 0x14) 15:22:52 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) sendmsg$inet(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000240)="b73a0ad01fb3488906e33f736dac61577077447b290280479b01a1c1c3c2f4cbcfc0bb4a549ac0f4e01ab5646cb63a28c09b74d447aad9c2de5bed06802e57a4e0034d3f1651b9dd92076f83efd433bd5663de092968e76b6f731ec2ddc7911251780e81380cbfca99425a025ae140b5ff405a87472ae6ec370cdf832809832ecfa8e93e8cd5910cbd4596ca1a4514", 0x8f}, {&(0x7f0000000300)="47385ba74d78cf2bf9e2ae8aab8f6a7c4733794fe7ddb8d603e8ab3a322bad23c23d70535b588a71000ed7ff1c8305c5a5f047af23be3c0df8a3f9dbf1ec01d072f3f5c237ebfadc443c048615b1225335303f6d3b26886b59b9329c3437df0275db6778c38099b8caee3015423add94c5604fe4a23330ce3de6dacb112052d97671c7bb46de958280ef3e63a17889fdbe63c109d974aa5d78ad45a746234ae96cb11e141454f47786a96cc4a7689a53b2310bef27ef4c619fad21736bf2a33ddfca33e5bb29da154b01964d1725ba3ee2874b5f183ee067d7066485af25eae01fd25566c1485ad673191c719257fc10", 0xf0}, {&(0x7f0000000000)="62e184e36a87bb39e11371f9f903941fe3e8d2fb8d97748d37bec3f425573c2cb28288466885a8fa2b050d8766ce3283d82f4d89584725ddb3ad3d21d0afec63206eff371a43286068ca7b3b9b8d95bc5ac4e63ee14e37bca0c588723ddf84084a2532", 0x63}, {&(0x7f0000000180)="f0519c52ff47fe4474d8933a8991143fdb16ef37e427209d0518796b2b0cdd42af38aec1a327dc4dbd26995aaf1816edb6f8ac3f253d592811af41bf9b8ec1f4cd043b78c7b0efc4d21b497a72bf9be07432c6dcd962e036f83a04d61f58bda3951e246c7f53a445ddf50828d3ff016643019303222cad0dfe7d7b6ec20d", 0x7e}, {&(0x7f0000000400)="adf7a4879dffba0b89cca7b44082289ac958517ee6a52a736c165ba2630f3adfd0569a52f370e4af513c24bfdfd07107e99186f37547391ae5d8c07bda6b118749c1f51426d32e80a5141df1fc642a63708b3d578695e7063f42a2c990e45ba2061d69ac7d7b58f617490da50c179e6b31e396992424d9196a4d66812bd4ac687dd0de4d78ba763b2b55c3f55dc4f52c7bfc2cbd7c8e31bec3c070f26095fcea15491be508e95d0d5973d1f59c0cec1aaf5432c669cccc94", 0xb8}, {&(0x7f00000004c0)="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", 0x1000}, {&(0x7f00000014c0)="cd99bcf3b188c91403e5422ce62e", 0xe}, {&(0x7f0000001500)="217a72095525a8376040edd2490094edb11d4083aee0df971cf99f16", 0x1c}], 0x8, &(0x7f00000015c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x69}}, @ip_retopts={{0x64, 0x0, 0x7, {[@noop, @timestamp={0x44, 0xc, 0x80000000, 0x0, 0x10000, [{[@dev={0xac, 0x14, 0x14, 0x1f}], 0x80000000}]}, @cipso={0x86, 0x33, 0x1ff, [{0x0, 0xf, "b39fa78526395438f0b67c69db"}, {0x0, 0xb, "0bc8d9a2b79a864170"}, {0x0, 0x9, "77afe081c46b0a"}, {0x7, 0x4, "ac27"}, {0x7, 0x6, "9191b492"}]}, @ra={0x94, 0x6, 0x2}, @timestamp={0x44, 0x8, 0xc8, 0x1, 0x1ff, [{[], 0x3ff}]}, @ra={0x94, 0x6, 0x8001}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x98}, 0x20000080) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x0) 15:22:52 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:22:52 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:22:52 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x11, r0, 0x8000000) 15:22:52 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) [ 495.990168] protocol 88fb is buggy, dev hsr_slave_0 [ 495.995312] protocol 88fb is buggy, dev hsr_slave_1 [ 496.027635] kvm [12532]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 15:22:52 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000240)='/dev/swradio#\x00', 0x0, 0x2) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000180)=0x1) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x400, 0x2000) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f0000000280)) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x11, r0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000000)) 15:22:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) 15:22:52 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:22:52 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:22:52 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0xaf, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = gettid() recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r3 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x1, 0x2) connect$bt_rfcomm(r3, &(0x7f0000000100)={0x1f, {0x5, 0x4a3, 0x0, 0x6, 0x93a5, 0xfffffffffffffffe}, 0x3}, 0xa) tkill(r2, 0x14) 15:22:52 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x11, r0, 0x8000000) 15:22:52 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) [ 496.230169] protocol 88fb is buggy, dev hsr_slave_0 [ 496.235332] protocol 88fb is buggy, dev hsr_slave_1 [ 496.259515] kvm [12559]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 15:22:52 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x11, r0, 0x8000000) [ 496.311027] protocol 88fb is buggy, dev hsr_slave_0 [ 496.317234] protocol 88fb is buggy, dev hsr_slave_1 15:22:53 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:22:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) close(r0) 15:22:53 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) 15:22:53 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000800)=@broute={'broute\x00', 0x20, 0x4, 0x6e8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000100], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x3, 0x8, 0x80fb, 'dummy0\x00', 'bcsf0\x00', 'bcsf0\x00', 'team0\x00', @dev={[], 0x1b}, [0xff, 0xff, 0xff], @dev={[], 0x1e}, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xae, 0xae, 0xde, [@mark_m={'mark_m\x00', 0x18, {{0x100000001, 0x1f, 0x3, 0x1}}}], [], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffc, 0x2, [{0x11, 0x2, 0x892f, 'ifb0\x00', 'bpq0\x00', 'bpq0\x00', 'ip6gre0\x00', @empty, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], @broadcast, [0xff, 0xff, 0x0, 0x0, 0x0, 0xff], 0xbe, 0xbe, 0x106, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00', 0x2}}}], [], @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x80000001, 0x101, 0x5}}}}, {0x0, 0x2, 0x16, 'bond0\x00', 'nr0\x00', 'bond_slave_1\x00', 'team0\x00', @dev={[], 0x16}, [0x0, 0x0, 0xff, 0xff, 0x0, 0xff], @broadcast, [0x0, 0x0, 0xff, 0xff], 0x9e, 0xee, 0x126, [@vlan={'vlan\x00', 0x8, {{0x0, 0x1, 0x207, 0x4, 0x6}}}], [@common=@log={'log\x00', 0x28, {{0xaa8, "1d0b8ad5f9a1aa9e3438f136b547b9ac54233f2e8ca4880f957467534913", 0x2}}}], @common=@dnat={'dnat\x00', 0x10, {{@dev={[], 0x12}, 0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffe, 0x1, [{0x3, 0x0, 0x89bf, 'vcan0\x00', 'veth1_to_bond\x00', 'yam0\x00', 'team_slave_0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0xff], @broadcast, [0x0, 0xff, 0x0, 0xff], 0x2ee, 0x2ee, 0x31e, [@bpf0={'bpf\x00', 0x210, {{0x31, [{0x1000, 0x8, 0xc9, 0xa3}, {0x2, 0x20, 0x1f, 0x101}, {0x5, 0x3, 0x7, 0x28000000000000}, {0x5, 0x7, 0xbf3c, 0xaab}, {0x8, 0x7, 0x9, 0x1}, {0x5, 0x800, 0x100}, {0x4ab1, 0x5, 0x1000, 0x2}, {0x2, 0xffffffff, 0x4}, {0x400, 0x3, 0x3, 0x2}, {0x2, 0x0, 0x8000}, {0x10000, 0x7fff, 0x7fffffff}, {0x8, 0x80000001, 0x95bf, 0x9d5c}, {0x8000, 0x3, 0xfffffffffffffffd, 0xfffffffffffffffb}, {0x7, 0x0, 0x5, 0x2}, {0x6, 0x3ff, 0xffffffff, 0x800}, {0x8, 0x8, 0x7f, 0x7}, {0x401, 0xfffffffffffffff9, 0x9, 0xb0}, {0xf723, 0xf000000000000000, 0x4984, 0x3}, {0x4, 0x1ff, 0x7f, 0xc5}, {0x5, 0x6, 0x0, 0x8}, {0x1, 0x7fff, 0x1, 0x3ee5256e}, {0x7, 0x0, 0x2, 0x9}, {0x8, 0x3, 0xffff, 0x2}, {0x5, 0x9, 0xfffffffffffffffe, 0x7}, {0x1ff, 0x5, 0x2, 0x4}, {0x3, 0x6846, 0xfffffffffffffff9, 0xfffffffffffffffe}, {0x4, 0x3ff, 0x80000000000000, 0x8}, {0xfffffffffffffffe, 0x5, 0xb0, 0x5}, {0x7, 0x10001, 0x3, 0xfff}, {0x1fb, 0x9, 0x400, 0x3}, {0x40000000000, 0x40f, 0x1f, 0x8}, {0x10001, 0x0, 0x7, 0x16}, {0x6638, 0xb9, 0x7f, 0xf5d}, {0x0, 0x0, 0x2, 0x526}, {0x7, 0x7f2, 0x400, 0x5}, {0x849, 0xb48, 0x3, 0x401}, {0x10001, 0x7, 0xff, 0x90000}, {0x9, 0x401, 0x1, 0x1}, {0x6, 0x1000, 0x0, 0x1}, {0x81, 0x5, 0x3, 0x27ddbe5d}, {0x80000001, 0xfffffffffffffffb, 0xfffffffffffffeff, 0x7}, {0x1c0000000000, 0x8, 0x4, 0xffff}, {0xcc1a, 0x8, 0x6f, 0x9}, {0x3, 0x4, 0x400, 0x80}, {0x8, 0x6, 0x8, 0x2}, {0x7fffffff, 0x8da6, 0x8, 0x2}, {0xffffffff80000000, 0x5, 0x2, 0xf1}, {0xfffffffffffffff8, 0x80, 0x5, 0x7104}, {0xd5cd, 0x1, 0x7, 0x1}, {0x7, 0x5e22, 0x7ff, 0x1}, {0x1, 0x8007, 0x3, 0x1000}, {0x400, 0x100000000, 0x31f1}, {0x4, 0x9, 0x8}, {0x9, 0xfffffffffffffff8, 0x8, 0x9}, {0x6, 0xfff, 0xfffffffffffffffc, 0x4}, {0x80, 0x0, 0x8, 0x37}, {0x78b, 0x4, 0xfffffffffffffffd, 0xfffffffffffffff8}, {0xffff, 0x100000000, 0x9, 0x7}, {0x401, 0x400, 0x7, 0x6}, {0x3f, 0xfffffffffffffffb, 0x10001, 0x1}, {0x10000000000, 0xdb88, 0x1000, 0x100}, {0x6, 0x7bd4, 0xda5, 0x1}, {0x84, 0x7, 0x0, 0x100}, {0x2, 0x9, 0x1, 0x9}], 0x2}}}, @limit={'limit\x00', 0x20, {{0x8, 0x4, 0x2, 0x7ff, 0x8, 0x8}}}], [], @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffd}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff}]}, 0x760) sendto$inet(r1, 0x0, 0xaf, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = gettid() recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) tkill(r2, 0x14) 15:22:53 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x10, r0, 0x8000000) 15:22:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) close(r0) 15:22:53 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x10, r0, 0x8000000) [ 496.578357] kvm [12589]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 15:22:53 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:22:53 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0b") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) 15:22:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) close(r0) 15:22:53 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0xaf, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x200, 0x0) ioctl$CAPI_REGISTER(r2, 0x400c4301, &(0x7f0000000100)={0x3, 0x77, 0x31}) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000140)={0x1, 0x5, 0x4, 0x0, 0x3, 0x9, 0x3ff, 0x0, 0x8, 0x2, 0x6f4b, 0x81, 0x0, 0xff, 0x3, 0x61, 0x8, 0x2, 0x3}) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = gettid() recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) tkill(r3, 0x14) 15:22:53 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x10, r0, 0x8000000) 15:22:53 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:22:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(0xffffffffffffffff) 15:22:53 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, 0xffffffffffffffff, 0x8000000) 15:22:53 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0b") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) 15:22:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(0xffffffffffffffff) 15:22:53 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0xaf, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = gettid() recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) tkill(r2, 0x14) 15:22:53 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, 0xffffffffffffffff, 0x8000000) [ 497.025323] kvm [12635]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 15:22:53 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, 0xffffffffffffffff, 0x8000000) 15:22:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(0xffffffffffffffff) 15:22:53 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0b") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) 15:22:53 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, 0xffffffffffffffff, 0x8000000) 15:22:53 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:22:53 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0xaf, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = gettid() recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x1, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(r3, &(0x7f0000000100)=""/32, 0x20, 0x1, &(0x7f0000000180)={r4, r5+30000000}) tkill(r2, 0x40013) 15:22:53 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x0) 15:22:53 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:22:53 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) [ 497.263550] kvm [12651]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 15:22:54 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7b") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) 15:22:54 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x0) 15:22:54 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x0) 15:22:54 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:22:54 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7b") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) 15:22:54 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, 0x0, 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:22:54 executing program 1: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:22:54 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x0) [ 497.592648] kvm [12692]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 15:22:54 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, 0x0, 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:22:54 executing program 5: setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, 0x0, 0x44f) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:22:54 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) llistxattr(&(0x7f0000000280)='./file0\x00', &(0x7f0000000440)=""/4096, 0x1000) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r0, 0xc004aea7, &(0x7f0000000180)=0x8) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000140)=&(0x7f00000000c0)) openat$capi20(0xffffffffffffff9c, &(0x7f0000000080)='/dev/capi20\x00', 0x20000, 0x0) 15:22:54 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7b") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) 15:22:54 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0xaf, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = gettid() recvmmsg(r1, &(0x7f0000000ac0), 0x1, 0x101, 0x0) tkill(r2, 0x14) 15:22:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7b") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) 15:22:54 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, 0x0, 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:22:54 executing program 5: setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, 0x0, 0x44f) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) [ 498.093892] kvm [12715]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 15:22:54 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x0) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:22:54 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be0") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) [ 498.140956] kvm [12712]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 15:22:54 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x101, 0x440000) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="42ef67f2398e249c475a8a320f07eaa55a5baae49edc61d1a55698cce18dd7bca30da44d76937a72395d0ae03cd01b75eeb448bacb208b712a9e3bad8452993a63a54d715ee37162b69f65150bd435ad249c8bcab415321158ad2bf13db634ee8263b83eeb6b37825eff3f24064ed8d568e855e423e5f607e4ec086be18557e0f0303fdca521d47e33e76c9d4d04afa5dd715accbdd25205", @ANYRES16=r2, @ANYBLOB="02032bbd7000ffdbdf25080000004800010008000b007369700008000200890000000c0007000200000000000000080009001d00000014000300ff0200000000000000000000000000010c0006006c626c6300000000140002000800050005000000080009000500000054000300080005000000000014000600fe8000000000000000000000000000bb080004000100000008000500ac1e010114000600ff01000000000000000000000000000108000500ac14141e0800030000000000"], 0xc4}, 0x1, 0x0, 0x0, 0x4000}, 0x440c0) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = getpgid(0x0) syz_open_procfs$namespace(r4, &(0x7f00000000c0)='ns/ipc\x00') bind$inet(r3, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0xaf, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r5 = gettid() recvmmsg(r3, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) tkill(r5, 0x14) 15:22:54 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x0) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:22:54 executing program 5: setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, 0x0, 0x44f) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:22:54 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) llistxattr(&(0x7f0000000280)='./file0\x00', &(0x7f0000000440)=""/4096, 0x1000) 15:22:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7b") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) 15:22:54 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x0) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) [ 498.284018] kvm [12737]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 15:22:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be0") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) 15:22:55 executing program 5: setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, 0x0, 0x44f) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) close(r0) 15:22:55 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0xaf, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = gettid() recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) tkill(r2, 0x14) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000000c0)) socket$inet_udplite(0x2, 0x2, 0x88) 15:22:55 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:22:55 executing program 5: setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, 0x0, 0x44f) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) close(r0) 15:22:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7b") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) [ 498.516842] kvm [12758]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 15:22:55 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) llistxattr(&(0x7f0000000280)='./file0\x00', &(0x7f0000000440)=""/4096, 0x1000) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = socket$caif_seqpacket(0x25, 0x5, 0x1) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYBLOB="200000000800d9769f60217fdbaa6995b7b52dfcd4bf34ca7454633c9f6288988da63d6daa016fb4c4967afc5324cb432d04ce3f0aff3b5d7b4334bce0a81e797f5aecbbe7ca0959fee19443502a3381b4b2eff71502c2dd679de3aa1d1d6c4884f3cd4698bdd7d3a53be1bfcfc9a555c9686fe8d20e4068a5263b8230590d4c248e44453d3593c67000d02a85cfba228285e95fe866578e811950c3a671765b8980b971ce299cda718dd23803e82bd1408000"/191]) 15:22:55 executing program 5: setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, 0x0, 0x44f) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) close(r0) 15:22:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be0") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) 15:22:55 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:22:55 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r1 = socket$inet(0x2, 0x4000000000000001, 0xec6f) bind$inet(r1, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0xaf, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x101000, 0x0) ioctl$VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000100)={0xf, @sliced={0x3f, [0x1f, 0xffffffffffffffff, 0x2, 0x100000000, 0xfffffffffffffff9, 0x9, 0x5, 0x100000000, 0x81, 0x0, 0x10001, 0x5, 0x80000000, 0x7, 0xfd81, 0x6, 0x6, 0x4, 0x2, 0x9, 0x6, 0x80, 0x6, 0x101, 0x20, 0x6, 0x101, 0x4, 0x8000, 0x0, 0xd95b, 0x8, 0xfffffffffffffffe, 0xffffffffffffffff, 0x440, 0xfff, 0xfffffffffffffff9, 0x3f, 0x5, 0x10000, 0x0, 0x9, 0x2, 0xfe95, 0x1, 0x1, 0x6, 0x400], 0x78f}}) ioctl$PPPOEIOCDFWD(r2, 0xb101, 0x0) r3 = gettid() recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) tkill(r3, 0x14) 15:22:55 executing program 5: setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, 0x0, 0x44f) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(0xffffffffffffffff) [ 498.660768] kvm [12772]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 15:22:55 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:22:55 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000000)={0x0, 0x6}) setsockopt$inet6_buf(r0, 0x29, 0x416436d20690ad14, &(0x7f0000000240)="0d4e43d1a4e9cd04f5db5a057d4af2d60baf1567eed4c4afa9eda9147ca6563c5bf346e1f0c94120f6e6980dc9af1695f7310285fe2c5fc90eca929df51c43168690256bc8d8672858775a03ba141244e11e08a3fd3005d0ced999ff819ab0b714afed1122d6bdb210d504a45300c98e98c3fbaa7cb8d67e646c602f958ba3a07df933e62a39ce003dc493b1e9fb135420803b50c944c952fd39d55f74b8f2f8b6a1068cb91f2367899a013ad1725f1fe03da87baa1ab32695", 0xb9) [ 498.727541] kvm [12778]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 15:22:55 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x0) write$selinux_context(r2, &(0x7f0000000100)='system_u:object_r:cpu_online_t:s0\x00', 0x22) bind$inet(r1, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0xaf, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = gettid() recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) tkill(r3, 0x14) 15:22:55 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) r3 = dup(r2) clock_gettime(0x0, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)={0x2, 0x0, [{0x0, 0x0, 0x200}, {0xfff, 0x0, 0x5}]}) write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}}], 0x18) sendfile(r1, r2, 0x0, 0x20000102000007) sendfile(r2, r0, 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000640)=ANY=[], 0x0, 0x1) r4 = creat(&(0x7f0000000a00)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x0) r5 = open(&(0x7f0000000600)='./bus\x00', 0x40, 0x140) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) close(r1) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3, 0xb, 0x3}, 0x14) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r5) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000024c0)={'team0\x00'}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xf) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r6, 0x4008af00, &(0x7f0000000040)={@my}) 15:22:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) 15:22:55 executing program 5: setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, 0x0, 0x44f) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(0xffffffffffffffff) 15:22:55 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, 0x0, 0x0) close(r0) 15:22:55 executing program 1 (fault-call:2 fault-nth:0): r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) 15:22:55 executing program 3: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x3}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0xaf, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = gettid() ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000140)=r3) recvmmsg(r2, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) tkill(r3, 0x14) 15:22:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) 15:22:55 executing program 5: setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, 0x0, 0x44f) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(0xffffffffffffffff) [ 498.966849] FAULT_INJECTION: forcing a failure. [ 498.966849] name failslab, interval 1, probability 0, space 0, times 0 [ 499.014811] CPU: 0 PID: 12813 Comm: syz-executor.1 Not tainted 4.14.125 #19 [ 499.021975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 499.021981] Call Trace: [ 499.022004] dump_stack+0x138/0x19c [ 499.022024] should_fail.cold+0x10f/0x159 [ 499.022043] should_failslab+0xdb/0x130 [ 499.022060] kmem_cache_alloc+0x2d7/0x780 [ 499.022075] ? file_has_perm+0x163/0x2c0 [ 499.022090] __split_vma+0xc9/0x6d0 [ 499.022104] do_munmap+0x257/0xd60 [ 499.022115] ? arch_get_unmapped_area+0x5f0/0x5f0 [ 499.022130] mmap_region+0x16f/0x1030 [ 499.022148] do_mmap+0x5b8/0xcd0 [ 499.022166] vm_mmap_pgoff+0x17a/0x1d0 [ 499.045852] ? vma_is_stack_for_current+0xa0/0xa0 [ 499.045864] ? __fget+0x237/0x370 [ 499.045883] SyS_mmap_pgoff+0x3ca/0x520 [ 499.069905] ? find_mergeable_anon_vma+0x2c0/0x2c0 [ 499.069920] ? do_syscall_64+0x53/0x640 [ 499.069934] ? align_vdso_addr+0x60/0x60 [ 499.077227] SyS_mmap+0x16/0x20 [ 499.077239] do_syscall_64+0x1e8/0x640 [ 499.077248] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 499.077266] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 499.077276] RIP: 0033:0x4592c9 [ 499.077292] RSP: 002b:00007f9dc143bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 499.130750] RAX: ffffffffffffffda RBX: 00007f9dc143bc90 RCX: 00000000004592c9 [ 499.138027] RDX: ffffffffffffffff RSI: 0000000000600000 RDI: 0000000020a00000 [ 499.145310] RBP: 000000000075bf20 R08: 0000000000000003 R09: 0000000008000000 [ 499.152599] R10: 0000000000000011 R11: 0000000000000246 R12: 00007f9dc143c6d4 15:22:55 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0xaf, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000000c0)={0x6, 0x1, 0x200000, 0x2, 0x0}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000140)={r2, 0xb7, "1f98bfa44ecb5df9328bed4d2532f316beadb343da737f048eca1aeca5c9e39af87bc5ce347d6ce32d90a196a8f9b39fcae264c777fa1158c442e9e41f1e4107daeb872347f060f5874759af00741ec5220497a07d23a6f7f28d0e8aa8f5bb13bdbac2762a06ceb804465cb7219a0c47f1f1ad97cd749d8f68473e39f6245d9301a8e90b14b23c19faf3f1478302dbdd845e383237e8460b4204769cecec3eb7794546065f9beab0fe8cf7e407c706746b8ff4068e221e"}, &(0x7f0000000200)=0xbf) r3 = gettid() recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) tkill(r3, 0x14) 15:22:55 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, 0x0, 0x0) close(r0) [ 499.159909] R13: 00000000004c55cf R14: 00000000004d9998 R15: 0000000000000004 15:22:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) [ 499.186585] audit: type=1804 audit(1560525775.821:63): pid=12829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir439683581/syzkaller.ahauJE/283/bus" dev="sda1" ino=16591 res=1 15:22:55 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:22:56 executing program 0 (fault-call:10 fault-nth:0): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000014c0)="11dca5055e0bcfec7be070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000620920144f88cd8bf8fa050030cea0e283d9b22703305b8fe23074bc015a41200581e5ef57c5000000000000000bcbb61c10b1f4451c"], 0x1}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 15:22:56 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, 0x0, 0x0) close(r0) 15:22:56 executing program 1 (fault-call:2 fault-nth:1): r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) 15:22:56 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) 15:22:56 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0xaf, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = gettid() r3 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x7, 0x420002) ioctl$EVIOCGBITSW(r3, 0x80404525, &(0x7f0000000100)=""/209) recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) tkill(r2, 0x14) 15:22:56 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, 0x0, 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:22:56 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) [ 499.535200] FAULT_INJECTION: forcing a failure. [ 499.535200] name failslab, interval 1, probability 0, space 0, times 0 15:22:56 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) close(r0) 15:22:56 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, 0x0, 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) [ 499.577234] CPU: 1 PID: 12856 Comm: syz-executor.1 Not tainted 4.14.125 #19 [ 499.584403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 499.593775] Call Trace: [ 499.596387] dump_stack+0x138/0x19c [ 499.600037] should_fail.cold+0x10f/0x159 [ 499.604211] should_failslab+0xdb/0x130 [ 499.608197] kmem_cache_alloc+0x47/0x780 [ 499.608210] ? __split_vma+0xc9/0x6d0 [ 499.608223] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 499.608237] anon_vma_clone+0xde/0x470 [ 499.608252] __split_vma+0x28a/0x6d0 [ 499.629160] do_munmap+0x257/0xd60 [ 499.632717] ? arch_get_unmapped_area+0x5f0/0x5f0 [ 499.637567] mmap_region+0x16f/0x1030 [ 499.637588] do_mmap+0x5b8/0xcd0 [ 499.637606] vm_mmap_pgoff+0x17a/0x1d0 [ 499.637622] ? vma_is_stack_for_current+0xa0/0xa0 [ 499.653536] ? __fget+0x237/0x370 [ 499.657110] SyS_mmap_pgoff+0x3ca/0x520 [ 499.661117] ? find_mergeable_anon_vma+0x2c0/0x2c0 [ 499.661132] ? do_syscall_64+0x53/0x640 [ 499.661143] ? align_vdso_addr+0x60/0x60 [ 499.661155] SyS_mmap+0x16/0x20 15:22:56 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, 0x0, 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) [ 499.661162] do_syscall_64+0x1e8/0x640 [ 499.661171] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 499.661186] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 499.661194] RIP: 0033:0x4592c9 [ 499.661199] RSP: 002b:00007f9dc143bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 499.661211] RAX: ffffffffffffffda RBX: 00007f9dc143bc90 RCX: 00000000004592c9 [ 499.661217] RDX: ffffffffffffffff RSI: 0000000000600000 RDI: 0000000020a00000 [ 499.661223] RBP: 000000000075bf20 R08: 0000000000000003 R09: 0000000008000000 15:22:56 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) 15:22:56 executing program 1 (fault-call:2 fault-nth:2): r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) [ 499.661229] R10: 0000000000000011 R11: 0000000000000246 R12: 00007f9dc143c6d4 [ 499.661235] R13: 00000000004c55cf R14: 00000000004d9998 R15: 0000000000000004 [ 499.797204] FAULT_INJECTION: forcing a failure. [ 499.797204] name failslab, interval 1, probability 0, space 0, times 0 [ 499.817861] CPU: 1 PID: 12881 Comm: syz-executor.1 Not tainted 4.14.125 #19 [ 499.825019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 499.834378] Call Trace: [ 499.837005] dump_stack+0x138/0x19c [ 499.840655] should_fail.cold+0x10f/0x159 [ 499.844819] should_failslab+0xdb/0x130 [ 499.848818] kmem_cache_alloc+0x2d7/0x780 [ 499.853069] mmap_region+0x602/0x1030 [ 499.856886] do_mmap+0x5b8/0xcd0 [ 499.860275] vm_mmap_pgoff+0x17a/0x1d0 [ 499.864178] ? vma_is_stack_for_current+0xa0/0xa0 [ 499.869034] ? __fget+0x237/0x370 [ 499.872508] SyS_mmap_pgoff+0x3ca/0x520 [ 499.876492] ? find_mergeable_anon_vma+0x2c0/0x2c0 [ 499.881436] ? do_syscall_64+0x53/0x640 [ 499.885422] ? align_vdso_addr+0x60/0x60 [ 499.889491] SyS_mmap+0x16/0x20 [ 499.892778] do_syscall_64+0x1e8/0x640 [ 499.896668] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 499.901533] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 499.906726] RIP: 0033:0x4592c9 [ 499.909929] RSP: 002b:00007f9dc143bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 499.917738] RAX: ffffffffffffffda RBX: 00007f9dc143bc90 RCX: 00000000004592c9 [ 499.925019] RDX: ffffffffffffffff RSI: 0000000000600000 RDI: 0000000020a00000 [ 499.932303] RBP: 000000000075bf20 R08: 0000000000000003 R09: 0000000008000000 [ 499.939580] R10: 0000000000000011 R11: 0000000000000246 R12: 00007f9dc143c6d4 [ 499.946957] R13: 00000000004c55cf R14: 00000000004d9998 R15: 0000000000000004 [ 500.150163] net_ratelimit: 18 callbacks suppressed [ 500.155231] protocol 88fb is buggy, dev hsr_slave_0 [ 500.160343] protocol 88fb is buggy, dev hsr_slave_1 [ 500.390237] protocol 88fb is buggy, dev hsr_slave_0 [ 500.395357] protocol 88fb is buggy, dev hsr_slave_1 [ 500.470128] protocol 88fb is buggy, dev hsr_slave_0 [ 500.475276] protocol 88fb is buggy, dev hsr_slave_1 [ 500.870211] protocol 88fb is buggy, dev hsr_slave_0 [ 500.875402] protocol 88fb is buggy, dev hsr_slave_1 [ 501.270164] protocol 88fb is buggy, dev hsr_slave_0 [ 501.275338] protocol 88fb is buggy, dev hsr_slave_1 15:22:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000014c0)="11dca5055e0bcfec7be070") r1 = gettid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="201000620920144f88cd8bf8fa050030cea0e283d9b22703305b8fe23074bc019741200581e5ef57afb32964ba900933a2917ccf8e7e7a312eed560bcbb71c10b1f4451c"], 0x1}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$setown(r0, 0x8, r1) r2 = getpgrp(0xffffffffffffffff) capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f0000000080)={0x3, 0x5, 0x7, 0x5, 0x4791e86b, 0xffffffff}) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000100)={'bridge_slave_1\x00', {0x2, 0x4e24, @multicast1}}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f00000005c0)={r0}) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3) r4 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x17) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x200200, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000002c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r5, &(0x7f0000000340)={0x16, 0x98, 0xfa00, {&(0x7f0000000280), 0x1, r6, 0x1c, 0x1, @in={0x2, 0x4e22, @local}}}, 0xa0) ptrace$cont(0x18, r4, 0x0, 0x0) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000180)) openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0xfb1f46058e4ae99d, 0x0) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r4, 0x0, 0x0) 15:22:59 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x0) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:22:59 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) 15:22:59 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x105000) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x24, &(0x7f0000000100)={@loopback, @multicast2, 0x0}, &(0x7f0000000140)=0xc) fstat(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6=@ipv4={[], [], @empty}, 0x4e23, 0x4, 0x4e20, 0xffffffffffffff7f, 0x2, 0xa0, 0xa0, 0x84, r1, r2}, {0x100000001, 0x4, 0x453a, 0x1000, 0x7, 0x4, 0x7b67fda7, 0x6}, {0xfffffffffffffff8, 0x8, 0x8, 0xfffffffffffffffa}, 0x8, 0x0, 0x0, 0x0, 0x1, 0x3}, {{@in=@local, 0x4d4, 0x7f}, 0xa, @in=@remote, 0x3507, 0x4, 0x3, 0x0, 0x401, 0x1a7, 0x8}}, 0xe8) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r4, 0x0, 0xaf, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r5 = gettid() recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) tkill(r5, 0x14) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000300)=0x1) 15:22:59 executing program 1 (fault-call:2 fault-nth:3): r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) 15:22:59 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x0) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:22:59 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) [ 502.666705] capability: warning: `syz-executor.0' uses deprecated v2 capabilities in a way that may be insecure [ 505.430244] net_ratelimit: 22 callbacks suppressed [ 505.435299] protocol 88fb is buggy, dev hsr_slave_0 [ 505.440543] protocol 88fb is buggy, dev hsr_slave_1 [ 505.590249] protocol 88fb is buggy, dev hsr_slave_0 [ 505.595445] protocol 88fb is buggy, dev hsr_slave_1 [ 506.390151] protocol 88fb is buggy, dev hsr_slave_0 [ 506.395299] protocol 88fb is buggy, dev hsr_slave_1 [ 506.630204] protocol 88fb is buggy, dev hsr_slave_0 [ 506.635336] protocol 88fb is buggy, dev hsr_slave_1 [ 506.710166] protocol 88fb is buggy, dev hsr_slave_0 [ 506.715261] protocol 88fb is buggy, dev hsr_slave_1 15:23:06 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) close(r0) 15:23:06 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x4000, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000001c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x5, [@loopback, @multicast1, @local, @multicast2, @rand_addr=0x1ff]}, 0x24) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000180)={0x1eadebf3, 0x9, 0x27, &(0x7f0000000040)="9a589740e4f71edb3505dd355476ceb2e5f76d54ecd86e4e4e4c56399c388c5f4dee31c3ca2ea6"}) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r1, 0x8000000) r2 = semget(0x3, 0x4, 0x13) semctl$GETPID(r2, 0x2, 0xb, &(0x7f0000000240)=""/21) 15:23:06 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x0) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:23:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000014c0)="11dca5055e0bcfec7be070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000620920144f88cd8bf8fa050030cea0e283d9b22703305b8fe23074bc015a41200581e5ef57c5000000000000000bcbb61c10b1f4451c"], 0x1}}, 0x0) clone(0x1000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffff9c, 0xae41, 0x2) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000080)={0x0, 0x7c2, 0x2}) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = dup2(r0, r2) tkill(r1, 0x17) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000180)={'ipvs\x00'}, &(0x7f00000001c0)=0x1e) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xd3, 0xc8000) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000100)={0xff80000000000000, 0xb}) 15:23:06 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) 15:23:06 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x800, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @remote, 0x3}, 0x1c) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0xaf, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) timer_create(0xfffffffffffffffd, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = gettid() recvmmsg(r2, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) tkill(r3, 0x14) 15:23:06 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:23:06 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) 15:23:06 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x82100, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r1, 0x8000000) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000040)={0x10000, 0x4000, 0x2, 0x8000, 0x3f}) 15:23:06 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:23:06 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) unshare(0x10000) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xfffffbfffffffffb, 0x11, r0, 0x0) 15:23:06 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) [ 510.550146] net_ratelimit: 18 callbacks suppressed [ 510.550152] protocol 88fb is buggy, dev hsr_slave_0 [ 510.560275] protocol 88fb is buggy, dev hsr_slave_1 [ 510.800153] protocol 88fb is buggy, dev hsr_slave_0 [ 510.805324] protocol 88fb is buggy, dev hsr_slave_1 [ 510.870124] protocol 88fb is buggy, dev hsr_slave_0 [ 510.875589] protocol 88fb is buggy, dev hsr_slave_1 [ 511.270180] protocol 88fb is buggy, dev hsr_slave_0 [ 511.275543] protocol 88fb is buggy, dev hsr_slave_1 [ 511.670175] protocol 88fb is buggy, dev hsr_slave_0 [ 511.675323] protocol 88fb is buggy, dev hsr_slave_1 [ 515.830238] net_ratelimit: 22 callbacks suppressed [ 515.835418] protocol 88fb is buggy, dev hsr_slave_0 [ 515.840548] protocol 88fb is buggy, dev hsr_slave_1 [ 516.000205] protocol 88fb is buggy, dev hsr_slave_0 [ 516.005317] protocol 88fb is buggy, dev hsr_slave_1 [ 516.790172] protocol 88fb is buggy, dev hsr_slave_0 [ 516.795257] protocol 88fb is buggy, dev hsr_slave_1 [ 517.030229] protocol 88fb is buggy, dev hsr_slave_0 [ 517.035342] protocol 88fb is buggy, dev hsr_slave_1 [ 517.110210] protocol 88fb is buggy, dev hsr_slave_0 [ 517.115322] protocol 88fb is buggy, dev hsr_slave_1 15:23:16 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) close(r0) 15:23:16 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, 0x0, 0x0) close(r0) 15:23:16 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x200000000000, 0x9, 0x1000001, {0x8, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) 15:23:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) 15:23:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000014c0)="11dca5055e0bcfec7be070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000620920144f88cd8bf8fa050030cea0e283d9b22703305b8fe23074bc015a41200581e5ef57c5000000000000000bcbb61c10b1f4451c"], 0x1}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x8000, &(0x7f0000000300)="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") ptrace$cont(0x9, r1, 0x0, 0x0) 15:23:16 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0xaf, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = gettid() recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0xb2, 0x0, 0x0, 0x0, 0x154}, 0x4}], 0x9cc, 0x20, 0x0) accept$netrom(r0, &(0x7f00000000c0)={{0x3, @null}, [@null, @null, @rose, @bcast, @netrom, @default, @bcast]}, &(0x7f0000000140)=0x48) tkill(r2, 0x14) 15:23:16 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) ioctl$RTC_WIE_ON(r0, 0x700f) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000180)={0x800, 0x0, [], {0x0, @reserved}}) ioctl$VIDIOC_G_AUDIO(r0, 0x80345621, &(0x7f0000000000)) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x206) 15:23:16 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, 0x0, 0x0) close(r0) 15:23:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) 15:23:16 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, 0x0, 0x0) close(r0) 15:23:16 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000004) ioctl$TCSBRKP(r0, 0x5425, 0x40) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000000)=0xe8) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, r1, 0x2}, 0xc) r3 = getgid() lchown(&(0x7f0000000180)='./file0\x00', r2, r3) 15:23:16 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) close(r0) [ 520.950121] net_ratelimit: 18 callbacks suppressed [ 520.950126] protocol 88fb is buggy, dev hsr_slave_0 [ 520.960424] protocol 88fb is buggy, dev hsr_slave_1 [ 521.190151] protocol 88fb is buggy, dev hsr_slave_0 [ 521.195272] protocol 88fb is buggy, dev hsr_slave_1 [ 521.270153] protocol 88fb is buggy, dev hsr_slave_0 [ 521.275752] protocol 88fb is buggy, dev hsr_slave_1 [ 521.670201] protocol 88fb is buggy, dev hsr_slave_0 [ 521.675477] protocol 88fb is buggy, dev hsr_slave_1 [ 522.070167] protocol 88fb is buggy, dev hsr_slave_0 [ 522.075500] protocol 88fb is buggy, dev hsr_slave_1 [ 526.240220] net_ratelimit: 22 callbacks suppressed [ 526.240225] protocol 88fb is buggy, dev hsr_slave_0 [ 526.250633] protocol 88fb is buggy, dev hsr_slave_1 [ 526.390393] protocol 88fb is buggy, dev hsr_slave_0 [ 526.395532] protocol 88fb is buggy, dev hsr_slave_1 [ 527.190171] protocol 88fb is buggy, dev hsr_slave_0 [ 527.195571] protocol 88fb is buggy, dev hsr_slave_1 [ 527.430180] protocol 88fb is buggy, dev hsr_slave_0 [ 527.435261] protocol 88fb is buggy, dev hsr_slave_1 [ 527.510182] protocol 88fb is buggy, dev hsr_slave_0 [ 527.515430] protocol 88fb is buggy, dev hsr_slave_1 15:23:27 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(0xffffffffffffffff) 15:23:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, 0x0) 15:23:27 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) 15:23:27 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="c0dca5055e0bcfec7be070") r1 = socket$inet(0x2, 0x80005, 0x6) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) bind$inet(r1, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0xaf, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x4) r3 = gettid() recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) tkill(r3, 0x14) 15:23:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000014c0)="11dca5055e0bcfec7be070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000620920144f88cd8bf8fa050030cea0e283d9b22703305b8fe23074bc015a41200581e5ef57c5000000000000000bcbb61c10b1f4451c"], 0x1}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0x200000) ioctl$GIO_CMAP(r2, 0x4b70, &(0x7f0000000080)) tkill(r1, 0x3f) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x1, 0x8) 15:23:27 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) close(r0) 15:23:27 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000280)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x8, 0xb, 0x1, {0x9, @win={{0x1, 0x2, 0x9, 0x2}, 0x8, 0xffffffffffffff00, &(0x7f0000000000)={{0x2, 0xb8, 0x1, 0x1}}, 0x5, &(0x7f0000000180)="60ab635a4e96f76b962f26fec5285ce5a6ed5499f888961b6700f7c341f071f537c349d33c42edd4780fe223a5cab307898aa1572e808060176bce649fd44d2605920aea8a51149222ff6a0bda5458501773e4d4827ca38c0244462d61302d77a88be4717225b851bb54a7808ab71b366adc23a941c0a69b8e811f6cbf99caae5439a7bb62e8655fc7091cfc68e9a32294ce04dcee1565c10499221c60763bdd347c895c6f271370aa69", 0x9}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) 15:23:27 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(0xffffffffffffffff) 15:23:27 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x100}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x7, r1}, &(0x7f0000000140)=0x10) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="140764a35781048c5a6c02fa98027ea70f38a184fc94746142b54d1ff206297529cbb5f1341be0e94d3cfe936668266f5893a0c928d1688607ee971af071b796c7030e90b216736de18a513e3d1d7f", 0x4f) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) 15:23:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, 0x0) 15:23:27 executing program 1: r0 = open(&(0x7f0000000000)='./file0\x00', 0x40c000, 0x0) ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, &(0x7f0000000040)) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r1, 0x8000000) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af14, &(0x7f0000000180)={0x1, 0x3}) 15:23:27 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(0xffffffffffffffff) 15:23:27 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0xaf, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = gettid() r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/status\x00', 0x0, 0x0) bind$unix(r3, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) tkill(r2, 0x14) 15:23:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, 0x0) 15:23:27 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x5, 0x5, {0x3, @win={{0x0, 0x80000000, 0x9, 0x8}, 0x6, 0xfffffffffffffff9, &(0x7f0000000180)={{0x8, 0x1, 0x5, 0x400}, &(0x7f0000000040)={{0x3, 0x401, 0x7f, 0x9}}}, 0x101, &(0x7f00000001c0)="dfae03790f4413343fc86ca85dfdccba00b0722deebc6c3dc20c341751fb5d74141f0555f871641983ca32e367b8bb47aed371", 0x4}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000000)) 15:23:27 executing program 4 (fault-call:2 fault-nth:0): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) [ 530.661305] FAULT_INJECTION: forcing a failure. [ 530.661305] name failslab, interval 1, probability 0, space 0, times 0 [ 530.675891] CPU: 0 PID: 13069 Comm: syz-executor.4 Not tainted 4.14.125 #19 [ 530.683102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 530.692709] Call Trace: [ 530.695408] dump_stack+0x138/0x19c [ 530.699051] should_fail.cold+0x10f/0x159 [ 530.703327] ? find_held_lock+0x35/0x130 [ 530.707446] should_failslab+0xdb/0x130 [ 530.707461] kmem_cache_alloc_node+0x56/0x780 [ 530.715960] ? lock_downgrade+0x6e0/0x6e0 [ 530.715978] __alloc_skb+0x9c/0x500 [ 530.723913] ? skb_scrub_packet+0x4b0/0x4b0 [ 530.729161] ? mgmt_index_removed+0x150/0x250 [ 530.733673] ? wait_for_completion+0x420/0x420 [ 530.738969] ? vhci_close_dev+0x50/0x50 [ 530.743064] hci_sock_dev_event+0xd2/0x560 [ 530.747385] hci_unregister_dev+0x225/0x7d0 [ 530.751961] ? vhci_close_dev+0x50/0x50 [ 530.755957] vhci_release+0x76/0xf0 [ 530.759730] __fput+0x275/0x7a0 [ 530.763022] ____fput+0x16/0x20 [ 530.766560] task_work_run+0x114/0x190 [ 530.770512] exit_to_usermode_loop+0x1da/0x220 [ 530.775119] do_syscall_64+0x4bc/0x640 [ 530.779013] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 530.783868] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 530.789128] RIP: 0033:0x4592c9 [ 530.792319] RSP: 002b:00007f99bd51ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 530.800145] RAX: 0000000000000000 RBX: 00007f99bd51ec90 RCX: 00000000004592c9 [ 530.807541] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 530.814814] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 530.822150] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f99bd51f6d4 [ 530.829525] R13: 00000000004f8052 R14: 00000000004d0e30 R15: 0000000000000004 [ 531.360108] net_ratelimit: 18 callbacks suppressed [ 531.360112] protocol 88fb is buggy, dev hsr_slave_0 [ 531.370185] protocol 88fb is buggy, dev hsr_slave_1 [ 531.590201] protocol 88fb is buggy, dev hsr_slave_0 [ 531.595427] protocol 88fb is buggy, dev hsr_slave_1 [ 531.670149] protocol 88fb is buggy, dev hsr_slave_0 [ 531.675476] protocol 88fb is buggy, dev hsr_slave_1 [ 532.070184] protocol 88fb is buggy, dev hsr_slave_0 [ 532.075500] protocol 88fb is buggy, dev hsr_slave_1 [ 532.470222] protocol 88fb is buggy, dev hsr_slave_0 [ 532.475477] protocol 88fb is buggy, dev hsr_slave_1 15:23:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000014c0)="11dca5055e0bcfec7be070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000620920144f88cd8bf8fa050030cea0e283d9b22703305b8fe23074bc015a41200581e5ef57c5000000000000000bcbb61c10b1f4451c"], 0x1}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) socketpair(0x0, 0x2, 0x2, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f0000000080), 0x4) ptrace$cont(0x9, r1, 0x0, 0x0) [ 536.630261] net_ratelimit: 22 callbacks suppressed [ 536.635305] protocol 88fb is buggy, dev hsr_slave_0 [ 536.640502] protocol 88fb is buggy, dev hsr_slave_1 [ 536.790208] protocol 88fb is buggy, dev hsr_slave_0 [ 536.795327] protocol 88fb is buggy, dev hsr_slave_1 [ 537.590160] protocol 88fb is buggy, dev hsr_slave_0 [ 537.595415] protocol 88fb is buggy, dev hsr_slave_1 [ 537.830224] protocol 88fb is buggy, dev hsr_slave_0 [ 537.835537] protocol 88fb is buggy, dev hsr_slave_1 [ 537.910161] protocol 88fb is buggy, dev hsr_slave_0 [ 537.915268] protocol 88fb is buggy, dev hsr_slave_1 15:23:37 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) close(r0) 15:23:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x0, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) 15:23:37 executing program 1: r0 = socket$isdn(0x22, 0x3, 0x10) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000000)=@generic={0x0, 0xfffffffffffffffe, 0x80}) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r1, 0x8000000) 15:23:37 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0xaf, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f00000000c0)={0x400, 0x800, 0x1, 0x3ff, 0x81, 0x5, 0xff, 0x40, 0x0}, &(0x7f0000000100)=0x20) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000200)={r2, 0x85}, 0xfffffffffffffda9) r3 = gettid() recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) tkill(r3, 0x14) 15:23:37 executing program 4 (fault-call:2 fault-nth:1): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:23:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) msgget(0x0, 0x2) ioctl(r0, 0x1000008912, &(0x7f00000014c0)="11dca5055e0bcfec7be070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000006209050030cea0e283d9b22703305b8fe23074bc015a41200581e5ef57c5000000000000000bcbb61c10b1f4451c"], 0x1}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setopts(0x4200, r1, 0xffffffffffff11b7, 0x4c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) r2 = shmget$private(0x0, 0x1000, 0x820, &(0x7f0000000000/0x1000)=nil) r3 = getuid() fstat(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) shmctl$IPC_SET(r2, 0x1, &(0x7f00000001c0)={{0xffffffffffff52df, r3, r4, r5, r6, 0x80, 0x99}, 0x5, 0x3, 0x0, 0x1, r1, r1, 0x9}) [ 540.668154] FAULT_INJECTION: forcing a failure. [ 540.668154] name failslab, interval 1, probability 0, space 0, times 0 [ 540.696784] CPU: 0 PID: 13088 Comm: syz-executor.4 Not tainted 4.14.125 #19 [ 540.703948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 540.713494] Call Trace: [ 540.716116] dump_stack+0x138/0x19c [ 540.719751] should_fail.cold+0x10f/0x159 [ 540.723926] should_failslab+0xdb/0x130 [ 540.727901] kmem_cache_alloc_node_trace+0x5a/0x770 [ 540.732933] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 540.738391] __kmalloc_node_track_caller+0x3d/0x80 [ 540.743339] __kmalloc_reserve.isra.0+0x40/0xe0 [ 540.748008] __alloc_skb+0xcf/0x500 [ 540.751630] ? skb_scrub_packet+0x4b0/0x4b0 [ 540.756000] ? mgmt_index_removed+0x150/0x250 [ 540.760498] ? wait_for_completion+0x420/0x420 [ 540.765082] ? vhci_close_dev+0x50/0x50 [ 540.769052] hci_sock_dev_event+0xd2/0x560 [ 540.773296] hci_unregister_dev+0x225/0x7d0 [ 540.777624] ? vhci_close_dev+0x50/0x50 [ 540.781595] vhci_release+0x76/0xf0 [ 540.785222] __fput+0x275/0x7a0 [ 540.788503] ____fput+0x16/0x20 [ 540.791826] task_work_run+0x114/0x190 [ 540.795720] exit_to_usermode_loop+0x1da/0x220 [ 540.800298] do_syscall_64+0x4bc/0x640 [ 540.804186] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 540.809028] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 540.814214] RIP: 0033:0x4592c9 15:23:37 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f0000000180)={0x5f, &(0x7f0000000000)="98acd24116bbce2e504a11ab60d110bcae8611625ccc7336d69ee6058cfbc6bdf5def087b0f9e01f5383cdbb44cd3d9784162a9bbe4230bdedd5cdf3f9c6a6d1d313adb5e85c2e72232281f972841527007afc6d7b2a486dc4b08afce050ee"}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x4, 0x11, r0, 0x8000004) setsockopt$ax25_int(r0, 0x101, 0x7, &(0x7f0000000240)=0x7, 0x4) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000002c0)={0x4, 0x3, 0x4, 0x200000, {r1, r2/1000+10000}, {0x0, 0xc, 0x8, 0x0, 0x3, 0x8, "f12d8b1c"}, 0x6, 0x7, @userptr=0x3ff, 0x4}) getsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f00000003c0)={@multicast2, @remote, @dev}, &(0x7f0000000400)=0xb) timerfd_settime(r0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000000380)) fstat(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0}, &(0x7f00000005c0)=0xc) setresuid(r3, r4, r5) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000600)={0x0, 0xfffffffffffff748}, &(0x7f0000000640)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000680)={0x80000000, 0x4, 0x2, 0x7ff, r6}, &(0x7f00000006c0)=0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') 15:23:37 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(0xffffffffffffffff) [ 540.817393] RSP: 002b:00007f99bd51ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 540.825104] RAX: 0000000000000000 RBX: 00007f99bd51ec90 RCX: 00000000004592c9 [ 540.832380] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 540.839654] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 540.846931] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f99bd51f6d4 [ 540.854199] R13: 00000000004f8052 R14: 00000000004d0e30 R15: 0000000000000004 15:23:37 executing program 4 (fault-call:2 fault-nth:2): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:23:37 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000100)) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0xaf, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = gettid() recvmmsg(r2, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) tkill(r3, 0x14) 15:23:37 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(0xffffffffffffffff) 15:23:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x0, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) 15:23:37 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000000)={0x400a, 0x8000, 0xac51, 0x1ff}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) write$selinux_load(r0, &(0x7f0000000240)={0xf97cff8c, 0x8, 'SE Linux', "eff479cf1b8b083be5fb80c777be5a3b7150f69814d5e6dceaa35783212371e2a8cfe3009aedc7688669b7290557f6450cca094e7d4831145344517a646e8b8a6f5b5017518571c21cd043f9a4bd0bc93864c81adf06ddb53387cee7f61289d3ad30ce88137bc149975f96b5d98d6128cbc5ebf047017b5d3729b7c59a28fe4beff46349baaf5daddb2f8257e0a32c9f3f9b57f3b59a7ecc08fdeab2bf473780b6d55a10588901a72ccaafe25b95811fe42879ebeb867b615912f9030c2beea6dbbfa7322171bd6be87db49997a54338322313a3d332add35e159cca92d611b0b7c8d5046632501a3a01d5838c031cbfb92c83fdf7e89c2606537d7487d5"}, 0x10e) arch_prctl$ARCH_GET_CPUID(0x1011) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) 15:23:37 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(0xffffffffffffffff) [ 541.042199] FAULT_INJECTION: forcing a failure. [ 541.042199] name failslab, interval 1, probability 0, space 0, times 0 [ 541.104877] CPU: 1 PID: 13117 Comm: syz-executor.4 Not tainted 4.14.125 #19 [ 541.112636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 541.112642] Call Trace: [ 541.112666] dump_stack+0x138/0x19c [ 541.112682] should_fail.cold+0x10f/0x159 [ 541.112695] should_failslab+0xdb/0x130 [ 541.112706] kmem_cache_alloc_trace+0x2e9/0x790 [ 541.112722] ? lock_downgrade+0x6e0/0x6e0 [ 541.137058] ? devm_device_remove_groups+0x50/0x50 [ 541.137069] kobject_uevent_env+0x378/0xc23 [ 541.137081] ? wait_for_completion+0x420/0x420 [ 541.146694] kobject_uevent+0x20/0x26 [ 541.146704] device_del+0x65c/0xaa0 [ 541.146714] ? __device_links_no_driver+0x220/0x220 [ 541.146725] ? vhci_close_dev+0x50/0x50 [ 541.146732] rfkill_unregister+0xd1/0x2c0 [ 541.146738] ? vhci_close_dev+0x50/0x50 [ 541.156408] hci_unregister_dev+0x259/0x7d0 [ 541.164802] ? vhci_close_dev+0x50/0x50 [ 541.164809] vhci_release+0x76/0xf0 [ 541.164821] __fput+0x275/0x7a0 [ 541.174173] ____fput+0x16/0x20 [ 541.174185] task_work_run+0x114/0x190 [ 541.174197] exit_to_usermode_loop+0x1da/0x220 [ 541.174204] do_syscall_64+0x4bc/0x640 [ 541.174210] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 541.174220] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 541.174226] RIP: 0033:0x4592c9 [ 541.174235] RSP: 002b:00007f99bd51ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 541.239221] RAX: 0000000000000000 RBX: 00007f99bd51ec90 RCX: 00000000004592c9 [ 541.246917] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 15:23:37 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xaf, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x402080, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x20}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000002c0)={r2, 0x1}, &(0x7f0000000300)=0x8) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = gettid() socketpair(0x19, 0x80000, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x4}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000240)={r5, 0x7}, &(0x7f0000000280)=0x8) tkill(r3, 0x14) 15:23:37 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x8e9, 0x3, {0x2, @win={{0x7fffffff, 0x2, 0x3e6}, 0x4, 0x9, &(0x7f0000000180)={{0x8, 0xfffffffffffffffd, 0x401, 0x6}, &(0x7f0000000040)={{0x7fffffff, 0x2, 0x8, 0x1000}, &(0x7f0000000000)={{0x80000001, 0x1, 0x40, 0x10001}}}}, 0x0, &(0x7f00000001c0)="dec07ed5d2d5628002c084801d64921563ef56a0ff196bf275126364ec667d0ab003bae2c16fe50be74279c2", 0x7}}}) connect$bt_rfcomm(r0, &(0x7f0000000340)={0x1f, {0x5, 0x8, 0x4, 0xfffffffffffffffa, 0x6, 0x6}, 0x8001}, 0xa) [ 541.254324] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 541.261783] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f99bd51f6d4 [ 541.269453] R13: 00000000004f8052 R14: 00000000004d0e30 R15: 0000000000000004 15:23:37 executing program 5: [ 541.750286] net_ratelimit: 18 callbacks suppressed [ 541.755394] protocol 88fb is buggy, dev hsr_slave_0 [ 541.760741] protocol 88fb is buggy, dev hsr_slave_1 [ 542.000124] protocol 88fb is buggy, dev hsr_slave_0 [ 542.005599] protocol 88fb is buggy, dev hsr_slave_1 [ 542.070175] protocol 88fb is buggy, dev hsr_slave_0 [ 542.075259] protocol 88fb is buggy, dev hsr_slave_1 [ 542.470134] protocol 88fb is buggy, dev hsr_slave_0 [ 542.475522] protocol 88fb is buggy, dev hsr_slave_1 [ 542.870267] protocol 88fb is buggy, dev hsr_slave_0 [ 542.875420] protocol 88fb is buggy, dev hsr_slave_1 15:23:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000014c0)="11dca5055e0bcfec7be070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000620920144f88cd8bf8fa05e32fcea0e283d9b2ca3c984e7f73e2a1bc015a41200581e5ef57c5000000000000000bcbb61c10b1f4451c"], 0x1}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 15:23:40 executing program 4 (fault-call:2 fault-nth:3): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:23:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x0, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) 15:23:40 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000001c0)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/unix\x00') preadv(r0, &(0x7f0000000700), 0x31f, 0x10400003) 15:23:40 executing program 1: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0xa, &(0x7f0000000180)=[{0x5, 0x3, 0xb74352b, 0x200}, {0x0, 0xfffffffffffffffc, 0x8000, 0x8001}, {0x4, 0x401, 0x1, 0x5}, {0x6, 0xfff, 0xd84, 0xffffffff}, {0x0, 0x3, 0x3, 0x6}, {0x6, 0x9b77, 0x1, 0x9}, {0x529ba710, 0x7ff, 0x7, 0x38}, {0x101, 0x4, 0x3f, 0x8}, {0x0, 0x5, 0x4, 0x1}, {0x5, 0xcd, 0x8, 0x7}]}, 0x10) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, 0xffffffffffffffff, 0x8000000) ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0x4) 15:23:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0xaf, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = gettid() recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) tkill(r2, 0x14) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x2000, 0x0) getsockopt$inet6_int(r3, 0x29, 0x4f, &(0x7f00000002c0), &(0x7f0000000300)=0x4) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000440)={0x3, 0xa, 0x4, 0x280000, {0x77359400}, {0x2, 0x8, 0xff, 0x6, 0x9, 0x80000001, "4d0a25e9"}, 0x100000000, 0x7, @offset=0x5, 0x4}) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0xa0102, 0x0) mount(&(0x7f0000000340)=@loop={'/dev/loop', 0x0}, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='jffs2\x00', 0x800, &(0x7f0000000400)='cpusetem0/\x00') fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@broadcast, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4e23, 0x0, 0x4e24, 0x7f, 0x2, 0x80, 0x80, 0xbe, 0x0, r5}, {0x7fff, 0x5, 0x0, 0x10001, 0x401, 0x5f4, 0x300, 0x8000}, {0x8, 0x1, 0xffffffff, 0x3}, 0x1f, 0x6e6bb4, 0x3, 0x1, 0x1, 0x3}, {{@in=@empty, 0x4d3, 0x3c}, 0xa, @in6=@rand_addr="036598a6ee584eba3e25126aeb2f38b7", 0x3502, 0x0, 0x1, 0x2, 0x6, 0x8, 0x4}}, 0xe8) [ 543.686543] FAULT_INJECTION: forcing a failure. [ 543.686543] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 543.698417] CPU: 1 PID: 13160 Comm: syz-executor.4 Not tainted 4.14.125 #19 [ 543.705528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 543.714896] Call Trace: [ 543.717518] dump_stack+0x138/0x19c [ 543.721180] should_fail.cold+0x10f/0x159 [ 543.725353] __alloc_pages_nodemask+0x1d6/0x7a0 [ 543.730040] ? fs_reclaim_acquire+0x20/0x20 [ 543.734381] ? __alloc_pages_slowpath+0x2930/0x2930 [ 543.739425] cache_grow_begin+0x80/0x400 [ 543.743552] kmem_cache_alloc_trace+0x6b2/0x790 [ 543.748259] ? devm_device_remove_groups+0x50/0x50 [ 543.753228] kobject_uevent_env+0x378/0xc23 [ 543.757567] ? wait_for_completion+0x420/0x420 [ 543.762186] kobject_uevent+0x20/0x26 [ 543.766036] device_del+0x65c/0xaa0 [ 543.769681] ? __device_links_no_driver+0x220/0x220 [ 543.774803] ? vhci_close_dev+0x50/0x50 [ 543.778811] rfkill_unregister+0xd1/0x2c0 [ 543.782971] ? vhci_close_dev+0x50/0x50 [ 543.786953] hci_unregister_dev+0x259/0x7d0 [ 543.791307] ? vhci_close_dev+0x50/0x50 [ 543.795282] vhci_release+0x76/0xf0 [ 543.798910] __fput+0x275/0x7a0 [ 543.802217] ____fput+0x16/0x20 [ 543.805520] task_work_run+0x114/0x190 [ 543.809423] exit_to_usermode_loop+0x1da/0x220 [ 543.814024] do_syscall_64+0x4bc/0x640 [ 543.817927] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 543.822785] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 543.827978] RIP: 0033:0x4592c9 15:23:40 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001680)={0x53, 0x0, 0x6, 0x0, @buffer={0x45, 0xb8, &(0x7f00000001c0)=""/184}, &(0x7f0000000040)="001afb82da22", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ff7f00000000}) [ 543.831171] RSP: 002b:00007f99bd51ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 543.838904] RAX: 0000000000000000 RBX: 00007f99bd51ec90 RCX: 00000000004592c9 [ 543.846185] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 543.853499] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 543.860864] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f99bd51f6d4 [ 543.868180] R13: 00000000004f8052 R14: 00000000004d0e30 R15: 0000000000000004 15:23:40 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x40, 0x0) signalfd(r0, &(0x7f00000000c0)={0x8}, 0x8) r1 = syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000400)={0x3, 0x4000000000, 0x2, {0xd, @win={{0x0, 0x3, 0x7, 0x2}, 0x5, 0x8, &(0x7f00000001c0)={{0xfe5, 0x3, 0x1, 0x1}, &(0x7f0000000040)={{0x79e, 0x6, 0xad4, 0x9}, &(0x7f0000000000)={{0x7f, 0x1, 0x1ff, 0x7}}}}, 0x945, &(0x7f0000000200)="f384877857c23c9b158fdeda4709ce4c541e73995dde92b7477186fc6b05d7263455d5d014a9a0050588e37fdb1d1228108f8817fbdf4d5f557773ccb80b994208f1f3b5c508cb408a70fc329103dbb26e66467057363ecb7d92444b2b47e8744143e6a59bcd422d7ccca8a255ed49e47bf3f7a0fddb0ee375833c141a2aa968c393905dd4f4722667532a6a917097a3452ca0a0d9f25d53e6df27d9fe2ba0b058810f0affc909d780af4ceeda17bf2a8068168b6a7b996699efca88545069133018ff6c1076d82c81d17b820b544e3ecd244cc9dc4d", 0x4}}}) getsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000001740)={@dev, @initdev, 0x0}, &(0x7f0000001780)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000017c0)={'vcan0\x00', r2}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r1, 0x8000000) 15:23:40 executing program 4 (fault-call:2 fault-nth:4): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:23:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100], [0xc1]}) 15:23:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x32, 0x200007ff, &(0x7f0000000100)={0x2, 0x4, @multicast1}, 0x10) r2 = dup2(r0, r1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000180)=0x0) timer_create(0x7, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @tid=r3}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r4 = gettid() recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) tkill(r4, 0x14) 15:23:40 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) prctl$PR_SET_THP_DISABLE(0x29, 0x1) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) [ 544.035388] FAULT_INJECTION: forcing a failure. [ 544.035388] name failslab, interval 1, probability 0, space 0, times 0 [ 544.068669] CPU: 0 PID: 13188 Comm: syz-executor.4 Not tainted 4.14.125 #19 [ 544.075830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 544.075916] Call Trace: [ 544.075942] dump_stack+0x138/0x19c [ 544.075963] should_fail.cold+0x10f/0x159 [ 544.075980] should_failslab+0xdb/0x130 [ 544.075998] kmem_cache_alloc_node+0x287/0x780 [ 544.076017] __alloc_skb+0x9c/0x500 [ 544.076029] ? skb_scrub_packet+0x4b0/0x4b0 [ 544.076044] ? netlink_has_listeners+0x20a/0x330 [ 544.076057] kobject_uevent_env+0x781/0xc23 [ 544.076070] ? wait_for_completion+0x420/0x420 [ 544.076090] kobject_uevent+0x20/0x26 [ 544.076102] device_del+0x65c/0xaa0 [ 544.076113] ? __device_links_no_driver+0x220/0x220 [ 544.076130] ? vhci_close_dev+0x50/0x50 [ 544.076142] rfkill_unregister+0xd1/0x2c0 [ 544.076155] ? vhci_close_dev+0x50/0x50 [ 544.076166] hci_unregister_dev+0x259/0x7d0 [ 544.076176] ? vhci_close_dev+0x50/0x50 [ 544.076184] vhci_release+0x76/0xf0 [ 544.076197] __fput+0x275/0x7a0 [ 544.076216] ____fput+0x16/0x20 [ 544.095978] task_work_run+0x114/0x190 [ 544.095997] exit_to_usermode_loop+0x1da/0x220 [ 544.096010] do_syscall_64+0x4bc/0x640 [ 544.108298] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 544.108318] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 544.108329] RIP: 0033:0x4592c9 [ 544.195050] RSP: 002b:00007f99bd51ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 544.202784] RAX: 0000000000000000 RBX: 00007f99bd51ec90 RCX: 00000000004592c9 [ 544.210081] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 544.217363] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 544.224660] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f99bd51f6d4 [ 544.231933] R13: 00000000004f8052 R14: 00000000004d0e30 R15: 0000000000000004 15:23:43 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) ptrace$cont(0x7, r0, 0x9, 0x4) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000014c0)="11dca5055e0bcfec7be070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000620920144f88cd8bf8fa050030cea0e283d9b22703305b8fe23074bc015a41200581e5ef57c5000000000000000bcbb61c10b1f4451c"], 0x1}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) tkill(r3, 0x17) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) r4 = dup(r1) r5 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_stats\x00', 0x0, 0x0) sched_getattr(r0, &(0x7f00000001c0), 0x30, 0x0) linkat(r4, &(0x7f0000000080)='./file0\x00', r5, &(0x7f0000000180)='./file0\x00', 0x1000) ptrace$cont(0x9, r3, 0x0, 0x0) 15:23:43 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0x48, 0x0, 0x40000022], [0xc1]}) 15:23:43 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000180)={0x1, 0x2, 0x5, 0x81, &(0x7f0000000000)=[{}, {}]}) 15:23:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100], [0xc1]}) 15:23:43 executing program 4 (fault-call:2 fault-nth:5): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:23:43 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008914, &(0x7f00000001c0)="c0dca5055e0bcfec7be070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) r2 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x0, 0x2) ioctl$VIDIOC_S_JPEGCOMP(r2, 0x408c563e, &(0x7f0000000100)={0x54, 0xa, 0x12, "bd7b46931fb608fc7ba06278852627e0fce24ecbd2d2153db03c58443d7ba36c334096c08385a9ac92c1318113fdc22e391e36a582734f908087035f", 0x13, "566ae780b546e0474a74e6fb36d5a1694532f4c9b2014a539d039eaf7cfc0e69b49c1f76027476782cd15a4c431641efaf2e2ae0e9c2ebb61eb91d00", 0x8}) sendto$inet(r1, 0x0, 0xaf, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = gettid() recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) tkill(r3, 0x14) recvmmsg(r0, &(0x7f0000000200), 0x0, 0x10100, 0x0) [ 546.716814] kvm [13202]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x40000022 data 0x0 15:23:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000014c0)="11dca5055e0bcfec7be070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYRESHEX=0x0], 0x1}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000400)={0x0, 'lo\x00', 0x1}, 0x18) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) r2 = shmget(0x3, 0x2000, 0x1100, &(0x7f0000ffb000/0x2000)=nil) fstat(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f0000000380)) r5 = getegid() ioctl$sock_SIOCSPGRP(r4, 0x8902, &(0x7f00000003c0)=r1) getresuid(&(0x7f0000000100)=0x0, &(0x7f0000000180), &(0x7f00000001c0)) getresgid(&(0x7f0000000200), &(0x7f0000000240)=0x0, &(0x7f0000000280)) shmctl$IPC_SET(r2, 0x1, &(0x7f00000002c0)={{0x7f, r3, r5, r6, r7, 0x0, 0x80}, 0x10001, 0x1, 0x6, 0xffffffffffffff0f, r1, r1, 0x8}) 15:23:43 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x8010, r0, 0x0) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x7fff, 0x1, 0x4, 0xe009, {0x0, 0x7530}, {0x1, 0xc, 0x2, 0xffffffff, 0x2000400000000000, 0x30000000, "f30145e2"}, 0x10000, 0x0, @userptr=0x3ff, 0x4}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000000)={0x9, 0xc, 0x4, 0x200000, {0x77359400}, {0x0, 0xc, 0x4, 0x8, 0x3, 0x8, '>hQy'}, 0x3f, 0x7, @userptr=0x10000000000, 0x4}) 15:23:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100], [0xc1]}) 15:23:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffff9c, &(0x7f0000000140)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x38) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000007000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 546.767321] FAULT_INJECTION: forcing a failure. [ 546.767321] name failslab, interval 1, probability 0, space 0, times 0 [ 546.835169] CPU: 1 PID: 13214 Comm: syz-executor.4 Not tainted 4.14.125 #19 [ 546.842334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 546.851707] Call Trace: [ 546.851738] dump_stack+0x138/0x19c [ 546.851758] should_fail.cold+0x10f/0x159 [ 546.851777] should_failslab+0xdb/0x130 [ 546.851792] kmem_cache_alloc_node_trace+0x280/0x770 [ 546.851807] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 546.851825] __kmalloc_node_track_caller+0x3d/0x80 15:23:43 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000a7e000/0x3000)=nil, &(0x7f0000fda000/0x4000)=nil, &(0x7f0000aa1000/0x4000)=nil, &(0x7f0000bbd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000bed000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000bf3000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000f26000/0x1000)=nil, &(0x7f0000f84000/0x1000)=nil, &(0x7f0000000000)="63d5cb38764fe408019f2fbbf606bcdbf5d59912b913febcbfcbee3332beef380d9f7333ac36a6a43faf19eed627e60d4b4ecf6de1765836617f46142add96a6b78e6fdff1784a53f496824ff61468099284edc71a29b2f4de1504cd2498bb4fd81b8aaa452d8fe30eda1cf7028f268effa5c9170e09dedbe6d4373efb60a9a9", 0x80, r0}, 0x68) 15:23:43 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.sockprotoname\x00', &(0x7f0000000180)='\xf8\x00', 0x2, 0x1) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) [ 546.851842] __kmalloc_reserve.isra.0+0x40/0xe0 [ 546.851857] __alloc_skb+0xcf/0x500 [ 546.851874] ? skb_scrub_packet+0x4b0/0x4b0 [ 546.858221] ? netlink_has_listeners+0x20a/0x330 [ 546.858237] kobject_uevent_env+0x781/0xc23 [ 546.858249] ? wait_for_completion+0x420/0x420 [ 546.858268] kobject_uevent+0x20/0x26 [ 546.858279] device_del+0x65c/0xaa0 [ 546.858291] ? __device_links_no_driver+0x220/0x220 [ 546.920605] ? vhci_close_dev+0x50/0x50 [ 546.924604] rfkill_unregister+0xd1/0x2c0 [ 546.928777] ? vhci_close_dev+0x50/0x50 15:23:43 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) syz_genetlink_get_family_id$net_dm(&(0x7f0000000280)='NET_DM\x00') mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000000)={0x4, 0x7, 0x2}) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/attr/current\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000002c0)={0x0, 0x1000, "9b71157e053f03c59ea5e35da0b56c9ca943e994e1b1106150efab076aa7a517892400690853bd2153b42ddabc74623104381ac1be26a8c3c06d538831c7dc0f45044b98fb0845502b360c08fa7ed5449aeaee7054ae6c69b8efbbb48ebe9e634cbb861939bc61a7fc7528ea40c6effa956c90b65d2b6be53d729aaf5118e525af5d092e0ff53007dcba616ca3418a266388c4dbb7b61195a6a11ec254d2b38c17341681963ad1a9dab73e8e2ada3dce41d66fc373fa7e3e62d78da022b9271259ff3dcff81c843d29518d911bf6d87f1c6402bf3678da61e59daf51e407b3b6429ffd966cb1a6c208234849b32797402a5b6dded4a8a199480ab363e8bf545aaa3231f8c5532234c803d2bd35e08bdf894a47de6ba1445b0ddd98a50209a8ac9ec5b655bc4edbbcb077da401fee661598edfacca27ea2a22a54545d95b27a1e0df90db4d3783aa77f7f3941bb6386cb4753a3bfcca83eecf56be525f7d0a6bc52e538bddd3525c59f1a6f02c9b99b35090349f5f82a34abfbf10bab3936db580427f07e7d78551eda1b889e7d75b0a074877994d85523c0eaea947d64a5d0b1b4622e8ef3c6c0f0718c7556014f325d3596c886e0d2b7f1925ca68ce35e0ba13dd9bcc66aae3d56c83ca40ca60774df1519dd209bc65227172e5014e9248023cd0b78416288dcec750996fa4e24f1393c8cd3b973ccbac7345125f3eb1ba906089382ff9c485a2d11f9d31d4c92bf0fa577e56b29938ba65300814fc13e3b5d7521b068fc09a0b7e4ae49912020cb1b4c78e7893df2b83926d55f9b94fc6de09a7d77d09866b991d704cff0791333e5f8a52dbf3edb4121bcd510a1cf98ba223d5cd1a9ffcf6edd91d8c886db636c4f003b79196fee9776b44b22d9aa6ed1245a0a6d5248b64c886028cbc81f9b68df901fe8afa5263b158c2da3b9655a85f6a5c020749c1ea64ff6f6f38ffc39e96a9ba2d3833d603079e02d4104149fb37e18bbb001434279b466bb46e653d359a00ece8f1af1d6947ac862ecf5248c2d233d1f47ed16cccd2ee1799af356734ae4ac92e730f8741e828d93cceacc02b1086d530d6af34475947f73df50cd28e9ebdd7757f6f91b86bc059f99f6d773a4190ee246de87add1b5f8e1919c459abe58c278e0e6e1d76b855593002d98d3d70eba490f543ae3b5c05c6f1e12c32b3c983b085c4b783aff019c8b68b8b0ce6dde17299df31261100a248f9245815a78446c843b3d4a432b7bba2a7ecb9084100b15b79136674bab48ed8e8c41c71084691254d60fd1eb5876dcb486617a9aba75d99ed3bb27dfcdbb94c66f5f1cec26cc494880ec1ddb0b9bbadc1cea5fa2f63b4fd360b1b96225d0944f300abdafd4bc8262b0a92b78ee74a57266801c2e2b5dc7ff4d0d9247f56e955000696bd52ca2aab6b320423a8cb71976f6fe982624ff47db20dbf7b8648f0e03e9cd3aff5fe69f35d9ee3cab3608f12500c3aed9ca27c49a3dc2a437714ef9a9ab40fe4b53ba32eb03e2a5d9d5e9e348f67bc1c6be8c643bb9436fbec3e08feb8e4e528a0d149a8e028220f5abea128162092e6c32452cbe08f893d36710fa70a8b44a70de1256fc94c7879e07640ba5de5484bdb7ed661ded3846eafb0f2a03bc9feb5b9f5c84fd40ce281f84d11d4d2a203e35f11fe789256f758a7c307baba50074ae7fb21a075d119769008990a4673ef8d70e63291bf27fbb8bb89c748362f84dccf1f777c9edd09f50d8da1cb628da798fd42ec6efb4f95f78004e9d713a861c840ebc7cb0aef233ce5c829b390a66c3f0ccd263ca2b503fe88983ae0c05f3388291c0a21a5e5d3b273145bc4f07fe6ded7e77a24f371d30b55f9cc4380c5396077ad9f654b42f9839b13ab1e59fd0cc2b6e91d979d819ae7208b6627d3c4cef0caa6b1e4b6bb1b88d4050735cd55b5003937b67a7f8f6c7958a2b5ef2d2303217580fbc83b401131a906daf94668028ef89ecf59ddb1c755953ff459d4224ee42157a654604cf0fb17050a22a315572c3695aa693517bb2dee0e1413c60ed4c7bce2c2843d49ea9748c19bbe36455cee28d96dcb8fb7072a773241822eae999701c7be865583cc3e70672c7f34ef27c5ed807ae08ff541c4a99c668a8f8f0ebfdf8e6839dff86e4b8efdd0323d3b521d6f9e85a506bd6d10089f1480b982652eabd151ae3b7492b4a83435fcaf665952fbee19303cb17c061f7c694ec5ac5ae42a900d953f962951e29050e2bb82982c16542d9446147768ea7478bb14f0aa5f9cd19478c9a1b533b2a212c587cd572140bf1463f26636a1c1d4f535d29105ab0ea32b1419534a1fd9e7b505eb5800afd3f1da9fa455838856989175bd464cb7ca9bbd8f87f80f54a4236483b1803eaadce79b51f8a738dd291ff3c307983df80d703e9a91571705dc8f262a3458e597fc0faea303b6871118587896498aec5acf5e3937080830e7a0b7fcaf7776ea6515e8298d69d9e27bff631768392394e1cbb5c04eed62874a01cb61492c93626dc1cdf70a90c741161e96a89a8234764a08914f0b862023fd28a1a95b04a91fe614de6300c6372d4e3e7f8c6c1c24432872635aa80d46a68983b137cbcc7d354827070f08e4c59db956dc77649b1d5ad917de2f287369416d3104380951813fa72cb31e473ddda03ddbed82d324bb45703d4ae0ba59d628b9c62da9f5b5b97fdd8278d82e85ec6ea009a62b35db14b8884d736715e2ade91eac01a6fb62ba090390d8235b1122ef3fe01a4b4848707109418edc521d14201ce23045b128bca8772fb3fabe1a0dd07fa8827e434d478a6b28f7d7d9f314f83027e351befe4c19d4e99eb806e8df5dd627a511c0d1b65b0bccbc3c99da5ac4f9710995ba7d805fdb77761ef5569890754815df2747f15b2f40945224547b5e99d7aa44eedfdf22af13765cdeb28d5aab3f7a23d7f99e3021bdc354c8849275adb56aeeb15b43fa30a8ed43eaad5f0b5015fa4bc75adb2d04d69f40def143111ca7370ea49ffd2aba779d8325d5e0895a0c4584e19bc6afdb787e6159bbc082487211da32497e1e315e467b1d6bc5dc38262f6c7f92109d9a7d900e07b4bf3e51406a98d6c86340dedc7b07ad3a6a06c39314bccbfc0d1995d53550fd0cc66691d1f2efd3059fa1b1b855e2ceb843b5f1e1d76628522e67a71a5ac80401641daa575d98599b5de76e6cf3977c3f86ad5ec8c9590ef54b03e460a71e3ffef83401f98c28c341105137f3680e25310337fe0974ccad52bb885d4bb600b05c7dae6cf47e4013802d99572eef4755eadb9c76e250309e79bc39f20d4cad64d6f374fb632c29ab4ed4034609d740cea2770e7500ccc327d4e025b5e6793c315d34a90d1b8733685acd38eed2cd99d19632692fa34fc190e91637334bc6a9094609ddb1fba5a0998abbbcb4a9eb8f3780e91ec0b7fe7df6669c9680a4b8fe8854124f6ff96dfb28ecc768c4917c98e2dd4268952db7cf23e4134c58bcfb938b068bc747d7cb2e1e4d2ba43658e37c9ecaacf4327f64d6049e5b1fdefca9104c94e0fd7c1f8bdd2bd1c20bfa1ff2794de0701427508293737e53e634d1c4198a2a289559506fb4bbb90e4ea4bc93f23f62de28141c44d47133c21992b6cfba2b3961202a2e5f35f569fb32b80136642ace2cfd46ff62b19d5b1a98c24ef6c93a6ae30bc45a340f3eea83912390b553963434c99ca074ecfb51a9efd00236711b2977608f7e968740b824cbad2c057e92c9eda9e122faae7b69b5ec797324f1ee5cf4dc40d9f83e91601bc55aa9a8a56b96a0a50d2c2f8d9a27cadd6a880eb413ca0686c42ba6bfc94a50cd4f7de893abd76f72655a3535460409dc3f53e25b9a35ee6f0fcc3c6c6f211ecdb3f63021796b9fd5c38d6cbcc9e4fcf72cb4ba3d386f5ce5764459a72f82bc9c6e2577b68c02611923ab7bfb6f3c7f5c799a2dfa3dfd2ec15481e9595bd6bf22c2afd96153e420fc386e1d2ba0c8d2a423da1d910ef5c9700a170c27ea00d573d1f8a98e726eff53020194879813c1925d02c94a758eebd754a497cc5cfb3278f5c5e672f8b11831d48db3430489ee6801cabee5428e6846c328c9383e1ba2d1d338106bb22e516579f44b43da0c307207533cb5db00785aae6f730e3ea9030d1b68ca7adcc9e96bbe911a96a85daa0dc297570d7c5f1bac182945cadc7e3b00d741c8dd568ad88b9790fece94b97016b3c8aa19e0e0706c9dec8d9d80033cf8befcfdb3f1cc9f1e125f9dcd55755842198a9f3977833941d1792df6477591b1a11833e1ce217e2dad74c2500dcc293d311723f01a9e51d1029196a4e8369533fdf63310d78055c3ff0c511d4d6f1307dfce436477dfbb78c4039c2b78dc7d090d1756ac6babf9fbef6efd00c64520b4707b18e613536c6b729ddeb0696a1fcbb24f8c073ae5930327d7380b3aa0d1675ab9ef609d2156619234427f0c12c8832495ccee5820a67c63180d3a7bf025459892e23ba5135e8b93d93a40adc53ee8834dc75773f80dbf4a111100594931c55c0221f4e5cfd5adc5f29059713beecd9e77eaed31b128a84c8d16411c766e0b131dc2e3f6cdfb580a3e183f86c9851d42b9374ce3ce8a619f889b090745efa67be3feec00f6a8eff80a8e3f3d613aa2fbc22ffad01838467df106c82e02430c39bfcc57bbd4a8424954249b9a6e9968bb29badfd77a00b72b37c6dca8e212d497d041cd46b5ff55903b78b03e6c3cd70e0fefbcc007b57ef620b0561065d399cdb7548f0bb881704049161c8372d19ee9e82194f8847c9006ee994dfcd8b69955d049ca0469b6f795012083d1e9d39417341b3344ce1d8edfaf6ff337deb6ec6d4226cbe41190a0936f3fe74b5163f74e321164aa9476508d2850c2647f678bfb4c983ce65fdf5253e1dd7dfb9bc2278b32852aa60e01aa3b8945a4d36fa3e0985d6d3d6baa07ebd105b5445ccf583133238975125823755c4571e23bb74b9c707f7f124d5c1938c10286c9b20a42fb1f366edbb5fa52677102a1268ce77efd4a42cfac49ebb4407fb3bbd34659132a4e028d12e294503fd34822c9550a754d3165439bb057e6aea3b8d556dfd5eac1d195943399e5d401a52df8ce2596be56619d496740095986f8241707dbb22774b1f1a912a089d63ee5029913e8acb012a61de84c334a557f31ad937184921cb48f88e1114a5a2db603f62e7df2f4f1a3625a988312f036d1926bdad8cfa4e7b3f3b3fe8267de1d801f8070062c6c05e472571834b8170fe8fe5be8ba2c843b19cb7753c3127962f7299bed181edcf31ce16a93124c0c6f93ee7e0841b79bf2c886653bb56e12266af3de4021448214e0d4255f2e9860d3c74e96961fb76aafceda37c6f30a4b1b6349e212e012e3cfaf0d312b549b8ba8285a015c22627bb51d653530016d7293f0cd8604d849a464263800f673e0edfc5a6dfb77a982da17b7f678a2275a4ab986273ec1ec9ccf8c56a5c071952a32c5cc1c336d363f6039aa188188297f784fc777feec450a2ebe51347e5964f758cc2f8319ae237272156b3c60fdbfb6440180b7087a4c639766b494c15637d739bfcde17ca65cda3fdbffb34217589ac87f3d0242c1eb4e934ea57b4842fa4af94e6dc9259d03790dfaffcc93ec00b924a716d787a9e592e31d90ea0531583cd97108085a2fcf01e2611a40fcade7e0598b3f334e6140207e88600abd211fc70ec2b9da33c59b72a8795312e58a09c30ec150ffaf68fa8f1ee69b1b7264ad52e9ad7f4527600e7bd51b5ae1926bd"}, &(0x7f0000001300)=0x1008) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000013c0)={0x0, @in={{0x2, 0x4e24, @loopback}}, 0x7, 0x100}, &(0x7f0000001480)=0x90) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000001380)={r1, 0x7}, &(0x7f0000000040)=0xfffffffffffffff6) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f00000001c0)=0x7) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000180)={r2, 0x1}, 0x8) [ 546.932773] hci_unregister_dev+0x259/0x7d0 [ 546.937135] ? vhci_close_dev+0x50/0x50 [ 546.941157] vhci_release+0x76/0xf0 [ 546.944807] __fput+0x275/0x7a0 [ 546.948134] ____fput+0x16/0x20 [ 546.951439] task_work_run+0x114/0x190 [ 546.955367] exit_to_usermode_loop+0x1da/0x220 [ 546.960016] do_syscall_64+0x4bc/0x640 [ 546.964029] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 546.968907] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 546.974293] RIP: 0033:0x4592c9 [ 546.977491] RSP: 002b:00007f99bd51ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 15:23:43 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000040)) fgetxattr(r0, &(0x7f0000000000)=@random={'osx.', '(\x00'}, &(0x7f0000000240)=""/206, 0xce) 15:23:43 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000000)) [ 546.985214] RAX: 0000000000000000 RBX: 00007f99bd51ec90 RCX: 00000000004592c9 [ 546.992507] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 546.999802] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 547.007093] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f99bd51f6d4 [ 547.014380] R13: 00000000004f8052 R14: 00000000004d0e30 R15: 0000000000000004 [ 547.030142] net_ratelimit: 22 callbacks suppressed [ 547.030147] protocol 88fb is buggy, dev hsr_slave_0 [ 547.040289] protocol 88fb is buggy, dev hsr_slave_1 15:23:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0x0, 0x0, 0x4000000c], [0xc1]}) 15:23:43 executing program 4 (fault-call:2 fault-nth:6): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:23:43 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r1 = socket$inet(0x2, 0x4000000000000001, 0x100000000) bind$inet(r1, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0xaf, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = gettid() recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) tkill(r2, 0x14) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000f8030000f8010000f8010000f8010000f801000000000000600300006003000060030000600300006003000004000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'/62], @ANYBLOB="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"], 0x458) [ 547.178809] FAULT_INJECTION: forcing a failure. [ 547.178809] name failslab, interval 1, probability 0, space 0, times 0 [ 547.190134] protocol 88fb is buggy, dev hsr_slave_0 [ 547.190181] protocol 88fb is buggy, dev hsr_slave_1 [ 547.209529] CPU: 1 PID: 13265 Comm: syz-executor.4 Not tainted 4.14.125 #19 [ 547.216723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 547.216729] Call Trace: [ 547.216755] dump_stack+0x138/0x19c [ 547.216787] should_fail.cold+0x10f/0x159 [ 547.236565] should_failslab+0xdb/0x130 [ 547.240565] kmem_cache_alloc_node+0x287/0x780 [ 547.245343] __alloc_skb+0x9c/0x500 [ 547.245356] ? skb_scrub_packet+0x4b0/0x4b0 [ 547.245373] ? netlink_has_listeners+0x20a/0x330 [ 547.245388] kobject_uevent_env+0x781/0xc23 [ 547.245402] ? wait_for_completion+0x420/0x420 [ 547.267518] kobject_uevent+0x20/0x26 [ 547.271329] device_del+0x65c/0xaa0 [ 547.274998] ? __device_links_no_driver+0x220/0x220 [ 547.280138] ? vhci_close_dev+0x50/0x50 [ 547.284154] rfkill_unregister+0xd1/0x2c0 [ 547.288411] ? vhci_close_dev+0x50/0x50 [ 547.292538] hci_unregister_dev+0x259/0x7d0 [ 547.296888] ? vhci_close_dev+0x50/0x50 [ 547.300885] vhci_release+0x76/0xf0 [ 547.304521] __fput+0x275/0x7a0 [ 547.307827] ____fput+0x16/0x20 [ 547.311147] task_work_run+0x114/0x190 [ 547.315057] exit_to_usermode_loop+0x1da/0x220 [ 547.319648] do_syscall_64+0x4bc/0x640 [ 547.323641] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 547.328501] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 547.333725] RIP: 0033:0x4592c9 [ 547.336907] RSP: 002b:00007f99bd51ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 547.344624] RAX: 0000000000000000 RBX: 00007f99bd51ec90 RCX: 00000000004592c9 [ 547.351963] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 547.359519] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 547.367098] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f99bd51f6d4 [ 547.374401] R13: 00000000004f8052 R14: 00000000004d0e30 R15: 0000000000000004 [ 548.000203] protocol 88fb is buggy, dev hsr_slave_0 [ 548.006389] protocol 88fb is buggy, dev hsr_slave_1 [ 548.230216] protocol 88fb is buggy, dev hsr_slave_0 [ 548.235492] protocol 88fb is buggy, dev hsr_slave_1 [ 548.400181] protocol 88fb is buggy, dev hsr_slave_0 [ 548.406485] protocol 88fb is buggy, dev hsr_slave_1 15:23:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000014c0)="11dca5055e0bcfec7be070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000620920144f88cd8bf8fa050030cea0e283d9b22703305bcb1210420c100549200581e5ef57c5000000000000000bcbb61c10b1f4451c7df50751e4b5a3728d879da825a6d177933389d95af1f9dc50a3d9bb7c1b17140adafb55a5de9120cb2b85df680b2cca7b14e7598a39aa38410fb8dc153e8b8da6fb898e65958e6236d601fa53fec897be43757c830531fd262765511cdde209015b52b9cf7ad2208720dec20d62938492b1de222f43fe4508e7730c93194d2b91099aaaa0a2908cdbfe0a4f96f4d1d9562ba8f322151483f5f56a65fcd69c4290ed226f38bd91596a6fc2d6c916bd938bd9c7018df3471a29c0ba"], 0x1}}, 0x0) r1 = dup2(r0, r0) ioctl$VHOST_GET_FEATURES(r1, 0x8008af00, &(0x7f0000000180)) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x17) ptrace$cont(0x1c, r2, 0x8, 0x2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 15:23:46 executing program 5: socketpair$unix(0x1, 0x800000000009, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r2, 0x3080004) rmdir(&(0x7f00000004c0)='./bus\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/if_inet6\x00') setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000500)={0x3c, @loopback, 0x4e24, 0x4, 'nq\x00', 0x0, 0x1ff, 0x8}, 0x2c) ioctl(r1, 0x100, &(0x7f0000000240)="5c010000000000000600006b35d4c055b3d9a5fb292ea1edfcc8b3f73b1474c1697e26d9edf847d512567974d58ffd7ed4d1ecbfa26461b48795537fdca4bc32184c8d09b14d5c6bf5e59638ec3908eff095c6557c321300f7") r4 = creat(&(0x7f0000000600)='./bus\x00', 0x200000000020008) rmdir(&(0x7f0000000000)='./bus\x00') fallocate(r4, 0x1000001, 0x5, 0x8c) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000040)="06c5f4fe7ba1fd817fa8f02c7043aa4f", 0x10) r5 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r6 = socket(0x10, 0x7, 0x7) poll(&(0x7f0000000300)=[{r1}], 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYPTR, @ANYRESDEC=r0], 0x18) ioctl$PIO_UNISCRNMAP(r3, 0x4b6a, &(0x7f00000009c0)="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") r7 = socket$inet6(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000000002, 0x8034, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000002b80)={{{@in=@broadcast, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}}}, &(0x7f0000000540)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000002c80)={'caif0\x00', r8}) ioctl$RNDADDTOENTCNT(r4, 0x40045201, &(0x7f0000000480)=0x400000b) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000640)={@loopback, 0x1, 0x0, 0x103, 0x20000002, 0xfffffffffffffd83, 0x85, 0x80000000}, &(0x7f0000000680)=0x20) setsockopt$inet6_int(r7, 0x29, 0xcf, &(0x7f0000000840), 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3, 0x9, 0x3}, 0x20) setsockopt$inet6_mtu(r7, 0x29, 0x17, &(0x7f00000000c0)=0x1, 0x4) ioctl$TIOCLINUX5(r4, 0x541c, &(0x7f0000000400)={0x5, 0x0, 0x6, 0x7}) r9 = getpid() r10 = syz_open_procfs(r9, &(0x7f0000000780)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r10, r10, &(0x7f00000002c0)=0x202, 0xdd) 15:23:46 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x1, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) 15:23:46 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]}) fchmodat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1) 15:23:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0x0, 0x0, 0x4000000c], [0xc1]}) 15:23:46 executing program 4 (fault-call:2 fault-nth:7): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) [ 549.847378] FAULT_INJECTION: forcing a failure. [ 549.847378] name failslab, interval 1, probability 0, space 0, times 0 [ 549.877543] CPU: 0 PID: 13285 Comm: syz-executor.4 Not tainted 4.14.125 #19 [ 549.885044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 549.895320] Call Trace: [ 549.898134] dump_stack+0x138/0x19c [ 549.901793] should_fail.cold+0x10f/0x159 [ 549.906235] should_failslab+0xdb/0x130 [ 549.910390] kmem_cache_alloc_node+0x287/0x780 [ 549.915525] __alloc_skb+0x9c/0x500 [ 549.919267] ? skb_scrub_packet+0x4b0/0x4b0 [ 549.923730] ? netlink_has_listeners+0x20a/0x330 [ 549.928535] kobject_uevent_env+0x781/0xc23 [ 549.933331] ? wait_for_completion+0x420/0x420 [ 549.938347] kobject_uevent+0x20/0x26 [ 549.942681] device_del+0x65c/0xaa0 [ 549.946569] ? __device_links_no_driver+0x220/0x220 [ 549.951644] ? vhci_close_dev+0x50/0x50 [ 549.955836] rfkill_unregister+0xd1/0x2c0 [ 549.960470] ? vhci_close_dev+0x50/0x50 [ 549.964969] hci_unregister_dev+0x259/0x7d0 [ 549.969401] ? vhci_close_dev+0x50/0x50 [ 549.973481] vhci_release+0x76/0xf0 [ 549.977138] __fput+0x275/0x7a0 [ 549.980728] ____fput+0x16/0x20 [ 549.984042] task_work_run+0x114/0x190 [ 549.988409] exit_to_usermode_loop+0x1da/0x220 [ 549.993244] do_syscall_64+0x4bc/0x640 [ 549.997241] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 550.002358] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 550.007805] RIP: 0033:0x4592c9 [ 550.011005] RSP: 002b:00007f99bd51ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 550.018971] RAX: 0000000000000000 RBX: 00007f99bd51ec90 RCX: 00000000004592c9 [ 550.026406] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 550.034170] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 15:23:46 executing program 5: 15:23:46 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000040)=0x1) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x100000001, 0x200, 0x4, {0xf, @sliced={0xfffffffffffffff9, [0x6, 0x7, 0xffffffff8dbd4a28, 0x9, 0x7, 0x5, 0x20, 0x80, 0x6a4d, 0x2, 0xffffffffffffffff, 0x3ff, 0x91, 0x7fffffff, 0x5, 0x80000000, 0x8d, 0x3f, 0x400, 0x7, 0x8, 0x8001, 0x5, 0x100000000, 0x9, 0x4, 0x7fff, 0x8, 0x3, 0x1, 0x7f, 0xffff, 0x400, 0x1f, 0x1f, 0x6, 0x2, 0x1, 0x5, 0x81, 0x100000000, 0x4000, 0x5, 0x800, 0x3ff, 0xa4, 0x9, 0x1], 0x4}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x4002, 0x0) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) 15:23:46 executing program 5: [ 550.042460] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f99bd51f6d4 [ 550.050544] R13: 00000000004f8052 R14: 00000000004d0e30 R15: 0000000000000004 15:23:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0x0, 0x0, 0x4000000c], [0xc1]}) 15:23:46 executing program 4 (fault-call:2 fault-nth:8): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:23:46 executing program 3: [ 550.231935] FAULT_INJECTION: forcing a failure. [ 550.231935] name failslab, interval 1, probability 0, space 0, times 0 [ 550.264695] CPU: 0 PID: 13312 Comm: syz-executor.4 Not tainted 4.14.125 #19 [ 550.272272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 550.282078] Call Trace: [ 550.284812] dump_stack+0x138/0x19c [ 550.289568] should_fail.cold+0x10f/0x159 [ 550.294618] should_failslab+0xdb/0x130 [ 550.299058] kmem_cache_alloc_node+0x287/0x780 [ 550.304423] __alloc_skb+0x9c/0x500 [ 550.309330] ? skb_scrub_packet+0x4b0/0x4b0 [ 550.314047] ? netlink_has_listeners+0x20a/0x330 [ 550.319299] kobject_uevent_env+0x781/0xc23 [ 550.323950] ? wait_for_completion+0x420/0x420 [ 550.329265] kobject_uevent+0x20/0x26 [ 550.334271] device_del+0x65c/0xaa0 [ 550.338232] ? __device_links_no_driver+0x220/0x220 [ 550.343609] ? vhci_close_dev+0x50/0x50 [ 550.348068] rfkill_unregister+0xd1/0x2c0 [ 550.352541] ? vhci_close_dev+0x50/0x50 [ 550.357258] hci_unregister_dev+0x259/0x7d0 [ 550.362059] ? vhci_close_dev+0x50/0x50 [ 550.366851] vhci_release+0x76/0xf0 [ 550.371017] __fput+0x275/0x7a0 [ 550.374487] ____fput+0x16/0x20 [ 550.377894] task_work_run+0x114/0x190 [ 550.382269] exit_to_usermode_loop+0x1da/0x220 [ 550.386992] do_syscall_64+0x4bc/0x640 [ 550.391167] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 550.396327] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 550.401914] RIP: 0033:0x4592c9 [ 550.405275] RSP: 002b:00007f99bd51ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 550.414145] RAX: 0000000000000000 RBX: 00007f99bd51ec90 RCX: 00000000004592c9 [ 550.421966] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 550.430246] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 550.437904] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f99bd51f6d4 [ 550.447851] R13: 00000000004f8052 R14: 00000000004d0e30 R15: 0000000000000004 [ 552.150220] net_ratelimit: 18 callbacks suppressed [ 552.150227] protocol 88fb is buggy, dev hsr_slave_0 [ 552.161434] protocol 88fb is buggy, dev hsr_slave_1 [ 552.470226] protocol 88fb is buggy, dev hsr_slave_0 [ 552.475908] protocol 88fb is buggy, dev hsr_slave_1 [ 552.550242] protocol 88fb is buggy, dev hsr_slave_0 [ 552.556018] protocol 88fb is buggy, dev hsr_slave_1 15:23:49 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r0, 0x800455d1, &(0x7f0000000040)) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r1, 0x8000000) 15:23:49 executing program 5: 15:23:49 executing program 3: 15:23:49 executing program 2: 15:23:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000009911, &(0x7f0000000080)="11dca5e13bb2041354aa757b45d469dde5024a4123") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000620920144f88cd8bf8fa050030cea0e283d9b22703305b8fe23074bc015a41200581e5ef57c5000000000000000bcbb61c10b1f4451c"], 0x1}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 15:23:49 executing program 4 (fault-call:2 fault-nth:9): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:23:49 executing program 3: 15:23:49 executing program 5: 15:23:49 executing program 2: [ 552.880143] protocol 88fb is buggy, dev hsr_slave_0 [ 552.885705] protocol 88fb is buggy, dev hsr_slave_1 15:23:49 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [{0x20, '!userppp1){cgroup'}, {0x20, '/dev/swradio#\x00'}, {0x20, '/dev/swradio#\x00'}, {0x20, '/dev/swradio#\x00'}], 0xa, "36c94f168f16370f00000000000099fd3b65edf808baa8618e236c75d0f95af66b2b32d3af0cb4148308ea4149b98b324abab7ee81e1bf4dcaa19e07311706a3899bbc4e90b7693fe6a61c2c21036a53bc89500a31e3af91fd1b3bdbca9ad429353072b4a723aca8c4bbbc7ec7f6fdbe45a2213a4e35dcbbd2a460502433e38a9a12f86fd073b5c7861200"/150}, 0xffffffe3) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @sdr={0x0, 0x16}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x4}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000180)={r1, 0x6, 0x1, 0xeb9d}, &(0x7f00000001c0)=0x10) [ 552.942434] FAULT_INJECTION: forcing a failure. [ 552.942434] name failslab, interval 1, probability 0, space 0, times 0 [ 552.980138] CPU: 1 PID: 13326 Comm: syz-executor.4 Not tainted 4.14.125 #19 [ 552.987433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 552.997031] Call Trace: [ 552.999652] dump_stack+0x138/0x19c [ 553.003308] should_fail.cold+0x10f/0x159 [ 553.007660] should_failslab+0xdb/0x130 [ 553.012067] kmem_cache_alloc_node_trace+0x280/0x770 [ 553.017654] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 553.023646] __kmalloc_node_track_caller+0x3d/0x80 [ 553.028928] __kmalloc_reserve.isra.0+0x40/0xe0 [ 553.034057] __alloc_skb+0xcf/0x500 [ 553.037936] ? skb_scrub_packet+0x4b0/0x4b0 [ 553.042441] ? netlink_has_listeners+0x20a/0x330 [ 553.047463] kobject_uevent_env+0x781/0xc23 [ 553.051828] ? wait_for_completion+0x420/0x420 [ 553.056847] kobject_uevent+0x20/0x26 [ 553.060668] device_del+0x65c/0xaa0 [ 553.065315] ? __device_links_no_driver+0x220/0x220 [ 553.070379] ? vhci_close_dev+0x50/0x50 [ 553.074825] rfkill_unregister+0xd1/0x2c0 [ 553.078982] ? vhci_close_dev+0x50/0x50 [ 553.083374] hci_unregister_dev+0x259/0x7d0 [ 553.087965] ? vhci_close_dev+0x50/0x50 [ 553.092103] vhci_release+0x76/0xf0 [ 553.095921] __fput+0x275/0x7a0 [ 553.099574] ____fput+0x16/0x20 [ 553.103026] task_work_run+0x114/0x190 [ 553.107324] exit_to_usermode_loop+0x1da/0x220 [ 553.112347] do_syscall_64+0x4bc/0x640 [ 553.116590] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 553.121610] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 553.127331] RIP: 0033:0x4592c9 [ 553.130649] RSP: 002b:00007f99bd51ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 15:23:49 executing program 3: 15:23:49 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000000)={0xffffffff, 0x10000, 0x2, 0x80000000}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) 15:23:49 executing program 2: 15:23:49 executing program 5 (fault-call:5 fault-nth:0): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) [ 553.139604] RAX: 0000000000000000 RBX: 00007f99bd51ec90 RCX: 00000000004592c9 [ 553.147351] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 553.155261] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 553.163189] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f99bd51f6d4 [ 553.171598] R13: 00000000004f8052 R14: 00000000004d0e30 R15: 0000000000000004 15:23:49 executing program 3 (fault-call:2 fault-nth:0): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:23:49 executing program 4 (fault-call:2 fault-nth:10): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) [ 553.280142] protocol 88fb is buggy, dev hsr_slave_0 [ 553.285622] protocol 88fb is buggy, dev hsr_slave_1 [ 553.322277] FAULT_INJECTION: forcing a failure. [ 553.322277] name failslab, interval 1, probability 0, space 0, times 0 [ 553.341290] FAULT_INJECTION: forcing a failure. [ 553.341290] name failslab, interval 1, probability 0, space 0, times 0 [ 553.356393] CPU: 0 PID: 13357 Comm: syz-executor.4 Not tainted 4.14.125 #19 [ 553.363794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 553.373586] Call Trace: [ 553.376272] dump_stack+0x138/0x19c [ 553.380022] should_fail.cold+0x10f/0x159 [ 553.384197] should_failslab+0xdb/0x130 [ 553.388200] kmem_cache_alloc_node+0x287/0x780 [ 553.392837] __alloc_skb+0x9c/0x500 [ 553.396549] ? skb_scrub_packet+0x4b0/0x4b0 [ 553.401164] ? netlink_has_listeners+0x20a/0x330 [ 553.406175] kobject_uevent_env+0x781/0xc23 [ 553.410775] ? wait_for_completion+0x420/0x420 [ 553.415517] kobject_uevent+0x20/0x26 [ 553.419556] device_del+0x65c/0xaa0 [ 553.423212] ? __device_links_no_driver+0x220/0x220 [ 553.428407] ? vhci_close_dev+0x50/0x50 [ 553.432584] rfkill_unregister+0xd1/0x2c0 [ 553.436842] ? vhci_close_dev+0x50/0x50 [ 553.440957] hci_unregister_dev+0x259/0x7d0 [ 553.445408] ? vhci_close_dev+0x50/0x50 [ 553.449400] vhci_release+0x76/0xf0 [ 553.453136] __fput+0x275/0x7a0 [ 553.456548] ____fput+0x16/0x20 [ 553.460163] task_work_run+0x114/0x190 [ 553.464111] exit_to_usermode_loop+0x1da/0x220 [ 553.468892] do_syscall_64+0x4bc/0x640 [ 553.472838] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 553.477802] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 553.483100] RIP: 0033:0x4592c9 [ 553.486308] RSP: 002b:00007f99bd51ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 553.494389] RAX: 0000000000000000 RBX: 00007f99bd51ec90 RCX: 00000000004592c9 [ 553.502067] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 553.509547] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 553.517015] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f99bd51f6d4 [ 553.524493] R13: 00000000004f8052 R14: 00000000004d0e30 R15: 0000000000000004 [ 553.533211] CPU: 1 PID: 13354 Comm: syz-executor.3 Not tainted 4.14.125 #19 [ 553.540749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 553.550399] Call Trace: [ 553.553033] dump_stack+0x138/0x19c [ 553.556781] should_fail.cold+0x10f/0x159 [ 553.561284] ? find_held_lock+0x35/0x130 [ 553.565747] should_failslab+0xdb/0x130 [ 553.569921] kmem_cache_alloc_node+0x56/0x780 [ 553.574711] ? lock_downgrade+0x6e0/0x6e0 [ 553.579195] __alloc_skb+0x9c/0x500 [ 553.583090] ? skb_scrub_packet+0x4b0/0x4b0 [ 553.587614] ? mgmt_index_removed+0x150/0x250 [ 553.592581] ? wait_for_completion+0x420/0x420 [ 553.597460] ? vhci_close_dev+0x50/0x50 [ 553.601529] hci_sock_dev_event+0xd2/0x560 [ 553.606487] hci_unregister_dev+0x225/0x7d0 [ 553.611339] ? vhci_close_dev+0x50/0x50 [ 553.615521] vhci_release+0x76/0xf0 [ 553.619417] __fput+0x275/0x7a0 [ 553.623188] ____fput+0x16/0x20 [ 553.626586] task_work_run+0x114/0x190 [ 553.630737] exit_to_usermode_loop+0x1da/0x220 [ 553.635483] do_syscall_64+0x4bc/0x640 [ 553.640126] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 553.645279] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 553.650483] RIP: 0033:0x4592c9 [ 553.653818] RSP: 002b:00007f934c46ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 553.661966] RAX: 0000000000000000 RBX: 00007f934c46ac90 RCX: 00000000004592c9 [ 553.669476] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 553.677163] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 553.685092] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f934c46b6d4 [ 553.692708] R13: 00000000004f8052 R14: 00000000004d0e30 R15: 0000000000000004 15:23:52 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="e20230dc5e0bcfec7be070") write$P9_RFLUSH(r0, &(0x7f0000000040)={0x7, 0x6d, 0x2}, 0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="20000062092057affff79daf4f7b0030cea0e283d9b22703228664a5f138946a56e60b3478f6d4ee305b8fe2000000000000000bcbb61c11b1f4450c00000000000000000000b7b5a04c183985bf4e427f268c15e01e9a1bddf75bf9fb44ab6a96b653137dde363af1afdf1c0e236235d9efcc1745ff737488075fe91f2f20061281cfd10a3c5219560cbb6e52afabc5853e142185bc73ea18e933854532656298a1ba1f65d4c43fb5a5cab6c895656fad0682088d33ec7a0bccd36367a53021142991a1344d6d497584d60a32ca8bd05823230e3aba3a8821a8e65d93715abd1d9db2993768005c829023dd292b3d3b83be62d4981b"], 0x1}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$cont(0x38, r1, 0x9, 0x6) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) rt_tgsigqueueinfo(r1, r1, 0xf, &(0x7f00000001c0)={0x1f, 0x2, 0x1000}) ptrace$cont(0x9, r1, 0xfff, 0x0) init_module(&(0x7f00000000c0)='\x00', 0x1, &(0x7f0000000100)='eth0vmnet1[\x00') getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@ipv4={[], [], @initdev}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@local}}, &(0x7f0000000180)=0xe8) setuid(r2) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='memory.stat\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r3, 0xc1105518, &(0x7f0000000480)={{0x3, 0x7, 0x1, 0x566bba8, 'syz0\x00', 0x6}, 0x0, 0x0, 0x1, r1, 0x9, 0x80, 'syz0\x00', &(0x7f0000000400)=['eth0vmnet1[\x00', 'eth0\x00', 'nodevppp0\x00', '\x00', '\x00', '\x00', 'eth0vmnet1[\x00', 'mime_typeem0lo\x00', 'ppp1em1\x00'], 0x41, [], [0x2, 0x0, 0x7, 0x4]}) 15:23:52 executing program 1: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="88000000", @ANYRES16=r1, @ANYBLOB="00092bbd7000fedbdf25090000000c00030008000800c500000008000500040000000c00020008000600050000000800040003000000080005000affffff08000600405e06000800060000100000340003001400060000000000000000000000000000000001080004000600000014004a1e8f7356c1754d00000000000000000001"], 0x88}, 0x1, 0x0, 0x0, 0x40}, 0x40040) r2 = syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0x0, 0x2) dup2(r0, r0) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000440)={0x7, 0x9, 0x3, {0xa, @pix_mp={0x1, 0x3, 0x3731564f, 0x6, 0x1, [{0x8, 0x3}, {0x4, 0x8}, {0x2, 0x5}, {0x40, 0x6}, {0x80000001, 0x4}, {0xffffffffffffffff}, {0x4, 0x51d5b87a}, {0x8001, 0xf}], 0x1, 0x8, 0x3, 0x1, 0x7}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r2, 0x8000000) 15:23:52 executing program 2 (fault-call:0 fault-nth:0): syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb7fc86d4f66732e66617400020341000500077008f8", 0x16}], 0x8000, 0x0) 15:23:52 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, &(0x7f0000000080)={0x80000000}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f0000000140)={0x5, 0x0, &(0x7f0000ffa000/0x4000)=nil}) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000040)={0x0, 0x7fff, 0x800, 0x0, 0x80, 0x3, 0xd5a}, 0xc) 15:23:52 executing program 4 (fault-call:2 fault-nth:11): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:23:52 executing program 3 (fault-call:2 fault-nth:1): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) [ 555.897680] FAULT_INJECTION: forcing a failure. [ 555.897680] name failslab, interval 1, probability 0, space 0, times 0 [ 555.934310] CPU: 0 PID: 13371 Comm: syz-executor.2 Not tainted 4.14.125 #19 15:23:52 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000000)={0x100000001, 0x40, 0x2, 0x80000001, 0x9, 0xfffffffffffffffd}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) 15:23:52 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_XSAVE(r3, 0x5000aea5, &(0x7f0000000240)={"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"}) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) [ 555.941500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 555.941506] Call Trace: [ 555.941539] dump_stack+0x138/0x19c [ 555.941559] should_fail.cold+0x10f/0x159 [ 555.941575] should_failslab+0xdb/0x130 [ 555.941590] __kmalloc+0x2f0/0x7a0 [ 555.941604] ? __sb_end_write+0xc1/0x100 [ 555.941616] ? strnlen_user+0x12f/0x1a0 [ 555.941629] ? SyS_memfd_create+0xba/0x3a0 [ 555.941642] SyS_memfd_create+0xba/0x3a0 [ 555.941653] ? shmem_fcntl+0x130/0x130 [ 555.941663] ? do_syscall_64+0x53/0x640 15:23:52 executing program 2 (fault-call:0 fault-nth:1): syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb7fc86d4f66732e66617400020341000500077008f8", 0x16}], 0x8000, 0x0) [ 555.941675] ? shmem_fcntl+0x130/0x130 [ 555.941689] do_syscall_64+0x1e8/0x640 [ 555.941700] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 555.941717] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 555.941725] RIP: 0033:0x4592c9 [ 555.941732] RSP: 002b:00007f46a6886a88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 555.941744] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 00000000004592c9 [ 555.941751] RDX: 0000000020000068 RSI: 0000000000000000 RDI: 00000000004be1cc [ 555.941759] RBP: 000000000075bf20 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 555.941766] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f46a68876d4 [ 555.941773] R13: 00000000004c8326 R14: 00000000004deb88 R15: 0000000000000003 [ 556.045883] FAULT_INJECTION: forcing a failure. [ 556.045883] name failslab, interval 1, probability 0, space 0, times 0 [ 556.081812] CPU: 1 PID: 13387 Comm: syz-executor.2 Not tainted 4.14.125 #19 15:23:52 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000000)={0xa, 0x1, 0x1}, 0xa) [ 556.089445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 556.089457] Call Trace: [ 556.102350] dump_stack+0x138/0x19c [ 556.106437] should_fail.cold+0x10f/0x159 [ 556.106455] should_failslab+0xdb/0x130 [ 556.106471] kmem_cache_alloc+0x2d7/0x780 [ 556.106482] ? __alloc_fd+0x1d4/0x4a0 [ 556.106501] __d_alloc+0x2d/0x9f0 [ 556.106514] ? lock_downgrade+0x6e0/0x6e0 [ 556.106527] d_alloc_pseudo+0x1e/0x30 [ 556.106541] __shmem_file_setup.part.0+0xd8/0x400 [ 556.106549] ? __alloc_fd+0x1d4/0x4a0 [ 556.106558] ? shmem_fill_super+0x8c0/0x8c0 [ 556.131419] SyS_memfd_create+0x1f9/0x3a0 [ 556.131431] ? shmem_fcntl+0x130/0x130 [ 556.131442] ? do_syscall_64+0x53/0x640 [ 556.131452] ? shmem_fcntl+0x130/0x130 [ 556.131465] do_syscall_64+0x1e8/0x640 [ 556.131475] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 556.131493] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 556.131505] RIP: 0033:0x4592c9 [ 556.140393] RSP: 002b:00007f46a6886a88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f 15:23:52 executing program 2 (fault-call:0 fault-nth:2): syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb7fc86d4f66732e66617400020341000500077008f8", 0x16}], 0x8000, 0x0) [ 556.140404] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 00000000004592c9 [ 556.140409] RDX: 0000000020000068 RSI: 0000000000000000 RDI: 00000000004be1cc [ 556.140415] RBP: 000000000075bf20 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 556.140420] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f46a68876d4 [ 556.140426] R13: 00000000004c8326 R14: 00000000004deb88 R15: 0000000000000003 15:23:52 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000240)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EDID(r0, 0xc0285629, &(0x7f0000000180)={0x0, 0x1, 0x8001, [], &(0x7f0000000040)=0x1}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x80, r1, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x22b3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x81}]}, @TIPC_NLA_NET={0x40, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x101}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8001}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x11}, 0x44) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) ioctl$TIOCSRS485(r0, 0x542f, &(0x7f0000000000)={0x4d9, 0x800000000000, 0x8001}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f00000001c0)={@host}) [ 556.247122] kvm [13383]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 [ 556.342521] FAULT_INJECTION: forcing a failure. [ 556.342521] name failslab, interval 1, probability 0, space 0, times 0 [ 556.411253] CPU: 0 PID: 13397 Comm: syz-executor.2 Not tainted 4.14.125 #19 [ 556.418946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 556.428335] Call Trace: [ 556.431032] dump_stack+0x138/0x19c [ 556.434976] should_fail.cold+0x10f/0x159 [ 556.439172] should_failslab+0xdb/0x130 [ 556.443198] kmem_cache_alloc+0x2d7/0x780 [ 556.447730] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 556.454030] ? rcu_read_lock_sched_held+0x110/0x130 [ 556.461045] ? shmem_destroy_callback+0xa0/0xa0 [ 556.467109] shmem_alloc_inode+0x1c/0x50 [ 556.472033] alloc_inode+0x64/0x180 [ 556.476741] new_inode_pseudo+0x19/0xf0 [ 556.481611] new_inode+0x1f/0x40 [ 556.485727] shmem_get_inode+0x75/0x750 [ 556.489732] __shmem_file_setup.part.0+0x111/0x400 [ 556.495158] ? __alloc_fd+0x1d4/0x4a0 [ 556.499347] ? shmem_fill_super+0x8c0/0x8c0 [ 556.504184] SyS_memfd_create+0x1f9/0x3a0 [ 556.508999] ? shmem_fcntl+0x130/0x130 [ 556.513830] ? do_syscall_64+0x53/0x640 [ 556.518842] ? shmem_fcntl+0x130/0x130 [ 556.524585] do_syscall_64+0x1e8/0x640 [ 556.529076] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 556.534193] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 556.539809] RIP: 0033:0x4592c9 [ 556.543334] RSP: 002b:00007f46a6886a88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 556.552231] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 00000000004592c9 [ 556.560220] RDX: 0000000020000068 RSI: 0000000000000000 RDI: 00000000004be1cc [ 556.568093] RBP: 000000000075bf20 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 556.575893] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f46a68876d4 [ 556.583756] R13: 00000000004c8326 R14: 00000000004deb88 R15: 0000000000000003 [ 557.430303] net_ratelimit: 22 callbacks suppressed [ 557.430308] protocol 88fb is buggy, dev hsr_slave_0 [ 557.440867] protocol 88fb is buggy, dev hsr_slave_1 [ 557.670204] protocol 88fb is buggy, dev hsr_slave_0 [ 557.675395] protocol 88fb is buggy, dev hsr_slave_1 [ 558.390164] protocol 88fb is buggy, dev hsr_slave_0 [ 558.395322] protocol 88fb is buggy, dev hsr_slave_1 [ 558.710203] protocol 88fb is buggy, dev hsr_slave_0 [ 558.715339] protocol 88fb is buggy, dev hsr_slave_1 [ 558.790144] protocol 88fb is buggy, dev hsr_slave_0 [ 558.795340] protocol 88fb is buggy, dev hsr_slave_1 15:23:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000014c0)="11dca5055e0bcfec7be070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000620920144f88cd8bf8fa050030cea0e283d9b22703305b8fe23074bc015a41200581e5ef57c5000000000000000bcbb61c10b1f4451c"], 0x1}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$cont(0x18, r1, 0x0, 0x0) gettid() ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 15:23:55 executing program 5: r0 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x8000) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000240)={0x400, 0x0, 0x10001, 0xffffffff7fffffff}) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000280)={0x7, r1, 0x1, 0x3}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1800008912, &(0x7f0000000140)="11dca5055e0bcfec7be0702913b46baa5f34f916b6f4d8f04beecf6f68eb3a061e067f5d28fd1e41711bc22925f89c8ee1371003fa7d5f5ecdcb27f07481e788da9ef81cd2844400c536f72c9aa7366018d9012943ee35892f1d15d28d1fc0bcb04bd2212d5b91492350b14c97c818c6af56380188e4c731e192040be29d87cf34324b072307c785007777e1a1d0935393a4c8cb6eb102fd95040e16d282ad7d89a6cf188f1ac3eb4a64") r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x2, 0x2000) ioctl$RTC_PLL_GET(r4, 0x80207011, &(0x7f0000000080)) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r6, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) 15:23:55 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x9, 0x501200) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f00000000c0)) 15:23:55 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0x1, 0x2) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000000)) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) read$FUSE(r0, &(0x7f00000001c0), 0x1000) mmap(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x4000000000006, 0x10, r0, 0x0) 15:23:55 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000180)=@HCI_EVENT_PKT={0x4, "8d81ddf1994233b5f7fa0745d8a402698c9818314ca8595711541e66461bc6c24c8c3eb374eea8578ad004d07eb944d40ae9ae969c6ff2435efc027fbb506c18fffde5300abd0b666545562dffb4c5d7980f98cf39eedc9f2028583c213d323f8dbf117f7befcf24b672f349a91dd542d617a1e13d452627f6e5ea3ca31d14929ab17a0106630256712e78aeffb85c4763b244c6543cb678d25ff3504ed019bbd416bea64d558a474cd7abb05fadb59b3eede2cdee1bbedf1046da021a9f407594f4ce7e6946e0dbac10ddeb"}, 0x37) close(r0) 15:23:55 executing program 2 (fault-call:0 fault-nth:3): syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb7fc86d4f66732e66617400020341000500077008f8", 0x16}], 0x8000, 0x0) 15:23:55 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) [ 558.934339] FAULT_INJECTION: forcing a failure. [ 558.934339] name failslab, interval 1, probability 0, space 0, times 0 [ 558.991832] CPU: 0 PID: 13410 Comm: syz-executor.2 Not tainted 4.14.125 #19 [ 558.998986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 558.998993] Call Trace: [ 558.999016] dump_stack+0x138/0x19c [ 558.999037] should_fail.cold+0x10f/0x159 [ 558.999057] should_failslab+0xdb/0x130 [ 559.018908] kmem_cache_alloc+0x2d7/0x780 [ 559.027141] ? shmem_alloc_inode+0x1c/0x50 [ 559.027155] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 559.027173] selinux_inode_alloc_security+0xb6/0x2a0 15:23:55 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) [ 559.027186] security_inode_alloc+0x94/0xd0 [ 559.036887] inode_init_always+0x552/0xaf0 [ 559.036901] alloc_inode+0x81/0x180 [ 559.036911] new_inode_pseudo+0x19/0xf0 [ 559.036921] new_inode+0x1f/0x40 [ 559.036934] shmem_get_inode+0x75/0x750 [ 559.046389] __shmem_file_setup.part.0+0x111/0x400 [ 559.046402] ? __alloc_fd+0x1d4/0x4a0 [ 559.046413] ? shmem_fill_super+0x8c0/0x8c0 [ 559.046430] SyS_memfd_create+0x1f9/0x3a0 [ 559.054386] ? shmem_fcntl+0x130/0x130 [ 559.054399] ? do_syscall_64+0x53/0x640 [ 559.054410] ? shmem_fcntl+0x130/0x130 [ 559.054422] do_syscall_64+0x1e8/0x640 [ 559.054435] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 559.061804] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 559.061815] RIP: 0033:0x4592c9 [ 559.061820] RSP: 002b:00007f46a6886a88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 559.061834] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 00000000004592c9 [ 559.070734] RDX: 0000000020000068 RSI: 0000000000000000 RDI: 00000000004be1cc [ 559.070741] RBP: 000000000075bf20 R08: fe03f80fe03f80ff R09: 00000000fbad8001 15:23:55 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) getsockopt$inet_mreq(r0, 0x0, 0x0, &(0x7f0000000000)={@remote, @multicast2}, &(0x7f0000000040)=0x8) 15:23:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000014c0)="11dca5055e0bcfec7be070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000620920144f88cd8bf8fa050030cea0e283d9b227200581e5ef57c5000000000000000bc42d1c10b1f4451c0000000000000000000000b0e6cd16eb050623952e216840390556e374a1c4af56ce39b41d3493b71c26349e480ba77011b412985e10b44d4a60f5d025c94d72471847e2930536c19fd9ec52fd5ee993a9a4ed26dca22e8d539f07fc37533d9ea35eb45f150037617ded74c072c5b4e4ffce1eb471ad3377720ec1d8a980535b5d8a2cb92e30c190b88e6521c56e0018"], 0x1}}, 0x0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x1f, &(0x7f0000000080)=0x400, 0x4) tkill(r1, 0x17) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 559.070746] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f46a68876d4 [ 559.070751] R13: 00000000004c8326 R14: 00000000004deb88 R15: 0000000000000003 [ 559.081153] kvm [13408]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 15:23:55 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) r1 = getpid() ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x9, &(0x7f0000000140)=""/160) r2 = semget(0x0, 0x0, 0x1) semctl$GETVAL(r2, 0x3, 0xc, &(0x7f0000000080)=""/144) 15:23:55 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x9, 0x7, 0x0, 0x0, 0x0, 0x2, 0xf, 0x80000001, 0x1, 0x7, 0x1, 0x7}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) 15:23:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000014c0)="11dca5055e0bcfec7be070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x1000000000200000}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 15:23:56 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x80, 0x40040) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @pic={0x0, 0x2, 0x2, 0x9, 0x6, 0x1ff, 0x1, 0xfa41, 0x80000001, 0xc3, 0x8, 0x7, 0x2, 0x5, 0x4, 0x200}}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$SIOCGETNODEID(r1, 0x89e1, &(0x7f0000000080)) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) 15:23:56 executing program 1: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000000)) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r1, 0x8000000) fstatfs(r0, &(0x7f0000000180)=""/105) ioctl$VIDIOC_S_JPEGCOMP(r1, 0x408c563e, &(0x7f0000000240)={0x200, 0x4, 0x9, "dde479d084fc8c65a95c7a299df16ed655f3793f9ae2e6c8f62455746c34589a305b8397c737ff0f4ca571bb3a9e9a69542d5e27ba43ab9a85157183", 0x16, "f19d0cd4859c449071dff3e72ac17267976137d2be127991c0f85f4191b90b30bea34470592a42b315d428650b7ea88b3bc5d046023d44f1e93996ad", 0x80}) 15:23:56 executing program 3: r0 = creat(&(0x7f0000000140)='./file0\x00', 0x20) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f0000000180)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0x14) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000200)={r1, 0x94, "da8837fe03a5ef56a5537540bad756f7f20847f065bb7ae7fffba618a77f5e16072c617ee8d521a7e8cee0a0c5187b0a96a67291b318b8ec690383c4d08e3c248519bd6cf8bda43a47bf214fa2ff90256747661c72179a9e29393cb1080d292c0e052a4b57971c15754b6b7d5c1315955c2785faadecf4929b5ec8fc7527b86037f8d14c8a921918a000b4257f9f9877f8f29eb4"}, &(0x7f00000002c0)=0x9c) r2 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x3, 0x1) fsetxattr$trusted_overlay_opaque(r2, &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000100)='y\x00', 0x2, 0x2) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) ioctl$sock_x25_SIOCDELRT(r0, 0x890c, &(0x7f0000000300)={@remote={[], 0x2}, 0x8, 'veth1_to_hsr\x00'}) write$vhci(r3, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r3) 15:23:56 executing program 4: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0xa0801, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@empty, @ipv4={[], [], @local}, @rand_addr="bfd64972ca0035282fb9c7527776ba46", 0x100000000, 0x8, 0x80000001, 0x500, 0x4a, 0x200, r1}) getuid() r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) 15:23:56 executing program 2 (fault-call:0 fault-nth:4): syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb7fc86d4f66732e66617400020341000500077008f8", 0x16}], 0x8000, 0x0) 15:23:56 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) [ 559.441877] Unknown ioctl 35083 15:23:56 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000180)) 15:23:56 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x101000, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f00000000c0)=0x1, 0x4) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) [ 559.504251] Unknown ioctl 35083 [ 559.515036] FAULT_INJECTION: forcing a failure. [ 559.515036] name failslab, interval 1, probability 0, space 0, times 0 [ 559.574791] CPU: 0 PID: 13482 Comm: syz-executor.2 Not tainted 4.14.125 #19 [ 559.581956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 559.591327] Call Trace: [ 559.593935] dump_stack+0x138/0x19c [ 559.597578] should_fail.cold+0x10f/0x159 [ 559.601742] should_failslab+0xdb/0x130 [ 559.601758] kmem_cache_alloc+0x2d7/0x780 [ 559.601772] ? lock_downgrade+0x6e0/0x6e0 [ 559.601787] get_empty_filp+0x8c/0x3b0 [ 559.601797] alloc_file+0x23/0x440 15:23:56 executing program 1: getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f0000000000)) ptrace$cont(0x3f, r0, 0x8000, 0xc4) r2 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r2, 0x8000000) 15:23:56 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r0, &(0x7f0000000080)={'syz0', "7b8cdf9d9a3b11490ba417358f503dc49b061ce14950e8699303f5d3825d06caebc17abb4b17d3c9e2f32387634500ef0778e6373202f252e226c6164f3fae1cde1b249bcb04a7296753b6ce2cf931aee79ea51180763c4f35219a5898b6f40fae7accca6cd8d63a60fe6c9530284d58d2beca010e3e1599a002fe7adc955d88d34c8703bcd686ce90f54d6d47a0"}, 0x92) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 15:23:56 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000040)) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x204000, 0x0) ioctl$TUNSETVNETBE(r4, 0x400454de, &(0x7f0000000340)) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e22, 0x101, @loopback, 0x4}}, [0x100000, 0x36000000000000, 0x2, 0xff, 0x101, 0x6, 0x0, 0xfffffffffffffffd, 0x3, 0x7ff, 0x84, 0x800000000ff, 0x1, 0x7, 0xe2]}, &(0x7f00000003c0)=0x100) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000140)={r5, 0x10001}, &(0x7f0000000380)=0xffffffffffffffb4) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000180)=0x0) setpriority(0x0, r6, 0x0) [ 559.601810] __shmem_file_setup.part.0+0x1b1/0x400 [ 559.601823] ? __alloc_fd+0x1d4/0x4a0 [ 559.609952] ? shmem_fill_super+0x8c0/0x8c0 [ 559.609972] SyS_memfd_create+0x1f9/0x3a0 [ 559.609986] ? shmem_fcntl+0x130/0x130 [ 559.618052] ? do_syscall_64+0x53/0x640 [ 559.618066] ? shmem_fcntl+0x130/0x130 [ 559.618078] do_syscall_64+0x1e8/0x640 [ 559.618090] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 559.626569] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 559.626579] RIP: 0033:0x4592c9 [ 559.626588] RSP: 002b:00007f46a6886a88 EFLAGS: 00000246 [ 559.634703] ORIG_RAX: 000000000000013f [ 559.634711] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 00000000004592c9 [ 559.634717] RDX: 0000000020000068 RSI: 0000000000000000 RDI: 00000000004be1cc [ 559.634722] RBP: 000000000075bf20 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 559.634729] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f46a68876d4 [ 559.634735] R13: 00000000004c8326 R14: 00000000004deb88 R15: 0000000000000003 [ 559.732379] kvm [13497]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 15:23:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000014c0)="11dca5055e0bcfec7be070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000620920144f88cd8bf8fa050030cea0e283d9b22703a971d8daac7a23305b8fe23074bc015a41200581e5ef57c5000000000000000bcbb61c10b1f4451c"], 0x1}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 15:23:58 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000240)={0x2a, {{0x2, 0x4e22, @loopback}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x13}}}}, 0x108) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000380)={[0x4978, 0xd68000, 0x3f, 0x8, 0x1ff, 0x1, 0x7, 0x7, 0x80000000, 0x1, 0x100000000, 0x1, 0x9, 0x16, 0x3, 0x4], 0x100000, 0x2}) ioctl$RTC_WIE_OFF(r0, 0x7010) 15:23:58 executing program 2 (fault-call:0 fault-nth:5): syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb7fc86d4f66732e66617400020341000500077008f8", 0x16}], 0x8000, 0x0) 15:23:58 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCX25SENDCALLACCPT(r1, 0x89e9) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) 15:23:58 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x2435b9a381dcf9cd) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:23:58 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x8c0d9d48bd9b71c8) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f00000000c0)={'mangle\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 15:23:59 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhci\x00', 0x2000000000200400) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x80040, 0x0) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f00000000c0)=""/154) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000200)='&vboxnet0eth1-@vboxnet0--\x00') setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000180)=ANY=[@ANYBLOB="736563757269747900000000000000f284b456c91caecf0000000000000000000200"/72], 0x48) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000040)=""/20) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000280)=""/174, 0xae}], 0x1, 0x0) close(r1) [ 562.343106] FAULT_INJECTION: forcing a failure. [ 562.343106] name failslab, interval 1, probability 0, space 0, times 0 [ 562.382421] kvm [13511]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 [ 562.405111] CPU: 0 PID: 13522 Comm: syz-executor.2 Not tainted 4.14.125 #19 [ 562.412288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 562.421654] Call Trace: [ 562.424269] dump_stack+0x138/0x19c [ 562.428011] should_fail.cold+0x10f/0x159 [ 562.432183] should_failslab+0xdb/0x130 [ 562.436206] kmem_cache_alloc+0x2d7/0x780 [ 562.440373] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 562.445868] ? check_preemption_disabled+0x3c/0x250 [ 562.451092] selinux_file_alloc_security+0xb4/0x190 [ 562.456439] security_file_alloc+0x6d/0xa0 [ 562.461283] get_empty_filp+0x130/0x3b0 [ 562.465848] alloc_file+0x23/0x440 [ 562.469666] __shmem_file_setup.part.0+0x1b1/0x400 [ 562.474905] ? __alloc_fd+0x1d4/0x4a0 [ 562.478847] ? shmem_fill_super+0x8c0/0x8c0 [ 562.483214] SyS_memfd_create+0x1f9/0x3a0 [ 562.487490] ? shmem_fcntl+0x130/0x130 [ 562.491683] ? do_syscall_64+0x53/0x640 [ 562.495796] ? shmem_fcntl+0x130/0x130 [ 562.499718] do_syscall_64+0x1e8/0x640 [ 562.503638] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 562.508519] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 562.514154] RIP: 0033:0x4592c9 [ 562.517396] RSP: 002b:00007f46a6886a88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 562.525206] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 00000000004592c9 [ 562.532509] RDX: 0000000020000068 RSI: 0000000000000000 RDI: 00000000004be1cc 15:23:59 executing program 1: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a8b000/0x2000)=nil, 0x2000, 0x1000004, 0x11, 0xffffffffffffffff, 0x7fffffc) 15:23:59 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) accept4$rose(r1, &(0x7f0000000100)=@short={0xb, @dev, @rose, 0x1, @netrom}, &(0x7f0000000140)=0x1c, 0x80800) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000080)) close(r0) 15:23:59 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_buf(r0, 0x107, 0x16, &(0x7f00000001c0)=""/183, &(0x7f0000000280)=0xb7) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) fallocate(r1, 0x0, 0x4000000baf, 0x24ccae75) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000180)=0x2, 0x4) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0x7}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={r4, 0x9}, 0x8) 15:23:59 executing program 2 (fault-call:0 fault-nth:6): syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb7fc86d4f66732e66617400020341000500077008f8", 0x16}], 0x8000, 0x0) [ 562.540006] RBP: 000000000075bf20 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 562.547374] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f46a68876d4 [ 562.550240] net_ratelimit: 18 callbacks suppressed [ 562.550246] protocol 88fb is buggy, dev hsr_slave_0 [ 562.554673] R13: 00000000004c8326 R14: 00000000004deb88 R15: 0000000000000003 [ 562.573681] protocol 88fb is buggy, dev hsr_slave_1 [ 562.656377] FAULT_INJECTION: forcing a failure. [ 562.656377] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 562.671532] CPU: 1 PID: 13546 Comm: syz-executor.2 Not tainted 4.14.125 #19 [ 562.678668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 562.678684] Call Trace: [ 562.678708] dump_stack+0x138/0x19c [ 562.678734] should_fail.cold+0x10f/0x159 [ 562.694344] ? __might_sleep+0x93/0xb0 [ 562.703013] __alloc_pages_nodemask+0x1d6/0x7a0 [ 562.703035] ? __alloc_pages_slowpath+0x2930/0x2930 [ 562.703047] ? lock_downgrade+0x6e0/0x6e0 [ 562.703068] alloc_pages_vma+0xc9/0x4c0 [ 562.703085] shmem_alloc_page+0xf6/0x1a0 [ 562.703095] ? shmem_swapin+0x1a0/0x1a0 [ 562.703109] ? cred_has_capability+0x142/0x290 [ 562.703125] ? check_preemption_disabled+0x3c/0x250 [ 562.713308] ? __this_cpu_preempt_check+0x1d/0x30 [ 562.713322] ? percpu_counter_add_batch+0x112/0x160 [ 562.713338] ? __vm_enough_memory+0x26a/0x490 15:23:59 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000000)=0x80000000, 0x4) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) [ 562.713354] shmem_alloc_and_acct_page+0x12a/0x680 [ 562.713369] shmem_getpage_gfp+0x402/0x28a0 [ 562.713381] ? _raw_spin_unlock+0x2d/0x50 [ 562.713400] ? shmem_add_to_page_cache+0x860/0x860 [ 562.721807] ? iov_iter_fault_in_readable+0x1da/0x3c0 [ 562.721824] shmem_write_begin+0xfd/0x1b0 [ 562.721838] ? trace_hardirqs_on_caller+0x400/0x590 [ 562.721852] generic_perform_write+0x1f8/0x480 [ 562.721867] ? page_endio+0x530/0x530 [ 562.721878] ? current_time+0xb0/0xb0 [ 562.721889] ? generic_file_write_iter+0x9a/0x660 [ 562.721906] __generic_file_write_iter+0x239/0x5b0 [ 562.730114] generic_file_write_iter+0x303/0x660 [ 562.730135] __vfs_write+0x4a7/0x6b0 [ 562.730147] ? selinux_file_open+0x420/0x420 [ 562.730158] ? kernel_read+0x120/0x120 [ 562.730177] ? check_preemption_disabled+0x3c/0x250 [ 562.739984] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 562.740001] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 562.740012] ? __sb_start_write+0x153/0x2f0 [ 562.740034] vfs_write+0x198/0x500 [ 562.740048] SyS_pwrite64+0x115/0x140 [ 562.740058] ? SyS_pread64+0x140/0x140 [ 562.740069] ? do_syscall_64+0x53/0x640 [ 562.740083] ? SyS_pread64+0x140/0x140 [ 562.749987] do_syscall_64+0x1e8/0x640 [ 562.749998] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 562.750016] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 562.750032] RIP: 0033:0x413217 [ 562.750037] RSP: 002b:00007f46a6886a80 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 562.750048] RAX: ffffffffffffffda RBX: 0000000020000050 RCX: 0000000000413217 [ 562.750053] RDX: 0000000000000016 RSI: 0000000020000080 RDI: 0000000000000004 [ 562.750059] RBP: 0000000000000000 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 562.750069] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 562.759600] R13: 00000000004c8326 R14: 00000000004deb88 R15: 0000000000000003 [ 562.870266] protocol 88fb is buggy, dev hsr_slave_0 [ 562.875921] protocol 88fb is buggy, dev hsr_slave_1 [ 562.960137] protocol 88fb is buggy, dev hsr_slave_0 [ 562.965339] protocol 88fb is buggy, dev hsr_slave_1 [ 563.270186] protocol 88fb is buggy, dev hsr_slave_0 [ 563.275304] protocol 88fb is buggy, dev hsr_slave_1 [ 563.670186] protocol 88fb is buggy, dev hsr_slave_0 [ 563.675338] protocol 88fb is buggy, dev hsr_slave_1 15:24:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000014c0)="11dca5055e0bcfec7be070") r1 = inotify_init() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000620920144f88cd8bf8fa050030cea0e283d9b22703305b8fe23074bc015a41200581e5ef57c5000000000000000bcbb61c10b1f4451c"], 0x1}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) fadvise64(r1, 0x0, 0x7, 0x7) tkill(r2, 0x17) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 15:24:01 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000000)={0xb7, 0xb, 0x4, 0x10, {0x0, 0x7530}, {0x3, 0x0, 0xb2, 0x2, 0x5, 0x9, "f8bfcff0"}, 0x1, 0x0, @userptr=0x2, 0x4}) 15:24:01 executing program 2 (fault-call:0 fault-nth:7): syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb7fc86d4f66732e66617400020341000500077008f8", 0x16}], 0x8000, 0x0) 15:24:01 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f0000000140)=""/188) 15:24:01 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x1) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x600000) 15:24:01 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) r1 = dup2(r0, r0) name_to_handle_at(r1, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0xea, 0x4ca, "32d3967b13dc92bc00bc9b39b3a406061808656221eca68d26846d8027bbbb5c66bd1f930f68b36f9dca10b6ecf4e7b2040a22eb7700e024ec4a2afad56b7ba94c25cae68cca555c07efbb982e638aee74aef824c32756677b5feb08ce353e67afb5967c0cb8fc426bae66c57ff382dc5a3c15ca181f08990807329d0b439e66b1bb375b05a3250d42cc8e182acb191f488c8a978c721cc4558fc41fdb6368832d437d7018b3d240209648257f007f86b3b366d7ea3b35097f5f934b942b1593a7236d943dff22f416c820a4e0e55023b6f5d7fbfc4922695f5581bad0760d4b2684"}, &(0x7f00000001c0), 0x1000) [ 565.372775] FAULT_INJECTION: forcing a failure. [ 565.372775] name failslab, interval 1, probability 0, space 0, times 0 15:24:02 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x400) dup(r0) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) [ 565.416932] kvm [13562]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 [ 565.436114] CPU: 1 PID: 13569 Comm: syz-executor.2 Not tainted 4.14.125 #19 [ 565.443483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 565.443494] Call Trace: [ 565.455494] dump_stack+0x138/0x19c [ 565.459142] should_fail.cold+0x10f/0x159 [ 565.459162] should_failslab+0xdb/0x130 [ 565.459176] kmem_cache_alloc+0x2d7/0x780 [ 565.459190] ? vfs_write+0x25f/0x500 [ 565.467429] getname_flags+0xcb/0x580 [ 565.467444] ? check_preemption_disabled+0x3c/0x250 [ 565.467457] getname+0x1a/0x20 [ 565.467468] do_sys_open+0x1e7/0x430 [ 565.467480] ? filp_open+0x70/0x70 [ 565.475442] ? fput+0xd4/0x150 [ 565.475456] ? SyS_pwrite64+0xca/0x140 [ 565.475471] SyS_open+0x2d/0x40 [ 565.475480] ? do_sys_open+0x430/0x430 [ 565.475495] do_syscall_64+0x1e8/0x640 [ 565.475504] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 565.475520] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 565.523408] RIP: 0033:0x4131b1 [ 565.526590] RSP: 002b:00007f46a6886a80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 565.534317] RAX: ffffffffffffffda RBX: 0000000020000068 RCX: 00000000004131b1 [ 565.541784] RDX: 00007f46a6886b0a RSI: 0000000000000002 RDI: 00007f46a6886b00 [ 565.549059] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 565.556427] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000004 15:24:02 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x180}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x500}, {r0, 0x12}, {r0}, {r0}, {0xffffffffffffffff, 0x800a}], 0x7, 0x3f) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x40040, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) dup3(r1, r1, 0x0) ioctl$TIOCSERGETLSR(r1, 0x5459, &(0x7f0000000280)) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)=0x9) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) ioctl$VIDIOC_G_TUNER(r2, 0xc054561d, &(0x7f0000000180)={0x8, "18e1c63a9237d8a748d1cc7ee887872d215326fc25fdafc56d2c4764da869934", 0x5, 0x10, 0x4, 0x7, 0x4, 0x2, 0xffffffffffffff01, 0x1}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r2, 0x8000000) 15:24:02 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x600, 0x0) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f00000000c0)=0x1) close(r0) [ 565.563702] R13: 00000000004c8326 R14: 00000000004deb88 R15: 0000000000000003 15:24:02 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x1) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) ioctl$TUNSETGROUP(r1, 0x400454ce, r4) sendmsg$netlink(r1, &(0x7f0000000300)={&(0x7f0000000140)=@kern={0x10, 0x0, 0x0, 0x800200}, 0xc, &(0x7f0000000200)=[{&(0x7f00000001c0)={0x10, 0x1e, 0x80c, 0x70bd2a, 0x25dfdbff}, 0x10}], 0x1, &(0x7f0000000240)=[@cred={{0x1c, 0x1, 0x2, {r2, r3, r4}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {r2, r3, r4}}}, @cred={{0x1c, 0x1, 0x2, {r2, r3, r4}}}, @cred={{0x1c, 0x1, 0x2, {r2, r3, r4}}}, @rights={{0x1c, 0x1, 0x1, [r0, r1, r0]}}], 0xb8}, 0x800) close(r0) socketpair$unix(0x1, 0x8, 0x0, &(0x7f0000000180)) 15:24:02 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000240)="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") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='loginuid\x00') bind$vsock_stream(r4, &(0x7f00000001c0), 0x10) ioctl$BLKSECDISCARD(r4, 0x127d, &(0x7f0000000040)=0x5) 15:24:02 executing program 4: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getpeername$tipc(r0, &(0x7f00000000c0), &(0x7f0000000100)=0x10) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000003240), 0xfffffffffffffe94) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000)={0x0, 0xfff}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={r2, 0xff, 0x1, [0x7]}, 0xa) socket$inet(0x2, 0x0, 0x4) close(r1) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/load\x00', 0x2, 0x0) [ 565.791978] kvm [13601]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 [ 567.830190] net_ratelimit: 22 callbacks suppressed [ 567.830197] protocol 88fb is buggy, dev hsr_slave_0 [ 567.840413] protocol 88fb is buggy, dev hsr_slave_1 [ 568.070308] protocol 88fb is buggy, dev hsr_slave_0 [ 568.075476] protocol 88fb is buggy, dev hsr_slave_1 15:24:05 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000014c0)="11dca5055e0bcfec7be070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000620920144f88cd8bf8fa050030cea0e283d9b22703305b8fe23074bc015a41200581e5ef57c5000000000000000bcbb61c10b1f4451c"], 0x1}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x400100, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x8, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x8a5}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000180)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@local}}, &(0x7f0000000100)=0xe8) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000280)={r3, 0x7f, 0x9a99, 0x1, 0x0, 0xed84, 0x3}) ptrace$cont(0x9, r1, 0x0, 0x0) 15:24:05 executing program 2 (fault-call:0 fault-nth:8): syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb7fc86d4f66732e66617400020341000500077008f8", 0x16}], 0x8000, 0x0) 15:24:05 executing program 1: prctl$PR_SET_TIMERSLACK(0x1d, 0x3) r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f00000001c0)) ioctl$VIDIOC_G_ENC_INDEX(r0, 0x8818564c, &(0x7f0000000440)) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x3, 0x7, 0x4, {0x7, @win={{0x2, 0x7, 0xfffffffffffffff8, 0x401}, 0x3, 0x9, &(0x7f0000000180)={{0x1, 0x2, 0x1, 0x3}, &(0x7f0000000040)={{0x7f, 0x2, 0x8, 0x8000}, &(0x7f0000000000)={{0x0, 0x8000, 0x8, 0x6}}}}, 0x7f, &(0x7f0000000240)="0bed977dee0e4c0175a69f74e4b5be67dac1c6158763d9e4362eababe189c1ed7644ce6d36d626737015359b0df390b5bbeee03a022712f3c2c73a5b7bf61e1fc9d3efad9e0517bd84f4b79b857eb8dbb97d4b699b613ef729c232fec21706d5810e09dff5b1c1c3e47f65b30a759ff26d536184c437eb6aa39258f864d077f3af8894597d32c320fcf575041673cb2d589dd4fd45c283b3ce217f5dde56f09f8010737b97baa844f0d17d8a530c5b4ee5c35c3941783352b0213b839cae2aab585198ae365338e3ae05", 0x8}}}) 15:24:05 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000500)) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11fca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x8000, 0x41) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000400)={0x0, 0x100}, &(0x7f0000000440)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000480)={r4, 0xfffffffffffffff9}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000240)={r5, 0xc3, "3d6d6ae676f8b32cc86aa1d2d676cf19a4085b2fbf1a2145511fa39b249cfaa3fad3a30d8cafe67d04f11287688ce9f7eaccc18bd09890f7ee0748c00691b03b1ceb27483cded319af0340ea459b7567f5fae4301691cdbc172aafd7587352c059c77073cf9d47df9c6793cdecee2fc977830d9b6dabf56f80d3ee23dedb7c28b98a9d4f3e493de2683af5f58b35b60f0527a8a9a288e15600fb7be5b09170e29974ff7f329ddae540a7b53730d1ca575cd7b064a280259937547f2098b9662e6de69a"}, &(0x7f0000000080)=0xcb) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000040)={0x181}) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f0000000140)={0x40000000, 0x8, 0x7, 0x2, 0x450e, 0x7}) 15:24:05 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, "616335caea542edb5675f9f0aae1d8749d7a01511f02b634798f92f4ffe08a088d7004312a3e9a"}, 0x28) close(r0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x8000, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r1, 0x89e4) 15:24:05 executing program 3: futex(&(0x7f0000000040)=0x2, 0x9, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x2, 0x2) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) [ 568.409239] FAULT_INJECTION: forcing a failure. [ 568.409239] name failslab, interval 1, probability 0, space 0, times 0 [ 568.437686] CPU: 1 PID: 13624 Comm: syz-executor.2 Not tainted 4.14.125 #19 [ 568.448114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 568.463906] Call Trace: [ 568.469455] dump_stack+0x138/0x19c [ 568.474951] should_fail.cold+0x10f/0x159 [ 568.481564] should_failslab+0xdb/0x130 [ 568.487024] kmem_cache_alloc+0x2d7/0x780 [ 568.492678] ? save_stack+0xa9/0xd0 [ 568.498369] get_empty_filp+0x8c/0x3b0 [ 568.503440] path_openat+0x8f/0x3f70 [ 568.508110] ? generic_perform_write+0x34f/0x480 [ 568.514088] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 568.518960] ? save_trace+0x290/0x290 [ 568.523267] ? __alloc_fd+0x1d4/0x4a0 [ 568.527237] do_filp_open+0x18e/0x250 [ 568.531675] ? may_open_dev+0xe0/0xe0 [ 568.535789] ? lock_downgrade+0x6e0/0x6e0 [ 568.541477] ? _raw_spin_unlock+0x2d/0x50 [ 568.546936] ? __alloc_fd+0x1d4/0x4a0 [ 568.553140] do_sys_open+0x2c5/0x430 [ 568.557607] ? filp_open+0x70/0x70 [ 568.564117] ? fput+0xd4/0x150 [ 568.571359] ? SyS_pwrite64+0xca/0x140 [ 568.577971] SyS_open+0x2d/0x40 [ 568.584900] ? do_sys_open+0x430/0x430 [ 568.592378] do_syscall_64+0x1e8/0x640 [ 568.597333] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 568.603370] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 568.610721] RIP: 0033:0x4131b1 [ 568.618635] RSP: 002b:00007f46a6886a80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 568.632507] RAX: ffffffffffffffda RBX: 0000000020000068 RCX: 00000000004131b1 [ 568.641801] RDX: 00007f46a6886b0a RSI: 0000000000000002 RDI: 00007f46a6886b00 15:24:05 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) write$nbd(r0, &(0x7f0000000000)={0x67446698, 0x0, 0x2, 0x3, 0x1, "a652c032d0ef9aa82e4d3770321c356a3b308007f3bb748b93aaa8d61c5cce646849de6499bef378cfb6b0d9a0044b69cdeb2f3d78c0c47c067de00460e57322f19a02c63938599f01ae84dff7e5b29a04fc54fb81b3"}, 0x66) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) ioctl$SIOCGETLINKNAME(r0, 0x89e0, &(0x7f0000000180)={0x3}) 15:24:05 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x800000000800) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x2000, 0x0) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0xbf, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={'nr', 0x0}, 0x4, [@default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @null]}) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) [ 568.652885] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 568.666714] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000004 [ 568.678759] R13: 00000000004c8326 R14: 00000000004deb88 R15: 0000000000000003 15:24:05 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000080)=ANY=[@ANYBLOB="00ffffffff"]) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0xc0c0583b, 0x20000001) socketpair$unix(0x1, 0x0, 0x0, 0x0) gettid() openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) close(r0) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1, 0x101001) write$P9_RSYMLINK(r2, &(0x7f0000000080)={0x14, 0x11, 0x1, {0x1, 0x3, 0x8}}, 0x14) 15:24:05 executing program 4: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x20000, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x1ff, 0x5, 0x80000000}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000140)={r1, 0xa, "2006d145dc2f4f896edf"}, &(0x7f0000000180)=0x12) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) 15:24:05 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) timer_create(0x7, &(0x7f0000000200)={0x0, 0x7, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000240)=0x0) timer_getoverrun(r1) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='/dev/swradio#\x00') socket$isdn(0x22, 0x3, 0x23) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000180), &(0x7f00000001c0)=0x4) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) [ 568.790145] protocol 88fb is buggy, dev hsr_slave_0 [ 568.796251] protocol 88fb is buggy, dev hsr_slave_1 15:24:05 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x541000, 0x0) r1 = eventfd2(0x1000, 0x80000) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000100)={0x1, r1}) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) r3 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x1, 0x2) ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) [ 569.110280] protocol 88fb is buggy, dev hsr_slave_0 [ 569.115865] protocol 88fb is buggy, dev hsr_slave_1 [ 569.190233] protocol 88fb is buggy, dev hsr_slave_0 [ 569.197712] protocol 88fb is buggy, dev hsr_slave_1 15:24:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000014c0)="11dca5055e0bcfec7be070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000620920144f88cd8bf8fa050030cea0e283d9b22703305b8fe23074bc015a41200581e5ef57c5000000000000000bcbb61c10b1f4451c"], 0x1}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() ptrace$setopts(0x4206, r1, 0x7d, 0x3) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x14) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 15:24:08 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) fcntl$dupfd(r0, 0x406, r0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0xa00, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 15:24:08 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0xfffffffffffffffc, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) 15:24:08 executing program 2 (fault-call:0 fault-nth:9): syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb7fc86d4f66732e66617400020341000500077008f8", 0x16}], 0x8000, 0x0) 15:24:08 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$KDSETMODE(r1, 0x4b3a, 0x80000000) connect$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x40, {0x9, 0x8e, 0x7f, 0xfffffffffffffffa, 0x8c, 0x8001}, 0xb5, 0x4}, 0xe) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x4b}) write$vhci(r0, &(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, "1f60b360c06b46dc1269b3577648e692823dcdb24b47962213de0b9cbe395b515ed0ece4342a59880701"}, 0x2b) close(r0) 15:24:08 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x10100, 0x0) membarrier(0x0, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r1, 0xc0485630, &(0x7f0000000240)={0x3, "2c75a1fee9e9f4919af6463c3ccd2427b7ee5e5b72ccbe77c9bebf13060f5019", 0x2, 0x4, 0x5, 0x80000, 0x4}) close(r0) lsetxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x2, 0x1) open(&(0x7f0000000140)='\x00', 0x101000, 0x8) socket$rxrpc(0x21, 0x2, 0xa) 15:24:08 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x440800, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r4, 0xb, 0x1, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}, 0x20) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) [ 571.423900] FAULT_INJECTION: forcing a failure. [ 571.423900] name failslab, interval 1, probability 0, space 0, times 0 [ 571.474962] kobject_add_internal failed for hci1 (error: -2 parent: bluetooth) [ 571.486915] CPU: 0 PID: 13679 Comm: syz-executor.2 Not tainted 4.14.125 #19 [ 571.496076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 571.496083] Call Trace: [ 571.496107] dump_stack+0x138/0x19c [ 571.496128] should_fail.cold+0x10f/0x159 [ 571.496144] should_failslab+0xdb/0x130 [ 571.511186] Bluetooth: Can't register HCI device [ 571.511802] kmem_cache_alloc+0x2d7/0x780 [ 571.542257] ? save_stack+0xa9/0xd0 [ 571.547389] get_empty_filp+0x8c/0x3b0 [ 571.553939] path_openat+0x8f/0x3f70 [ 571.562293] ? trace_hardirqs_on+0x10/0x10 [ 571.569145] ? check_preemption_disabled+0x3c/0x250 [ 571.577919] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 571.585290] ? find_held_lock+0x35/0x130 [ 571.591049] ? save_trace+0x290/0x290 [ 571.595146] ? __alloc_fd+0x1d4/0x4a0 [ 571.600013] do_filp_open+0x18e/0x250 [ 571.604525] ? may_open_dev+0xe0/0xe0 [ 571.608568] ? lock_downgrade+0x6e0/0x6e0 [ 571.613206] ? _raw_spin_unlock+0x2d/0x50 [ 571.618869] ? __alloc_fd+0x1d4/0x4a0 [ 571.623331] do_sys_open+0x2c5/0x430 [ 571.627189] ? filp_open+0x70/0x70 [ 571.631042] ? fput+0xd4/0x150 [ 571.634428] ? SyS_pwrite64+0xca/0x140 [ 571.638868] SyS_open+0x2d/0x40 [ 571.642489] ? do_sys_open+0x430/0x430 [ 571.646484] do_syscall_64+0x1e8/0x640 [ 571.651094] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 571.657085] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 571.664319] RIP: 0033:0x4131b1 15:24:08 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x20000001, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) [ 571.668469] RSP: 002b:00007f46a6886a80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 571.678386] RAX: ffffffffffffffda RBX: 0000000020000068 RCX: 00000000004131b1 [ 571.687668] RDX: 00007f46a6886b0a RSI: 0000000000000002 RDI: 00007f46a6886b00 [ 571.698849] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 571.707461] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000004 [ 571.716247] R13: 00000000004c8326 R14: 00000000004deb88 R15: 0000000000000003 15:24:08 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x5, 0x10000) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000140)) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100001}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="11002dbd7000ffdbdf25010000000000000007410000004c001800000da16962000000000000fd0000000000000000a65201e2d763b3b8c05a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bc1ae4d1889e0db1102cca15ddb064a1b20691057069efe11d1fbadda89c"], 0x68}, 0x1, 0x0, 0x0, 0x404c0d1}, 0x40041) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:24:08 executing program 3: r0 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/context\x00', 0x2, 0x0) sync_file_range(r0, 0x0, 0x2, 0x3) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) ptrace$peek(0x2, r2, &(0x7f0000000140)) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f00000000c0)=ANY=[@ANYBLOB="5fed295bc82af203d0095f54247f009e29adc51e603120faab000000"], 0x4) 15:24:08 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) socket$unix(0x1, 0x3, 0x0) [ 571.816958] kvm [13689]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 15:24:08 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x8400, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) [ 572.950287] net_ratelimit: 18 callbacks suppressed [ 572.950293] protocol 88fb is buggy, dev hsr_slave_0 [ 572.975005] protocol 88fb is buggy, dev hsr_slave_1 [ 573.270306] protocol 88fb is buggy, dev hsr_slave_0 [ 573.280190] protocol 88fb is buggy, dev hsr_slave_1 [ 573.350481] protocol 88fb is buggy, dev hsr_slave_0 [ 573.359442] protocol 88fb is buggy, dev hsr_slave_1 [ 573.750185] protocol 88fb is buggy, dev hsr_slave_0 [ 573.755387] protocol 88fb is buggy, dev hsr_slave_1 [ 574.070187] protocol 88fb is buggy, dev hsr_slave_0 [ 574.075367] protocol 88fb is buggy, dev hsr_slave_1 15:24:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x8001, &(0x7f00000014c0)="11dca5055e0bcfec7be070") openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/attr/current\x00', 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x201, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRES64=r0], 0x1}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x40) nanosleep(&(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) tkill(r1, 0x6) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x10) tkill(r1, 0x17) ptrace$cont(0x18, r1, 0x0, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x49a, 0x10000) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000240)={0x8, {{0xa, 0x4e24, 0x100000000000, @remote}}, 0x0, 0x3, [{{0xa, 0x4e24, 0x1, @mcast1, 0x20}}, {{0xa, 0x4e23, 0x4, @mcast2}}, {{0xa, 0x4e22, 0x7b5, @mcast2, 0xfff}}]}, 0x210) ptrace$setregs(0xf, r1, 0x0, &(0x7f0000000180)="d0c3527bfcd56fca04fdaa27ed7a79886e7be8d2fe15e83391e5f9ba204d09fae63da8e7261814fe763f08c4c95196555e483824fae6d23e0fc0c72c8d539569a3b74222455a7753b24658ed87ede4ef8abff45098304dc16202c0814a4a1e9de3") r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ptrace$cont(0x9, r1, 0x0, 0x0) 15:24:11 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008915, &(0x7f0000000380)="0000b7bace99dd03e19a70e80a910000006e0700000092718c47666a577dde1162cfc5008e884409e8fd1db12ce19e8a1239d1e41d1c1da0106438aa09e0122db3d52e30e3098dd8e490c0071a200657f088b79d6249807ad9f7ef25c90e93531834b01b10ddda90cf0f3e4c9279d4a687ccafacb4f4d89a2d348939ee36653b827b8ba252b2679a95363796c138b7d049b7cf52c5e82d28ee065c94764a34b1f1f6526c73fcd838655ef634bd38e8781982e0") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x181002, 0x0) inotify_init() clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) mq_timedreceive(r1, &(0x7f0000000240)=""/162, 0xa2, 0x80000001, &(0x7f00000001c0)={r2, r3+30000000}) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f0000000140)={0x7b, 0x2, [0x4c35, 0x2, 0x4000008c, 0x40000000], [0xc1]}) r5 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x2, 0x12000) accept$alg(r1, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r5, 0x28, &(0x7f0000000040)}, 0x10) 15:24:11 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000db6000/0x2000)=nil, 0x2000, 0x1000000, 0x22011, r0, 0x0) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) 15:24:11 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x80040) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:24:11 executing program 2 (fault-call:0 fault-nth:10): syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb7fc86d4f66732e66617400020341000500077008f8", 0x16}], 0x8000, 0x0) 15:24:11 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x420040) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f0000000080)={0x8, 0xe426, 0x101}) bind$rose(r1, &(0x7f0000000580)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}}, 0x7, 0x1}, &(0x7f00000002c0)=0x90) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000340)={0x0, 0x3ff, 0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)=0x14) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000004c0)={r1, r1, 0x6, 0xe2, &(0x7f00000003c0)="3613e7065b257b75eaf07dfb7f49e1d48925f154ec2042ce8fdcdbb99847ab90be1023abcb5d46312d63b098aecbc5d1ebf7d3b7d1393206a7929607d68e2eb93384bc63bcfa006d3bf4645f650c21f9df627a44d3468f0f0842cef638bb7735644a637256456b963001a8d23eedf36042e20abb09397d95e4f16b919012aa90aa72a9d3a131379a0962d14aa49d3e0f525ad23017200365b2dc1997adee894c578598594589bbab5ee7b611e50090a041204eb4c5ab413d17ca2718b6051833ead432e43163df2f5b9fd7c7f8894fb8fbc24760c13e79e8b5d04e2297f0bae156ea", 0xfffffffffffffff8, 0x9, 0x7, 0x8, 0xfff, 0x3, 0x6, 'syz0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'veth1\x00', 0x2000}) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000000c0)={r2, 0x678, 0x6, 0x4}, &(0x7f0000000300)=0x152) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000180)={r3, 0x2}, &(0x7f00000001c0)=0x8) bind$tipc(r1, &(0x7f00000005c0)=@id={0x1e, 0x3, 0x0, {0x4e23, 0x1}}, 0x10) 15:24:11 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x8, 0x11, r0, 0x8000000) 15:24:11 executing program 0: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000014c0)="11dca5055e0bcfec7be070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000620920144f88cd8bf8fa050030cea0e283d9b22703305b8fe23074bc015a41200581e5ef57c5000000000000000bcbb61c10b1f4451c"], 0x1}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x6, 0x80) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000180)=""/109) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 15:24:11 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000001c0)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0)="f7a1093021df3e651029e88b8cdf22c242d1fe7d99d99ce8cd073c5bc68aab31b07f7cf239eb406fe8dfbd9056088a5f1db5f61f4c3f4b9db3c033458efb6e997e0ff7c12c43ccf1fe7e3cfe3f67d8a2c649d9bdfe81e90c284475c31c15df86384ceeaa503f87cdb14e29c56b4d48865f71be812e9597dd6cbcee80ae949ec8513a01", 0x83, r0}, 0x68) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) close(r1) [ 574.488517] FAULT_INJECTION: forcing a failure. [ 574.488517] name failslab, interval 1, probability 0, space 0, times 0 15:24:11 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) r1 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x3, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x2, 0x7}}, 0x20) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x28300, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {&(0x7f00000000c0), r2, r3}}, 0x18) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000200)) close(r0) [ 574.584255] CPU: 1 PID: 13733 Comm: syz-executor.2 Not tainted 4.14.125 #19 [ 574.591548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 574.600921] Call Trace: [ 574.603535] dump_stack+0x138/0x19c [ 574.607286] should_fail.cold+0x10f/0x159 [ 574.611633] should_failslab+0xdb/0x130 [ 574.615679] kmem_cache_alloc+0x2d7/0x780 [ 574.619843] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 574.625317] ? check_preemption_disabled+0x3c/0x250 [ 574.630373] selinux_file_alloc_security+0xb4/0x190 [ 574.635584] security_file_alloc+0x6d/0xa0 [ 574.639949] get_empty_filp+0x130/0x3b0 [ 574.644128] path_openat+0x8f/0x3f70 [ 574.647871] ? trace_hardirqs_on+0x10/0x10 [ 574.652146] ? check_preemption_disabled+0x3c/0x250 [ 574.657874] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 574.665788] ? find_held_lock+0x35/0x130 [ 574.670080] ? save_trace+0x290/0x290 [ 574.673912] ? __alloc_fd+0x1d4/0x4a0 [ 574.677731] do_filp_open+0x18e/0x250 15:24:11 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000)=0x7ff, &(0x7f0000000040)=0x4) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) 15:24:11 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000000)={0x0, @aes256, 0x1, "cd89f3178ada6413"}) [ 574.681556] ? may_open_dev+0xe0/0xe0 [ 574.685396] ? lock_downgrade+0x6e0/0x6e0 [ 574.689578] ? _raw_spin_unlock+0x2d/0x50 [ 574.693742] ? __alloc_fd+0x1d4/0x4a0 [ 574.697573] do_sys_open+0x2c5/0x430 [ 574.701313] ? filp_open+0x70/0x70 [ 574.704895] ? fput+0xd4/0x150 [ 574.708115] ? SyS_pwrite64+0xca/0x140 [ 574.712384] SyS_open+0x2d/0x40 [ 574.715700] ? do_sys_open+0x430/0x430 [ 574.715716] do_syscall_64+0x1e8/0x640 [ 574.715726] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 574.715743] entry_SYSCALL_64_after_hwframe+0x42/0xb7 15:24:11 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) accept(r0, &(0x7f0000000040)=@caif, &(0x7f0000000140)=0x80) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x1010, r1, 0x0) [ 574.715764] RIP: 0033:0x4131b1 [ 574.723591] RSP: 002b:00007f46a6886a80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 574.723604] RAX: ffffffffffffffda RBX: 0000000020000068 RCX: 00000000004131b1 [ 574.723609] RDX: 00007f46a6886b0a RSI: 0000000000000002 RDI: 00007f46a6886b00 [ 574.723615] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 574.723621] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000004 [ 574.723627] R13: 00000000004c8326 R14: 00000000004deb88 R15: 0000000000000003 15:24:11 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) recvfrom$netrom(r0, &(0x7f0000000180)=""/184, 0xb8, 0x2, &(0x7f0000000240)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1}, [@null, @default, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null]}, 0x48) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x14, r0, 0x8000000) [ 574.799895] kobject_add_internal failed for hci1 (error: -2 parent: bluetooth) [ 574.817357] Bluetooth: Can't register HCI device 15:24:11 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) [ 574.829300] audit: type=1400 audit(1560525851.461:64): avc: denied { map } for pid=13769 comm="syz-executor.5" path="/dev/kvm" dev="devtmpfs" ino=29 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:kvm_device_t:s0 tclass=chr_file permissive=1 15:24:11 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$SIOCX25GFACILITIES(r0, 0x89e2, &(0x7f00000001c0)) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xfffffffffffffffc, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) write$P9_RLERRORu(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="370200000702000e0200000000000000726164696f230009000000"], 0x1b) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) fcntl$lock(r0, 0x25, &(0x7f0000000180)={0x1, 0x3, 0x3, 0xa2e, r1}) 15:24:11 executing program 2 (fault-call:0 fault-nth:11): syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb7fc86d4f66732e66617400020341000500077008f8", 0x16}], 0x8000, 0x0) 15:24:11 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) 15:24:11 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) [ 575.100803] kvm [13791]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 [ 575.132882] kvm [13791]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 15:24:14 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$TIOCMGET(r0, 0x5415, &(0x7f00000003c0)) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000e14000/0x4000)=nil, 0x4000, 0xffffffffffffffff, 0x11, r0, 0x8000000) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f00000001c0)=0x7) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1e1c, 0x121800) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000240)={{{@in, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6}}, &(0x7f0000000180)=0xe8) getsockopt$sock_buf(r2, 0x1, 0x1a, &(0x7f0000000400)=""/109, &(0x7f0000000480)=0x6d) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f00000004c0), &(0x7f0000000500)=0x4) bind(r1, &(0x7f0000000340)=@hci={0x1f, r3, 0x2}, 0x80) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, &(0x7f0000000040)) ioctl$VT_GETMODE(r2, 0x5601, &(0x7f0000000540)) 15:24:14 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x4001) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:24:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x7, &(0x7f00000014c0)="11dca5055e0bcfec7be070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000620920144f88cd8bf8fa050030cea0e283d9b22703305b8fe23074bc015a41200581e5ef57c5000000000000000bcbb61c10b1f4451c"], 0x1}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x3, 0x0) 15:24:14 executing program 2: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x1, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="c1da8679fdc2589b8e982a18dcc35cd43ef72e43ce59713e4fcfdc8d41ae66b8850e0ce0330ae21c0ef92c538b6555f127bf822dffcff17f992ea16c2d2beafc99c70e2d049d4a9b4de5485716fa5743b0d40304", 0x54, 0x4}], 0xfffffe, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x8000, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(r0, 0xc0385650, &(0x7f0000000180)={{0x3, @name="99848aa973dd1210d5716398f6cd8c674676c0c3dd4d31a6b03f40f33e150579"}, 0x8, 0x101, 0x10000}) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x8) 15:24:14 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0xfffffffffffffffe) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:24:14 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x800, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r3, 0x118, 0x1, &(0x7f00000000c0)=0xfffffffffffffff9, 0x4) ioctl$TIOCLINUX2(r3, 0x541c, &(0x7f0000000080)={0x2, 0x9, 0x7, 0x100000001, 0x2, 0x2}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 15:24:14 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) uname(&(0x7f0000000240)=""/42) close(r0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@multicast1}}, &(0x7f00000001c0)=0xe8) ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000200)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, r2}) 15:24:14 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000017c0), &(0x7f0000001800)=0x8) ioctl$DRM_IOCTL_MAP_BUFS(r1, 0xc0186419, &(0x7f0000001780)={0xa, &(0x7f00000000c0)=""/112, &(0x7f0000001680)=[{0x5, 0xbc, 0x7, &(0x7f0000000140)=""/188}, {0x8, 0x2b, 0x9, &(0x7f0000000200)=""/43}, {0x0, 0xab, 0x78f, &(0x7f0000000240)=""/171}, {0x8769, 0xd1, 0x101, &(0x7f0000000300)=""/209}, {0x1f20, 0x11, 0x0, &(0x7f0000000400)=""/17}, {0x6, 0x1000, 0x20000000, &(0x7f0000000440)=""/4096}, {0x0, 0xd1, 0x6, &(0x7f0000001440)=""/209}, {0x3, 0x12, 0x55, &(0x7f0000001540)=""/18}, {0x40, 0x58, 0x9, &(0x7f0000001580)=""/88}, {0xfffffffffffffffe, 0x6b, 0x400, &(0x7f0000001600)=""/107}]}) 15:24:14 executing program 2: 15:24:14 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) fcntl$setown(r0, 0x8, r1) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) 15:24:14 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r1, &(0x7f00000000c0)="aa34ee8549d3a36a3d8dc0c4b388bc64f8035ce782ffcedf45b983b9a87dc4860eb51baf4f85c61b3951647ee4e85ed8c97cf4323a253c1527254eeab18a8101912f864c2053907861473083725123f1a1eac94de902b473358629736087df2152470e5a527a4e733eb402051e4ef87c23d9c4632baf85495e8dd666673628f7489cd4e031fdc9788bedde6c5963227f662b0b85337042324270da475e915177ea0fdcda3566e6db090eef65eb1e930c29f132c89d7bbeeb302a45379f75e220d3c039b0147e48d752bd9125fa52189b611581619bf78561b44d97090ff9bff48d15d124b04e0115309deee79f69a8a169c2f90c0dd8432d"}, 0x10) close(r0) 15:24:14 executing program 2: syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x7ff, 0x1, &(0x7f0000000000)=[{&(0x7f0000000180)="eb7fc86d4f66732e664374077008f8c4dedbfc5f11d7dbbbc47bfacd7e5be09f920fac496abab1e7ef204cd2f250d7195e43b8f8464f244146f815759ca56879fcc1c93fa97aae468776995b00000000000000", 0x53, 0x2}], 0x8000, 0x0) 15:24:14 executing program 5: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000140)={0x10200, 0x3, 0xf000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$PPPIOCCONNECT(r1, 0x4004743a, &(0x7f0000000080)=0x1) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) 15:24:14 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000100)={0x1, 0x70, 0x5, 0x7, 0x9d8a, 0x0, 0x0, 0x0, 0x80200, 0x2, 0x1, 0x5, 0xffffffffffffff67, 0x81, 0x7, 0x3, 0xfdc, 0xd3d, 0x8, 0x0, 0x6, 0x6, 0x6, 0x1, 0x7, 0x7, 0x6, 0x1f, 0xff, 0x7fffffff, 0xfff, 0x1, 0x0, 0x1000000000, 0x3f, 0xff, 0x2, 0x8, 0x0, 0x5, 0x2, @perf_bp={&(0x7f00000000c0), 0x4}, 0x10000, 0xff, 0x3, 0x3, 0x6, 0x1, 0xe6e}) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000180)=""/66) close(r0) [ 577.852650] kvm [13844]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 [ 578.230123] net_ratelimit: 22 callbacks suppressed [ 578.230128] protocol 88fb is buggy, dev hsr_slave_0 [ 578.240200] protocol 88fb is buggy, dev hsr_slave_1 [ 578.470192] protocol 88fb is buggy, dev hsr_slave_0 [ 578.475297] protocol 88fb is buggy, dev hsr_slave_1 [ 579.190169] protocol 88fb is buggy, dev hsr_slave_0 [ 579.195270] protocol 88fb is buggy, dev hsr_slave_1 [ 579.510207] protocol 88fb is buggy, dev hsr_slave_0 [ 579.515352] protocol 88fb is buggy, dev hsr_slave_1 [ 579.590173] protocol 88fb is buggy, dev hsr_slave_0 [ 579.595334] protocol 88fb is buggy, dev hsr_slave_1 15:24:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000014c0)="11dca5055e0bcfec7be070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000620920144f88cd8bf8fa050030cea0e283d9b22703305b8fe23074bc015a41200581e5ef57c5000000000000000bcbb61c10b1f4451c"], 0x1}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x2, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) r2 = gettid() openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x40, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x17) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 15:24:17 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r0, 0xc, 0x2}, 0x14) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) 15:24:17 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x400, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x1fd) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000140)) 15:24:17 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) open$dir(&(0x7f0000000080)='./file0\x00', 0x4100, 0x8) close(r0) 15:24:17 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x2001, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000000c0)={0x7, 0x4d, 0x1}, 0x7) close(r0) close(r0) 15:24:17 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0xffffffffffffffff) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) 15:24:17 executing program 2: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb7fc86d4f66732e66617400020341000500077008f8", 0x16}], 0x8000, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000180)={0x0, 0x1}) 15:24:17 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) socket$unix(0x1, 0x2, 0x0) 15:24:17 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x40000, 0x0) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000180)) 15:24:17 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/checkreqprot\x00', 0x54043, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) write$sndseq(r1, &(0x7f00000003c0)=[{0x800, 0x4f0, 0x10001, 0x7, @time={r2, r3+30000000}, {0x1963, 0x5c0}, {0x3, 0x3}, @control={0x3, 0x6, 0x31}}, {0x10001, 0xfffffffffffffff8, 0x8, 0xfc1, @time={r4, r5+30000000}, {0x40000, 0x4}, {0x8, 0x7}, @raw8={"3b2134929f79d7b71bf5de96"}}], 0x60) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x0, 0x1c9c380}) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x400040, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000140)={0x0, 0xfffffffffffffffe}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f0000000240)={r9, @in6={{0xa, 0x4e24, 0xfffffffffffffffa, @loopback, 0x5}}, 0x6, 0x80000001}, &(0x7f00000001c0)=0x90) r10 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r10, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) 15:24:17 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:24:17 executing program 2: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb7fc86d4f66732e66617400020341000500077008f8", 0x16}], 0x8000, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) r1 = add_key(&(0x7f0000000000)='cifs.spnego\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)="9188d15d13cc7ca47b9f99a6a5043fbe4faa4e388b5955fb0b378e5ddc5918c0cc515f589c8c30de8d12b36999db2f5eb9c00bd08b3d4be94162aea20a46e1fafe957836a9a48f9eebcae2abcdd25d51b8c934e8db7ec6f81fcca1d62edba6824fc6371f181c5d", 0x67, 0xfffffffffffffffb) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000280)={0x0, 0xf8, "674766c9a22388c203aa984a0768d2c4382bbbcccf2e6b11436569b9d866249b57da3949b18b3b5c3661a09bda5a41212b1b94d741f60f421d13481beaf16632851517d096a81adad393ce58e19bd20bd741b2fdd4301515e5a9ba67e5f9a0351ac7ce7d64949beb6b99f5dc591c93638ee205079b8281d0e9260f5f071edef64f5394d38003ce59ab7e0f78d4c733bccc9927f34c9939793ca85dc444cfe6eaaf337b538f5c697f9129b19b8fa22ffbf2b03e5fe5a9b94c25b0f779b3134ef0850026cce384a8ba82727d1661af75ec3f0b06f5317ef93fc36ae80278ceef02b86821172e3791c44c3c7bfbc0d921fe135989db4ab4c7e3"}, &(0x7f0000000380)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000003c0)={0xc6c4, 0x6, 0x6, 0x7fffffff, 0x3, 0x634, 0x8, 0x2, r2}, &(0x7f0000000400)=0x20) keyctl$describe(0x6, r1, &(0x7f00000001c0)=""/129, 0x81) [ 580.884009] kvm [13900]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 [ 583.350163] net_ratelimit: 18 callbacks suppressed [ 583.350170] protocol 88fb is buggy, dev hsr_slave_0 [ 583.360367] protocol 88fb is buggy, dev hsr_slave_1 15:24:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000014c0)="11dca5055e0bcfec7be070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000620920144f88cd8bf8fa050030cea0e283d9b22703305b8fe23074bc015a41200581e5ef57c5000000000000000bcbb61c10b1f4451c"], 0x1}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() restart_syscall() fcntl$getown(r0, 0x9) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0xfffffffffffffffe, 0x0) 15:24:20 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000000)={0x8, "ec9e6126d2a8d05793785aff2752856d2559740cdc2dbe943b82133444326721", 0x7, 0x100, 0x8, 0x7, 0x4, 0x3, 0x10001, 0x7ff}) getpeername$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000001c0)=0x10) 15:24:20 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x200002, 0x0) close(r0) 15:24:20 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhci\x00', 0x400) write$vhci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="024fe659fd9ba5d01dd9e9754c2e66eebb355fd639e97df1570aca0443c811c5415ff55e54cee99d6a9b9bf6405b0d5d24f8cbb69367be1e6412e3ad4cc6a454f48c033a5eed3480e978775f9a271e7915abbedf603c001d05900467f5874caa1e2108d349a18700da2da1344deef0c47a98ed8216681a4015672d399316d224e89cb13da81c705c397ee6d22f0228c9782f861475868716199f3f16e0d838e640dc7781f029e3f14b03b5b295f391b263a68943000130f676fcd860e21f8561"], 0xfffffffffffffef3) close(r0) 15:24:20 executing program 2: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb7fc86d4f66732e66617400020341000500077008f8", 0x16}], 0x8000, 0x0) uselib(&(0x7f0000000000)='./file0\x00') 15:24:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="11daa5055e04001d6ce070b306aa75e81e8ec632facf7f334414b1082c4abe305e40a74c15093353000000") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x40040, 0x0) ioctl$TIOCOUTQ(r4, 0x5411, &(0x7f00000001c0)) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x14000, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x4) ioctl$TIOCMBIS(r5, 0x5416, &(0x7f0000000080)=0x9) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) 15:24:20 executing program 2: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb7fc86d4f66732e66617400020341000500077008f8", 0x16}], 0x8000, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x86fca6448a896a39, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) r1 = dup(r0) write$9p(r1, &(0x7f0000000000)="a049ab2139e9c6ec4ae597f393f45fe720aa9f5d5145dd0c669578df62fd9e8ff6f2399ac9b9620555e6290c2dcc32", 0x2f) 15:24:20 executing program 1: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x4000, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, 0xffffffffffffffff, 0x8000000) socket$netlink(0x10, 0x3, 0x1f) r2 = syz_open_dev$vcsa(&(0x7f0000000240)='/dev/vcsa#\x00', 0x1000000080000009, 0x80041) ioctl$SNDRV_TIMER_IOCTL_STATUS(r2, 0x80605414, &(0x7f0000000180)=""/112) [ 583.664022] Unknown ioctl 21521 [ 583.670184] protocol 88fb is buggy, dev hsr_slave_0 [ 583.675394] protocol 88fb is buggy, dev hsr_slave_1 [ 583.685784] kvm [13916]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 15:24:20 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:24:20 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x80000001, 0x10000) write$FUSE_INIT(r1, &(0x7f00000000c0)={0x50, 0x0, 0x8, {0x7, 0x1f, 0x3, 0x1000, 0x9, 0x7, 0x80, 0x7da}}, 0x50) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) fcntl$setpipe(r1, 0x407, 0x5) [ 583.750139] protocol 88fb is buggy, dev hsr_slave_0 [ 583.755299] protocol 88fb is buggy, dev hsr_slave_1 15:24:20 executing program 2: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb7fc86d4f66732e66617400020341000500077008f8", 0x16}], 0x8000, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x92c, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x5}}, 0x3ff}}, 0xdf6, 0x5}, &(0x7f00000001c0)=0x90) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000200)={r1, 0x6, 0x30}, 0xc) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000240)={'security\x00', 0x3, [{}, {}, {}]}, 0x58) [ 583.849433] Unknown ioctl 1074310793 15:24:20 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'nr0\x00', 0x1}, 0x18) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) [ 583.940008] vivid-000: ================= START STATUS ================= [ 583.986770] vivid-000: FM Deviation: 75000 [ 583.993455] vivid-000: ================== END STATUS ================== [ 584.007202] vivid-000: ================= START STATUS ================= [ 584.014279] vivid-000: FM Deviation: 75000 [ 584.018544] vivid-000: ================== END STATUS ================== [ 584.150180] protocol 88fb is buggy, dev hsr_slave_0 [ 584.155327] protocol 88fb is buggy, dev hsr_slave_1 [ 584.470229] protocol 88fb is buggy, dev hsr_slave_0 [ 584.475417] protocol 88fb is buggy, dev hsr_slave_1 15:24:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000014c0)="11dca5055e0bcfec7be070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000620920144f88cd8bf8fa050030cea0e283d9b22703305b8fe23074bc015a41200581e5ef57c5000000000000000bcbb61c10b1f4451c"], 0x1}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x30) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x40, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)={0x0, 0x74, "12b40d889e3aa483e1df596da46c63207db74dfc5b4bc9810911ab3dc29d5da87a9973255c96aec6f48da1489320da0449776c60465ccf51c25ea500c32319ab388a4c748bb53c9c778042dc7c5f5cfa7b312b1fc162c34cb9a9af7d603f15a83f3a0feea59be0e6a55a78a457c510f84c6b061f"}, &(0x7f0000000080)=0x7c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000200)={r3, @in={{0x2, 0xff, @multicast2}}, 0x8, 0x4, 0x2, 0x8001, 0x7}, &(0x7f0000000100)=0x98) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 15:24:23 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) creat(&(0x7f0000000080)='./file0\x00', 0x10) 15:24:23 executing program 3: write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(0xffffffffffffffff) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x800, 0x0) write$P9_RVERSION(r0, &(0x7f0000000080)={0x15, 0x65, 0xffff, 0x9, 0x8, '9P2000.L'}, 0x15) 15:24:23 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0xfffffffffffffffd, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fcntl$getflags(r1, 0x40b) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c, 0x7], [0xc1]}) 15:24:23 executing program 2: r0 = semget(0x3, 0x0, 0x80) semctl$SEM_INFO(r0, 0x4, 0x13, &(0x7f0000000280)=""/196) syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb7fc86d4f66732e66617400020341000500077008f8", 0x16}], 0x8000, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/checkreqprot\x00', 0x4001, 0x0) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000100)) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000180)={0x0, 0x80000001, 0x7fffffff, 0x732746c9, 0xc7, 0xfffffffffffffff8, 0x1, 0xff, {0x0, @in={{0x2, 0x4e23, @multicast2}}, 0x1, 0x3, 0x3}}, &(0x7f0000000000)=0xb0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000240)={r2, 0x0, 0x1, [0x7]}, 0xa) arch_prctl$ARCH_SET_GS(0x1001, 0x1) 15:24:23 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000000)) 15:24:23 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xffffffffffffffff, 0x181005) connect$netrom(r1, &(0x7f0000000000)={{0x3, @null, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null]}, 0x48) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x0, 0x3}) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3, 0x0) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x8, 0x80) 15:24:23 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@ipv4={[], [], @multicast2}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@ipv4}}, &(0x7f0000000280)=0xe8) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f00000002c0)={@mcast2, 0x22, r2}) 15:24:23 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0xfffffffffffffffe) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x0, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000080), &(0x7f0000000140)=0x4) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) 15:24:23 executing program 2: syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7fd, 0x1, &(0x7f0000000000)=[{&(0x7f0000000100)="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", 0x108}], 0x8000, 0x0) 15:24:23 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) close(r0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setns(r1, 0x22000000) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000080)) accept$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14) sendto$packet(r2, &(0x7f0000000100)="89afecd2ce7613c8406d40cc1c2023f56d34afd9aca40eff2d140a2625224b0e256d6ba58212b7c14c11d79c887e78f9aeec734858ec9699fb8ff95ec59a816ac5ce6023aa6720805cd62b494af7130109c15322e9f1b2960db2eda49b73654a3b4530708810877c36cc0bd049", 0x6d, 0x40, &(0x7f0000000200)={0x11, 0xff, r3, 0x1, 0x6, 0x6, @dev={[], 0x20}}, 0x14) 15:24:23 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x80, 0x0) pread64(r0, &(0x7f0000000240)=""/4096, 0x1000, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) [ 586.929689] audit: type=1400 audit(1560525863.562:65): avc: denied { map } for pid=14011 comm="syz-executor.1" path="/dev/full" dev="devtmpfs" ino=13687 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 [ 588.630196] net_ratelimit: 22 callbacks suppressed [ 588.630202] protocol 88fb is buggy, dev hsr_slave_0 [ 588.640403] protocol 88fb is buggy, dev hsr_slave_1 [ 588.870180] protocol 88fb is buggy, dev hsr_slave_0 [ 588.875387] protocol 88fb is buggy, dev hsr_slave_1 [ 589.590170] protocol 88fb is buggy, dev hsr_slave_0 [ 589.595309] protocol 88fb is buggy, dev hsr_slave_1 15:24:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000014c0)="11dca5055e0bcfec7be070") r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=0x0], 0x1}}, 0x3) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x17) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 15:24:26 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:24:26 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x400000, 0x0) ioctl$TCSETX(r1, 0x5433, &(0x7f0000000080)={0x9, 0x6, [0x7f, 0x8, 0x8001, 0x1ff, 0x140000000000000], 0xfffffffffffffffb}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) 15:24:26 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) recvmsg(r1, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1}, 0x10022) 15:24:26 executing program 2: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x80, 0x0) getsockopt$inet_dccp_buf(r0, 0x21, 0xc0, &(0x7f0000000200)=""/161, &(0x7f00000002c0)=0xa1) syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb7fc86d4f66732e66617400020341000500077008f8", 0x16}], 0x8000, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0}, &(0x7f0000000300)=0xc) sched_rr_get_interval(r1, &(0x7f0000000140)) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) 15:24:26 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0xb, 0x1, {0xc, @pix_mp={0x6, 0x80, 0x0, 0x8, 0x0, [{0x7, 0x1}, {0x1, 0x9}, {0x7fff}, {0x8001, 0x4}, {0x5, 0x3}, {0x0, 0x2000000}, {0x3, 0x40}, {0x0, 0x6}], 0x10001, 0x6, 0x1, 0x2, 0x4}}}) close(r0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xb8, r1, 0x811, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x64, 0x1, [@TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'ib', 0x3a, 'veth0_to_bridge\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ipddp0\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5b4d}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffffffffffff}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x26a8}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4048010}, 0x2004c041) rt_sigaction(0x36, &(0x7f0000000180)={&(0x7f0000000000)="0fba236cc461fe12cec4a1291613f7ea66420f3adfc1ee66420fe3c7c4a21d3d394487fcf0fe4b0ec481fb2d36", {0x1}, 0x10000000, &(0x7f0000000040)="66460f383b8c2a0d00000046710ac483654201e3daae42f634f646d0fff5c4e1285ed22e3636f3652e26f045819d4218d1e2e492e6f5f3ddcec42189d8e0"}, &(0x7f00000002c0)={&(0x7f0000000240)="c4e28db6bec8000000c4825197a5b2e010668f099897151e000000c4a2c9967300f01042063666450f65a6ec0000006436660ffbb5fdffff7fc4e15d603ddf38000065f2410f38f149e7c442c9403470", {}, 0x0, &(0x7f00000001c0)="c4c169762bf3f00fc12dfbffff7f0faea855be372a660f383044ee003e0f84aec37cd5c483f97c4d030ef246a72ef7b500008020780cd2d1"}, 0x8, &(0x7f0000000300)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000000), 0x4) recvmmsg(r2, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) sendto$inet6(r2, &(0x7f00000001c0)="b4", 0x1, 0x0, 0x0, 0x0) ioctl$PPPIOCSCOMPRESS(r0, 0x4010744d) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) 15:24:26 executing program 2: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0x803, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="eb7fc86d4f66732e66617400020341000500077008f876759033fc0c3ad3e62e326c235d522cf570084780b5127b9d41ceb5a6625f4c0c4bbf505b2262cb8bfa16c040dba106ee26402985cb015ff5995783619cdc9150ad02a299bd2fbcfc6b05c10d49c6a34ac1b40e7eea66d498c86ee3a1cde34822e1c19ea27c7eafe91066a4b55bab7ccb98b44fbef9c9895dfadd33e95ae3e4febccf350d4b7ad047af987df33c3f3d5860063fad3783bfce283189c438c556dd00"/193, 0xc1}], 0x8000, 0x0) 15:24:26 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) r1 = accept(0xffffffffffffff9c, &(0x7f0000000080)=@generic, &(0x7f0000000100)=0x80) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f0000000140)={0x400f, 0x3f, 0x7}) [ 589.748139] kvm [14024]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 15:24:26 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000080)={0x3, 0x10, [0x7fff, 0x100000001, 0x4, 0x800]}) syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x5, 0x220000) 15:24:26 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x80, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0x0, &(0x7f0000000080), &(0x7f0000000140)=0x4) 15:24:26 executing program 2: getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000100)=0x2a7) ioprio_set$pid(0x2, r0, 0xfc5) syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="eb7fc86d4f66732e66617400020341000500077008f8", 0x16}], 0x8000, 0x0) [ 589.920157] protocol 88fb is buggy, dev hsr_slave_0 [ 589.925311] protocol 88fb is buggy, dev hsr_slave_1 15:24:26 executing program 5: ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000300)={'nr0\x00', 0x5, 0xffff}) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000002c0)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000140)=0x101, 0x4) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) [ 589.990142] protocol 88fb is buggy, dev hsr_slave_0 [ 589.995421] protocol 88fb is buggy, dev hsr_slave_1 [ 590.087237] kvm [14066]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 [ 590.122846] kvm [14066]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 15:24:29 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) 15:24:29 executing program 2: syz_mount_image$vfat(&(0x7f00000003c0)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0x7ff, 0x3, &(0x7f0000000340)=[{&(0x7f0000000100)="5a052b195f0c38c1691dfcebcf7525b7b48f4225ffdf96989e600c47108408c4d8e69665d763000f0cf132ad1ce5ef596fcc26657b6270f11da72b08ca9900a43a96731eb099dfe747a693ea62113add8396528553e3023ad2c6410778129ba7b7f2c0e600b68ca2dbbed9b445f112524245baff27efa47ceb", 0x79, 0x2}, {&(0x7f0000000500)="1ca91930484672324c3afc2f839d11562a9b354488fcd81817cc6ae02602313cc90bd5d9ceaaf2f9f4f4d3dbcbd1bc0140ccc8171945c947006d2f43c9854f045f539fd1760ef529a400bc858d355a77d452adc712b91c353df2b92dc485c38664ba5d08077746dc7b9c14c6a89663acd9133456a5191e9460db37efef42c579304406cc6d72ce2ec71b403b8129f491088f7f333233121f0abf818feb20aed9fa4d4825d73ed3d334e5d68532155e13c66bc7391b8ab5186c99bec00556569d2a4e3f1a66c6cec352d59981be528b3889eb0b5d113d39153b88c0fcf1000000000000000000", 0xe6, 0x2}, {&(0x7f0000000600)="1ab366dbb0c832105ef3c54aa5a317e82fc72fc68b2ee8a4d00000000009000000e592f7e39a8c6b3b801361230200000000000000b9e2a61a845262bdb708dc91a9cb99e614b7c7a5653969188cabd8f0d733a83581b7549d57c3223e6d00dcb238171cb93d37bc", 0x68, 0x78a1}], 0x8000, 0x0) 15:24:29 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r1 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x0, 0x2) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r2, 0x28, 0x70bd29, 0x25dfdbff, {{}, 0x0, 0xb, 0x0, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", "", "", ""]}, 0x28}}, 0xc840) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000200), &(0x7f0000000240)=0x4) close(r0) 15:24:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000014c0)="11dca5055e0bcfec7be070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000620920144f88cd8bf8fa050030cea0e283d9b22703305b8fe23074bc015a41200581e5ef57c5000000000000000bcbb61c10b1f4451c"], 0x1}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x81, 0x3f) tkill(r1, 0x17) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 15:24:29 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x402000, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) close(r0) 15:24:29 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x8, @empty}, {0xa, 0x0, 0x0, @remote}, r3}}, 0x48) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x10000, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@random={'trusted.', '\xb0({\x00'}, &(0x7f0000000140)='*\x00', 0x2, 0x3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x8000, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) 15:24:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000014c0)="11dca5055e0bcfec7be070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000620920144f88cd8bf8fa050030cea0e283d9b22703305b8fe23074bc015a41200581e5ef57c5000000000000000bcbb61c10b1f4451c"], 0x1}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x3, 0x10000) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x9, 0x4}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000180)={r3, 0x1, 0xd0, 0x7}, &(0x7f00000001c0)=0x10) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 15:24:29 executing program 2: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x0, &(0x7f0000000040), 0x8000, 0x0) 15:24:29 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000240)=[@in={0x2, 0x4e21, @rand_addr=0xfff}, @in6={0xa, 0x4e23, 0x3, @rand_addr="bd24f58de90d4459bc3d146be2339ea2", 0xfffffffffffffffe}, @in={0x2, 0x4e20, @empty}, @in6={0xa, 0x4e24, 0x8, @ipv4={[], [], @remote}, 0x102}, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e23, @broadcast}], 0x98) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) 15:24:29 executing program 2: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb7fc86d4f66732e66617400020341000500077008f8", 0x16}], 0x8000, 0x0) r0 = pkey_alloc(0x0, 0x2) pkey_free(r0) 15:24:29 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1a, 0x200900) sendto$rose(r1, &(0x7f00000000c0)="47e24b560ee44f2df2a758b4f1297c2ee928e332730658b4e725b1cbb74d8456013689abcc9a498cdab587c798627bd4a14b584ac074ef050ec8e1ea2cd81ddca1bcca64e4f22c0b89387427bd9fa448bbaa232bdaa9319adffea0e74408c637d47d42d49b873c5bd2e7465f49091f526b6b02cf547c6229a9e5fc4c5d5c4bb3d12f583c57e2a199b13fab4102f32036f74f4831cb29fade1a6dc885b64fc525dfbec5b1ef6e25332e3741e7d6c0840cee529998ebd158880af174cd5b1feb0d8d6692652063b9bad7a80fe9c386a911c20988", 0xd3, 0x0, &(0x7f00000001c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @null]}, 0x40) r2 = semget(0x3, 0x3, 0x42) getresgid(&(0x7f0000000380), &(0x7f0000000340), &(0x7f0000000300)) semctl$SETVAL(r2, 0x7, 0x10, &(0x7f0000000080)=0x72d8) close(r0) [ 592.877555] kvm [14080]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 15:24:29 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) syz_open_procfs$namespace(r1, &(0x7f0000000200)='ns/user\x00') r2 = creat(&(0x7f0000000180)='./file0\x00', 0x120) ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc004ae02, &(0x7f00000001c0)={0x1, [0x0]}) ioctl$TIOCSCTTY(r2, 0x540e, 0x7f) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/user\x00', 0x2, 0x0) 15:24:29 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x4, 0x8053, r0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2) 15:24:29 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x38000, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2711, @hyper}, 0x10) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) 15:24:29 executing program 2: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer2\x00', 0x10001, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000540)='./file0\x00', 0x1, 0x81) r1 = accept4$unix(r0, &(0x7f0000000480)=@abs, &(0x7f0000000500)=0xffffffffffffffed, 0xfffffffffffffffc) accept(r1, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000280)=0x80) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) ioctl$TCGETS2(r2, 0x802c542a, &(0x7f0000000100)) syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb7fc86d4f66732e66617400020341000500077008f8", 0x16}], 0x8000, 0x0) 15:24:29 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0xffff, 0x20000) connect$netrom(r1, &(0x7f00000000c0)={{0x3, @null, 0x1}, [@null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) close(r0) 15:24:29 executing program 3: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vfio/vfio\x00', 0x400, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x109000) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000000c0)={{0x100000, 0xf004, 0x4, 0x4, 0x8, 0x7fff, 0x1, 0x9e8, 0x9, 0x3, 0x6, 0x100000000}, {0xd003, 0xf000, 0x9, 0x5, 0xb40, 0x7, 0x9, 0x3, 0x7ff, 0x4, 0x39da, 0x9102}, {0x4001, 0x1000, 0xa, 0x8328, 0xe46, 0x101, 0x5, 0xd116, 0x7, 0xffffffff, 0x3, 0x2}, {0xd000, 0xd002, 0xb, 0x81, 0x100000001, 0x55, 0x2, 0x5, 0x5, 0x6, 0x75}, {0x4, 0x7000, 0xf, 0x3, 0x0, 0x10000, 0x401, 0x2, 0x2, 0x4, 0x5, 0x8}, {0x1000, 0xf000, 0x1a, 0x10001, 0x7fff, 0x80, 0x8, 0x4, 0x8, 0x7, 0xe3, 0x20}, {0x1000, 0xf001, 0xc, 0xe34, 0x1, 0x7fff, 0x0, 0x8, 0x20, 0x1, 0x5, 0x7}, {0xd002, 0x1004, 0x0, 0x5, 0x5, 0x9, 0x7fffffff, 0x1, 0x6, 0x9, 0x3f, 0xffff}, {0xf000}, {0x5000, 0x1002}, 0x10000, 0x0, 0x7002, 0x18, 0x0, 0x2000, 0x1f001, [0x7f, 0x8001, 0xfff, 0x52]}) close(r1) set_tid_address(&(0x7f0000000240)) write$P9_RSTATFS(r0, &(0x7f0000000340)={0x43, 0x9, 0x1, {0x9, 0x6, 0x1, 0x9, 0x9, 0x80, 0x5, 0x1000, 0x89}}, 0x43) setsockopt$inet6_buf(r0, 0x29, 0x7f, &(0x7f0000000280)="14de4a10cd9dc429a423f346eb057ceb232966332c1edb0b752ddc4070ef524772b7931abcfd6494920575b640ff", 0x2e) 15:24:29 executing program 1: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) fgetxattr(r0, &(0x7f0000000040)=@random={'system.', 'lo[\x00'}, &(0x7f0000000180)=""/37, 0x25) fcntl$getownex(r0, 0x10, &(0x7f00000001c0)={0x0, 0x0}) r2 = getpid() kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000240)={r0, r0, 0xfffffffffffffffc}) r3 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r3, 0x8000000) [ 593.084274] kvm [14126]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 [ 593.750164] net_ratelimit: 18 callbacks suppressed [ 593.755173] protocol 88fb is buggy, dev hsr_slave_0 [ 593.760363] protocol 88fb is buggy, dev hsr_slave_1 [ 594.070188] protocol 88fb is buggy, dev hsr_slave_0 [ 594.075365] protocol 88fb is buggy, dev hsr_slave_1 [ 594.150151] protocol 88fb is buggy, dev hsr_slave_0 [ 594.156704] protocol 88fb is buggy, dev hsr_slave_1 [ 594.550132] protocol 88fb is buggy, dev hsr_slave_0 [ 594.555251] protocol 88fb is buggy, dev hsr_slave_1 [ 594.870193] protocol 88fb is buggy, dev hsr_slave_0 [ 594.876233] protocol 88fb is buggy, dev hsr_slave_1 15:24:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000014c0)="11dca5055e0bcfec7be070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000620920144f88cd8bf8fa050030cea0e283d9b22703305b8fe23074bc015a41200581e5ef57ade43d3c5ed7eec30bcbb61c10b1f4451c39d0369430ab438604e7933778f5484c9ee503ebf1efd4dddc4de791afefb93ddfdfd5ee6e58fe9bbeafd43c36dea4a358b1b63866467db13de90f2b77a78d1d6be4df7ee02f5d3d956b00cfe192c4aa37e4b85f03e271"], 0x1}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 15:24:32 executing program 2: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb7fc86d4f66732e66617400020341000500077008f8", 0x16}], 0x8000, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_icmp_raw(0x2, 0x3, 0x1) stat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETGROUP(r0, 0x400454ce, r1) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x150, r2, 0x0, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x38, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1c}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x47}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe26}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6308}]}, @TIPC_NLA_LINK={0x58, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x93a}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8001}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x8804}, 0x4000000) 15:24:32 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') ioctl$EVIOCSABS2F(r3, 0x401845ef, &(0x7f0000000080)={0x238debe6, 0x1, 0x1, 0x80, 0xff, 0x101}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) 15:24:32 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x810, r0, 0x0) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0xc0080, 0x0) setsockopt(r1, 0x1f, 0xfff, &(0x7f0000000180)="0b79db661b1b3ee5b11450c4f2b2a569f8a406d6e434a2059f167359981dc737757fb9bf542320b564187a0d93fea59877d44f4f62d8b3f9de9f3479a0b06e0401ba8a7fcdad2c7db3b62d3cf80a28f0aaf58eaa12704e305787040b62fe2b110977c415e593bf9f074458105bc0b4d9bda1a0d1911347e068a6c67095195533520a638485ae811fb04582f6315ef52e1501876e257961e6aed5bdff34e816e21611d42c6e5428ac846372d5105a7e98f9d6e43ef80cfe7b6d60cd24fd69860a37f0bc7d4c2df6b1d8a880e137b6921dfe", 0xd1) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x101000, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 15:24:32 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) 15:24:32 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_DQEVENT(r1, 0x80885659, &(0x7f00000000c0)) 15:24:32 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0xa2040, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000026bd86a85c7000ffdbdf251483ff00000000fcae14e759fcd0adfac4000000c66402000800e2ff"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4080) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0x6, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a4a000/0x2000)=nil, 0x2000, 0xffffffffffffffff, 0x10, r0, 0x80000000) 15:24:32 executing program 2: syz_mount_image$vfat(&(0x7f0000000680)='vfat\x00', &(0x7f0000000540)='./file0\x00', 0x803, 0xe2d, &(0x7f0000000580), 0x5002000, 0x0) syz_mount_image$ceph(&(0x7f0000000040)='ceph\x00', &(0x7f0000000080)='./file0\x00', 0x1, 0x6, &(0x7f0000000480)=[{&(0x7f0000000280)="d01410c20165f86a6e82f0df2b75719b1a878ad12fc080090d2e0130ae8debec748b769491e26214f21f4ccf88f61484ab47c978107bb1b84e7f3fc88932ec5184880453e6bfbbb0c27ba000cb868193052cf629c82a8cdefe3350557e89e2dbe9a7d8a0231ac56afe43f262c7df973245a129eca1a6fe5da13f76c5f5995824bac277014e431c1fe74d0a1d08e464f3e3bfc6048f8b00ca01cc1598d54ada3856ad4ffd50cf408c8a952f13df1ff63119", 0xb1, 0x4}, {&(0x7f00000000c0)="9d97ea2122bdc4253a85e750603ab08e70e49fb17d52dbeaaf41ac0696154ba91e310172", 0x24, 0x3}, {&(0x7f0000000340)="cd27d0a6d4cf9a919c648a94123da6b5e6e31b3268d87e5f655fae82bc2033dcb3080f90728f8c4eb15e0eb7e253a7ce4e7bac0ecf270d7759bede7dd9685edf38a723cafe5c279b25836a0a3f694397c777d3d12b1aa62156e83185536cd1317b9ce342a7488b9d154ed4cfab512ac8d3334820c4814e8e9975", 0x7a, 0x7}, {&(0x7f00000006c0)="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", 0x1000, 0x6}, {&(0x7f00000003c0)="3add8a099090769160d08ae6b74cdd73941edc6048fab29fb61b1b00a81401653a15777cdeb72ecbe484a04ebe32631317f7761ef4193c3480a0502f69d4ad48b122605ce02b85e2dbd60a337316fde753cae509894f06", 0x57}, {&(0x7f0000000440)="835d4240a6abba5bc3ca25b119039942bc52449b5ec05803a1a058c5bbc0716750937c2d106f2ac5f35eb9bbc705edaf800b", 0x32, 0x643}], 0x800800, &(0x7f0000000580)='vfat\x00') r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000005c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x8000ff) lgetxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB='sys/mls\x00'], &(0x7f00000001c0)=""/184, 0xb8) sendto(r0, &(0x7f00000016c0)="7d0fa186bda9c3a558de083be5817e115b8b4591b8eb7906189d6a82320e92c8ecd08de281995151d2c932cdfaa37646bed86211779a3e6c681b7cf51c5fb5c973d7a9bc23084f1cdf42b41721aa5724320e386316007e6b1f4a787815bdd6f9dd28583b4f54bc2379b41a30a710467f494e6bb6416c72439cc2783b93388cd5fafc599ca7b7469aee25c1f7b06f949b5f31cb7d4a155a269cc7587dea8c761a53012aff9ee737200add3592c82be3c8c744466f3edd9682920ef9887def97cb62e201fe846fd570747bf353eb02558f67b659775cf772f5dcb5552ce699fe441b7b38c2dec1ac8c3f4be04a9f52e16b", 0xf0, 0x4000000, &(0x7f0000000600)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) setsockopt$inet_udp_int(r1, 0x11, 0x65, &(0x7f0000000100)=0x1, 0x4) 15:24:32 executing program 4: r0 = socket$isdn_base(0x22, 0x3, 0x0) r1 = accept(0xffffffffffffffff, &(0x7f0000000080)=@rc, &(0x7f0000000100)=0x80) splice(r0, &(0x7f0000000000), r1, &(0x7f0000000140), 0x1f, 0x8) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) close(r2) 15:24:32 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) umount2(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) [ 595.902723] kvm [14164]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 15:24:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000007c0)="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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000620920144f88cd8af8fa05000000a0e283d9b227e23074bc015a41200581e5ef57c5000000000000000bcbb61c10b1f4451c"], 0x1}}, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x80000000000, 0x100000200005) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r2, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRET={0x10, 0x4, [0x4, 0x9, 0xffffffffffff90dc]}, @SEG6_ATTR_HMACKEYID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r3 = fcntl$getown(r0, 0x9) ptrace$peekuser(0x3, r3, 0x9) r4 = gettid() ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f00000004c0)=0x3001) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x17) ptrace$cont(0x18, r4, 0x0, 0x0) write(r0, &(0x7f0000000240)="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", 0xfc) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r4, 0x0, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-control\x00', 0x4004000, 0x0) r6 = add_key$user(&(0x7f0000000680)='user\x00', &(0x7f00000006c0)={'syz', 0x1}, &(0x7f0000000700)="49bfb75fc40f98dd0633e8af0420e31cdaadf2eb09e44d1a70b2f7468b4691307fce0d03ad6fabe7207aab164c7b3a8a71238ca949741cacbe395b81ea3d5166155f0b4c34343d21b1391a2a9c78ca4118a462edf1b9d21ce3be8e750c7615e34b67200ca3b5257fe920c5567ae3f82d81e817cfd584fa0122547e585ad2ef9e99245e72c0ee7f0c2cd876f0be90ca", 0x8f, 0x0) keyctl$set_timeout(0xf, r6, 0x7) syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$nl_generic(r5, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2002800}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x64, 0x24, 0x204, 0x70bd27, 0x25dfdbff, {0xb}, [@generic="6994cc0779ee05cd5487e2c92c2baa452753fb0c8b26b963e13726fbbfe56fdf2543c58943f663a8939f13ace2f7a55c1aa18f9c438bdc47fe0298f605a086a10e53340f4d76492bdff971c87831"]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000500)={0x2, r1}) ioprio_get$pid(0x2, r3) 15:24:32 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhci\x00', 0x8000003fe) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x4000, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f00000000c0)={0x0, 0x6, 0x0, &(0x7f0000000080)=0xa942}) prctl$PR_SET_ENDIAN(0x14, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x40000, 0x0) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) 15:24:32 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x8, 0x4000) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r4, 0x80dc5521, &(0x7f0000000240)=""/254) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) 15:24:32 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040)=0x1, 0x4) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x335) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) fcntl$setsig(r0, 0xa, 0x1b) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000200)={0x0, 0x7, 0x100000001, [], &(0x7f00000001c0)={0x98090a, 0x3, [], @p_u32=&(0x7f0000000180)=0x6}}) 15:24:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000014c0)="11dca5055e0bcfec7be070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000620920144f88cd8bf8fa43bad652ccfd78c5fd85d1ff03050030cea0e283d9b22703305b8fe23074bc015a41200581e5ef57c5000000000000000bcbb61c10b1f4a1451c"], 0x1}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$cont(0x39, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x400) 15:24:32 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x6b4423c7e2e226df) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:24:32 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhci\x00', 0xfffffffffffffffa) r1 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0xe3e, 0x420000) accept4$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x14, 0x800) bind(r1, &(0x7f0000000180)=@can={0x1d, r2}, 0x80) ioctl$KVM_TRANSLATE(r1, 0xc018ae85, &(0x7f00000000c0)={0x2, 0x2000, 0x0, 0x40, 0x8}) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:24:32 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000280)={0x0, 0x9, 0xffffffffffffffff, {0xb, @vbi={0x0, 0x3f03}}}) accept4$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000000c0)=0x1c, 0x80000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x6c, 0x6d, &(0x7f0000000000)="2f9417a272427900488295696806d54601ad00027d8032a55dccb947ff4fea81a88b146d2a23760f1470eb0b40620d387356aa26321e0c797d89111190375a959d14302c414055d96d077affc1b00c075aaf28b559dda03b52f354bd0c6dbf3d69900d49c088dc2a935c6cc2", &(0x7f0000000180)=""/109, 0x4}, 0x28) 15:24:32 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000280)='\x00', 0xffffffffffffffff}, 0x30) r1 = syz_open_dev$mice(&(0x7f0000000300)='/dev/input/mice\x00', 0x0, 0x40200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xc0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x3, 0x5}, 0x0, 0x0, &(0x7f0000000400)={0x2, 0x8, 0x642c}, &(0x7f0000000440)=0x625b, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=0x1}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={r0, r1, 0x0, 0x2, &(0x7f0000000340)='.\x00', r2}, 0x30) r3 = socket$tipc(0x1e, 0x7, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f0000000040), &(0x7f0000000100)=0x4) r4 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x501000) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x18}, 0x10) write$vhci(r4, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) ioctl$PPPOEIOCDFWD(r5, 0xb101, 0x0) close(r4) syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x200000) 15:24:32 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001e00)={&(0x7f0000000040)=@in6={0xa, 0x4e20, 0x6, @local, 0xff}, 0x80, &(0x7f0000000700)=[{&(0x7f00000000c0)="9dd5cbb0ca8840e526fb30bbb23597f3cebabaa4b9c5e43f16d16e1d2aa7b2e99d5b1f55b2708059aead4be5952e7041aa998a84187c972ccc4b03323067581d1d2297db5034168838", 0x49}, {&(0x7f0000000140)="8cea73f45a48a79b5fb536a02036537e32ba11440acf80f18b04fa16ab915aa367f08a51745f179ffcbc94049f34216fb0bd5a49fb262f8631d1358f0cc7ccb79ca83ec05add045e93d0a6e0bd2fb3e68a838f5021fdab2be8166ec8675643de87c59e65f5f45fdae2f37f859fd06c80eb11c57a9dcf8d52a255da6a5d8407d247c06494d213a6cef8ba9953ca1eeb9700454b5b145bd4776bd8af76cd98dd9a64eb9db3045152229501ac14b16c6cea9b13726d67b596889882d382539e8b5c", 0xc0}, {&(0x7f0000000200)="0529e089e3d175e06517343493d2b2b30212183333ba769cdd1c3e29aa6c7e64d662517550fdc2b7ffa3fd19022602a0b3dd6c11c51751096c26c9a4a0dae7aef30b43e48f8cbfc8b1e76936bc0ba2459a9122a12485eb2b50f42260521d19f2314fe80413b9b6e7c3ddf0d8cae144870ce48259a01ceb545f6782361ff32093cbbe761982723426c4f7c2214414931b339c103231452dcfeafc396776c54b301b906cddf5ca3bf8d971f1b99a261ce6b9e1352fc36b45f25be053c0b873e4786e7d149134c23d03e87b4d1cc261860fd62352b480adb70e33fb893616acb8fca37f86b5", 0xe4}, {&(0x7f0000000340)="5b2e894f47a5f4977c4fc5216edb646d658a27377f05241edf2aeaf01330b1126348e89f28a2fc565819a3bbf4c2fd13e4730b1d7d8e6527ae716d0851fe506757642dd4207bf5ceb0ecf6b7ecd386cbb64b097b219135270039cd6fe934e4d031d14dc60d7c34c3314cc8d7f3af17cca4efac1825e9f1a39513554cc65aea6a2a4121633f8bfad0028f8c6e3db7833910967029d56ef9528532a56f06711cb31720ab", 0xa3}, {&(0x7f0000000480)="874c3db1ee55526ab688bc5e303583ae2e8788767c44ab91e67bcdef2150b79931d6903aeb115e69f9c551a46bcc94208bb16e5b19f8d42b80ff4a918f02c37076cd2e7494ac9bc205f7cc0fb04805b86b9f4669b328b047505398cb62af70c09a3c091da02a", 0x66}, {&(0x7f0000000400)}, {&(0x7f0000000500)="84cc2ece6a93fc714324fb50cfe3f2045b93b76a17ea997dfa7742b5868c7cc1cdef72706260ea2b2d4a89ed7d9766ae92f6b57ed3b082c3cd4280bcd6ffde25fc0b6e84669382b53e49da81d533df68b87665bda5a89567ee64f881b7b7538470d922745b18c85a2c52bac425f832bc24e0abf89ca5a6a82c888080d1864847804a0dac095ea665e102bf3b7a3b39b393892bfb709906639fb7341ec2261f3ee9500a8f4e354049f4d2e4de297f39a4c866f18f5074211a981e69317d12cbc21281", 0xc2}, {&(0x7f0000000600)="2307df22f0241820e1882f944397756512bd53dd7299f117d45fb213c522b7900999eceaae2f0df62bbcc4d2d28c194c86d3e379e659f5751f3e9504ca26350bca579a8a7e1f7cd9f85eddb33d6754eb514cdea772e86796c13fd3581b4b2b4f905916928cab05f38974f80feab1d3f671370e7de1ca36a48bcb6238c80d6237d0530249822b965f322d677544b0621ce3e247d6ac253fee3abd06a0377c8adb84d27f580294a9941b003b24997b1ecab4326c", 0xb3}, {&(0x7f00000006c0)="b8d8096b3ddaa16e111f4a1713b07d86d0e829ea76", 0x15}], 0x9, &(0x7f00000007c0)=[{0x58, 0x0, 0x5, "063087422fb41b612370d3d3d388ec19eef4f76d04f7cc3f527f810921e782fcabce6fe6bcee50e332e58776675f79539ca754ed25520c9ca5b6b3944e60a7a8523178f9586a"}, {0xf8, 0x107, 0x2, "b5a42ef50a1dc82ca904ceba88413d19e696b38aecf95680bba0d5fd502825784071430f5fe5bc63570c9c0542abe8e819422b9ccaa9475ef2065aac66d77c9e6867e152ced61b8cc2f87d04eec22d4eb0fdc099254114a21c723ddbeb362d291b893d572d12a988a79e40edf42cfc212c1ccbf4b134a3121bf51955256cd2fdf423e13f199958a293747502cdf69ab81a3511dcce2b9609de7fb5df5fb69e0e93503fb8fd34902042c1a20ee55630395dd0c74fe78189262c96fd7089e6f74fab79e5993fb89472c009b9d8c138cb09a3d042796746266b27571bd9ae5cdbaca7f4dd"}, {0xf0, 0x11e, 0x2981b621, "e4eed43732fe16fb4c1b94960d9b21e38be40b8284662129ce4ee41af702a6dbc46ddf5a28587bdf4417af5a261b4265cf575353ebe5d02fc2ef956e9157f5523d0521e18892177a147b2732cf0108fbcb5a310d40bdc305c3ae8ad8706db53dc6946694f8d21dcb9269ef9df23b45dcba846cf7ce2defa3452155d28f239f3ac8d25cf738df9472f6db78724c78fa247aa8a7ef9bf8fe6c42f7fc98543a93b562b49734e583f124ce8b9459a2a0aca4aa0aecb8dc69004fb7c35c4181d5b31e1ba1f1c641f3571215a4586882c79990fe2ec42b32ec421079"}, {0x100, 0x114, 0x1, "3977341f4d45dc3930c4cc759ebfd17e9d01c24536db8987efcf719484b05f1b663536790637a0ec3e3186b8c873c45a0a76fd3579d146e938616c53a1526acd13c09ee68a92fca2216c0610f19ad33271d62667abfa604e3896dc22c710d4b61441a3cf18b5b73856f4e7e4f39da72a2a73ee2537cd2ea9c988da77533973c4b39cbfd086ae4a27706ebc2612e433d0b12fc1a2d6eb861aab2cb6d8d1f867a77ec27889cec4a096497a4acf94e24927b7195b8feb30773986615a66bb25c14552ef4d8efe5919a8cf7836bca17508318bb2c0a77c6e29bc4ec2a8539d6d3ed04b005bf9dc3e2ba2fa8a6a"}, {0x20, 0x11d, 0x6, "d15489aee36584b062"}, {0x30, 0x101, 0x80, "2550859119c893c347aa30cb7de7abaf9ca0a9330aa0c5ebbae93e8dde04e5"}, {0x80, 0x10b, 0x20, "6be4888fc2acdc939c2acc7741d0d02fb117cc87ebaa86a8325ef0446abedaec76aae134133b7998424dbfc6d40faa14428316a59b687d7d279058f0436b383dd431bed88c7b625d72042083e9c23fd724fb5bde1e7e473803e1fa54fd2e4168716202d651132bda873c811b0335"}, {0x1010, 0x10c, 0x0, "69a848b990b33604dad14022d1e86b083fab720affac9f6c566263618680f35292ad1194c207a3813fe5ecfa67096ec58385de730ed8185940feed2f57f1aac8192e4a9d225f807589ad09d727c3d140ec79e35a8873787c1ecd83d35e0d2c9ffe5f3dba245461370553c7b5bcd4bd856a140bec624edc04d26b298c55b98859869d0af07caf172ac062922301655a2390eaad8a504d9dedc536047486be87d70e7fdf3a45bc8806dc66effd04722421bbc780a4cc7d9b83a762146ab3b2b13c3bde7829484ec3df1ba9c63476c0029db3f72dc7f8dc819cbef69da5823396f26092ebd6676d2124ac2ac54dc5ac323fe51e8d73f6f71e9a487962fdd508c3ea51413336e2693bcc52f30f09125765fb9e39c0fe71c90a2becbfc5ddc9fb13dff664e24038a8762746cdb69dd44a348f126333c0dee978123d66f7d02e38bb9d87255bc9fa2983450f18d0e697fe706d40a3fc0e3eb8a9fabf5941ec214e7aea9c7c6413d1c1fad9d78488a994a35f1bed8c5e96d4cd23da6ec2f43cbded5f6f4612917a151e9d9fac250896ca260589b58079491b1fa9a1945dc183984a19f572797b468a5a1ff176731969f83621ee165c613ba0e46da239dcc00f2254f7b63b845b43ec77ad66008e0dc406535ce446dba364e4318d51bd208f8a9ed310f8f32b33d60c7d1ff007a37e2d682f0f298e8b5f6218373e51d5c4f74d396f33da71440ed1deb5d10b11f35a971110815c2c9f00fa0bf113500ed50ab4a57ad4e2232e91b141dc0248001d7d9d69455e7052fb856629fbe84d4b422894bc53926c92f35e88bd0d2be0839f68ce2141639525c3a776cc2f9e548e0856713751f9d916885c8dc274bc84cc007c12d58d57ba950f8664c0712d503c3be50f2987f6f2c8ff21209d784e63bf5abd5c462cb3e3f524859f522e77dd9d9a55608875ee1eb7ff1d9ba89b94334e9e35e8476a8b056e55d404b903d73dbffa47787724d61f4e5317868f011c73f500917ce3dfda62cb4771bd92c87b80d22a1a627e8fade38251cc1f13fb5b4db3504390eff9f7a0e2a1b68323aa6ae5260c1705ebef061ea96dc6a41fa03d1ab7c5c1fcbf5d91eea1f1e8db4e7a38796d255d0e49c24dbd3aa5c84948ced02ef9d50a8075a71888da50f6898ec379c03e9ec300d0ff37be033dd2ecd44b1f94781190ee41ee92778b2067547fdca87359e69d3dd7e42bb5d758fa89e008fcf0489e1168c99c4d9813d786cd57cca0a84391dd450ee86d4d1f784fbf0d3698741df2d9ba595e170856fcc0ff09158a8cc9b72aeb9501ca3a0951ed7fc9d57487f66d81ec5ef8e22ec1b40e5c535296548c908b5737c1552782d369a6c5b3ddaec147a3db1bd740c4acade9eb54b2db8b35ea3c4f6a434f20745cc186db2f6728a5dbc0e58983186263fb9ae73fbd9df0ab75d4dcda08ee691a5ee740de439ce1594076103c0dde1d7b0ba866898c4276f778d4e451b714cc73fd35d453fce038087aea6362a6a79498de09ad7ad61f8e4f895fa95485a00cb30d270207aeb38163bccb2c2fdf29c64962a0ea23129cf5586f5ec95d74c804bb9af2460a51e7b967b47daf4e58405754d852057af3580ac65252b6e39d7f71c7a488c8aa5914a0c6c02f478b6c59bf49a4df79baf584e4b64687950deccaaafcb4847d0d35f60e2b31864c2df996effeb0c8baaf672a028f4cdeb83e58d2f9b71e42d0d110d6635409a360e48e7ceb3608382a17f30319e9a756cd6312c909c3cdcd8764a3169be6f347827c1e264544fafc13b5530d04c2fb3b495a77a1cf6281964383d3f0ec8fe05e1b47660e5dbfee62a143b5815bdba0b8ed35122d2d7092923868a6ff387789f5b8c32b19df13e4bac79cce7cb36323dd68f20f892ae564fe1da8d624d3df93194ea24b2682ae69914bac7293da8d7bc1b71c36fed3330f07bf8a612d54ba1a6c1e27ee636af6a37641c042ca54dfc4c2c7729b157bfc1c219bd44b2252e0d1d3c85dfc2559c2bd2e178b231a523f8ac1ff47c32b5cfc1b90b3c4da8afdf64635c984a06356cb6409035ab5a950f4c96f5d3058ae6e48f839a8c2ab5872a1a1b5a7558cf0e5d03eeb999c71b81af5314eb24951dc9b6486c84561b068210cc261b02b7b1b1f0683cdd79dee2fe05311dedc8446582f96327ac5e82adb037243e79a413da6638370deea961a277d7d1b3795dd9d8e903029952855216443a27f7bd3c475d6d9da5a7ee6eb44323523b4d85ffb134b8e3cd46b96f604f6228e240866eb0a72ed25804c3dda46c7cf49b36ff45790b540e195aa6f8e4953ec1a038bfdc5fb5379dedc76914ccdd724cd8ffebdd53bbbd7672b78c93da17bd2cfc927256d1a2fae5906c99c71f4d971db407a274dfe09d967e9bf35c53fa47e0f0ab6f0df708975bf9d05b4c561cfe36d5510923e4ca41ef0bdab1355416f10047178bdb671b002469bfeb49b1bb61fc5f4589945d4fdb78a590695f3b1127fda2479da1fa210253f43ff823ae5951e6894586f9cf62617d48a01db0c94fc5b11d95d0bd61b3657e05eec2a2d132d6b5051fc26f214365d81c640affa6c7d7b86207c1c245988c4996853ac1c583a4deaf94cdfe68e7f9aa7a8e2e28a01e018286a37547d22588f8938e820e90409b91dca6d62dd8ddad46fbcc4d010cb3357b0a7ceb75a65ed742f4437ee250fa42f8cd2f1c010f228c40c7014de384c064fadc247c2e8ef1bcfbb22f21597ba54def5ac311a34f74415135723727395c7b904f58e1c737380b843f8346ca7591931f9d0c2d226de44bd85c75c9015f3b68afdd9743781a2b79bc267fe6b551f964ed4c739eb59ccecad1f6836d2ffbd6e97f099bcb6966b2ec074b87192b90d0351099b24c09d4aff0d41d0f6c45dc5e28c659d5ddc10ff4cf17cdd8e5b91b5e4f02580368e6484897f501906afd68586ce0c06f951b2e3f9079c6d5fdd20b38673add5d3c56e00f5ed4b61aeb45c847a47104ca9775b01ae851e757f80d1b9e1332a0747bb9bd652eec103fed14ac5077bfc0464afa084f05e444da75aea3848b072e83dac54e8f51e9ec46d8c0f895246ae08a6b536e7cb031e8b5700236a812903862242d5337e58a426b8e9198edce302fe121c24a7e469966094feb93a65106c74e9e6ad28b4624ded68c2b6fb45333585ce87cd79572299fb59a85eed178319fb964a733d791fc63a303b0dd0f26518fbeda605897b46b4e904a8c6d92f4ad76bc009b4a04495a934ed36d15d8c125cbf8c043126c0bfab4784bc262da84fe175309b29b51e3dae27f0e39d00c6e9629e3eed001586d01a4ecda2ca8da54cc2659f3e26b09a8360a303538e3232619826aff2677f2635304be3e89af2a3e3db68bc466e811882101f508b14cd15f30d88131dd6d12d324dae2d2be4783058ccf92b57c3d7e2722485fca1c768b4cfd0ee046105ddad8e87f17089e549d73d40fbe88c44b68173ab016ee1010382aa933bdb9f652ec307908c47a2ed2247f9ad6f60f0aaff7b54265a30a5c9ec9116b83b2b444b9b9de3a785db8ed25a2ad2062646df79f63e6493aeda91f4643cc54561be7e3a8e0c3441b94fc7f661afe8124915219e499e8e9dd75c773e8e92343f6687347d3558878edda19590eb8f86e31f92b2e275e3458607d89aafdcb7a52956adb23ee050e1a4ac934503344f9ab19c8997b9edc3a6385121cc60392495e57e1b36aa54700f3bd135bc6092843bfdbce74d3d668c6805270f40ad7d7e08803944cc46ba72955f9e7be241f8be3a74441678a260507d4b545d04b16a463d5ec64ade3abdde7ee084621c544edb61a5a4b37262fbcaf8ef35a5cd0e5f91e789e973438df23b9fe92a813f9be337adb2dbf67676b81d840b8f5d9267f59e44fe111e01749a5dbfa1cdb41bde129c03fef6e77f2d41ba3ba81411ea1724a1d9dbacdc7cc645f95cefebaffdfb768e404c67a493b1b8e6b05af9a36956d244b1e624663ac883b335ef32d615b1a39fffa8294c355c3197a675f6a05790d61ec40bb2a6602c39987d41dfb03687c760d1a1bfa020efb700171cd4e8a016f59a67969e438e213433778f3cf9e8a69083fc00a688cfd6efea1a432908071aeda4e1fb8ac01874fd2538af8ae4366d56cd607eb1d56d8264f820bc508119e207e221d8b231178d28306bcc19f6289156b608a2fd05708fd5403f21e4d7f14f87b0738755961bf18930fb43d31e40bfb1436d4f452fe1c5a6754cbf3ab6950db1d64435c5f9cd48a4ea6a3338bb410a984d6b3d2969e2d8560d82459e6f7c8392e26df20358ed5cdbcf422d199ef634ee61e1d4c438213248b9a55e5dcdb0017e21227b270709c275bf773da19c908c9dcbf2214714103944d7d98f20d8a00143ba573bd46d97d0fa153f2b508473b2bba825eb519120566a9e2c2c1c70a49bc38da5325f3ddaaefceb41d06b9cde02c5ddacb1acc0e1d7bfc3d14fecb3387639c4c36288da05042e7778f8e5be98f3a97388008e3ca28e5843ac3f8724941325fcf6b62b63134ed2469ccd4f95844d32a194be614aea0450cf68bcede65761b5ec9b87be34afc5ffe47c1157a13883d4c2ad306ea2d4817ef136225314ccbd3dbac3a69412759c373bd4ea3b1cf78ecceb4b894b3e9b2e992236bf903d6dac50d6ab318807a49fb6d4ee06a7bbc3ca5ff38711a576bae827d3bf78d2e7ac56c5d6ebcb4807c6136ee8a2d0df9d6894382bd3fd729e7ec1dffaca079a3303862ae1c903404889ab970479a7443bb6b29e47b84e22549bd98b36bd533c3b9c97539584d1c7ce586650c78d17db196c1b2904d90dd6f3ef9395ad463b73d5f3b04777c4d118e789648bf4b203250165dc15386decafbd37369cd4ec6f993d4f6f126e7e3aa7ee69dc26d6858cefbeac5c73f79db5574b53ca4ee96271b5efac7ae89a383201f06c1e37c85fa5b6d58ce7e5b2ed420f8d0a9eaf1a28a61a5fbb2528b5be38f18716d2a7b6a0c1078982238a9e38747b0294da9458f7246b54feff71eec4feba62cbc45e04ef50b6b9cec3625978a936f8967ae0f6f6d2dd990b4a7ad37bdda8c16743192217939613a65e99322631fb29cd6d88baa7dc8675ab1a6b7c6099f63fe723ac4a2d03c2db3e9bd4961ff36d2220dfb919491716c0bf48950b39bba610b176a8cd63d7f1336f8bf9346a480ae801a01ff625ebe48c1bea3c4b7f0015e0b564520deae8d70461907c39980be62821cd3c6484d2dbc503a8966d73415a478e324cdb003df30cef0b18375ad0ccc845d37a5202a1fc945970e9182afdf332fa4fb690b9ce0e94f17258944be4f3e2c72be208174b59ee4cc6aba814751c1492391628120e65b3526599b0b64c7494156f1553f628e69b9ca81f805464d88f506720312547baf0a231a105ac2549a5671c93c7c0dc360d1a84b0fee037dde6be965f5c074e73151cdf0d2804ea807c43e6354f446ba763d0e4185dd9ba4371c504a85da5e3f97e047805b605acd7916d8045e209bd402f888e727fc8a7fb12c1d7b4a71ff1d2d98a1e3b1d1ddf3161f9d84a684536be9e893561e5ffb250d0fc7088c2c605894d2053151049f19f93a1955e1d14851cdb8a8c72463dd8546fd4b8d1b50bc80e9178a2ef4ebb9696f5201968092f3c7890a442a09c08229e242e969b086adebb69b08374c22600f1e2c590fdfdcb2da3014539e91c6563cb7c475220940c3d4cbecb62fe1994c433544b2f0e0297ac4bb42265d417eb5d3bdd703c459ae0e6e692f7109fbd36acaf2b599f5082a3"}, {0xf8, 0x11e, 0xdbd, "f26c77b2c3f4ff369d40f0c4e8856db1880222ad2f3b4495cc60f571974eea9dd5114cf52a865b8251d254bdd84b5a5da0821137f77d7567c9b4c00fa355cc843432bf760ff3eae8ea29fea0918ca1ceaa79fd8add2405f2b6fac5a099a512fa61fbdb4965fc22688816fadc1d3d852b309f4d7a34678cd075a93f3186b64edf8c21d6615a775e239139aafb754f8dd11bcc2189cdd90ead290a62a7476bc9e6cbe0206fe81b9d770be5130b9fc44e8cc0f34e6bd653eccff4c33be1a747189de8e5a3310592c17282274c8cec4a83b7a567e702506761d0725bee0bc286970b0e408bb8"}, {0x100, 0x10f, 0x8001, "8f473cdc7b4002e029c9ba29deaa7b102f0a50b27028dac31f17be2a90dde0a6a7fc3dc566ff89a0a74b135d0457219b96c39668d50094d4f54b18d5898706643e94fef7e891d2a5dbd7b5aae30d3f6c8b82e73d01da291f7a13effd6576c0e894451169cd9193a3e9c82107e55e28ebfed5f8ed13a6bd322df6a17a42e380da623fcca33f1949148041435a6ca122e6e3d01398cb7ead6d42d62281d19f06fc30e94a6105e9e9e9deeb3934bcbd4c0334f10c9ffb14eb152bcb083cc3a01fb5312c019fbff91e7d8277bd36e3070f4d1152c67d9c8c2969fd19e662cf823ca635b16d027ebc910407b05b"}], 0x1618}, 0x5) syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000300)='./file0/file0\x00', 0x802, 0xaaaae9e, &(0x7f00000002c0), 0x8003, 0x0) 15:24:32 executing program 5: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x400000, 0x0) fcntl$setlease(r0, 0x400, 0x3) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x20000, 0x0) openat$cgroup_procs(r2, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ustat(0x1, &(0x7f0000000080)) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) 15:24:33 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x800, 0x0) write$vhci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="03e53395429dbd721fb30b04282cdf94a0e26f573d7b92c2716dcbc05625b6c0dc68fac211634ef44e77f1261ee0052f5a6cbcb047644ea9a98430ec6a8411e87cc53330d037e1c79e2d87952cd7926e"], 0x50) close(r0) 15:24:33 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @sdr={0x35367d5e}}}) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000180)={0x0, 0x7, 0x1ff, [], &(0x7f0000000040)={0x990af9, 0x5bc6, [], @value=0x2}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f0000001200)={0x5, 0x2, &(0x7f00000001c0)="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", {0x0, 0x9, 0x20385655, 0x0, 0x8, 0x9b9, 0xb, 0x9}}) 15:24:33 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) [ 596.424255] kvm [14239]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 15:24:33 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f00000002c0)=0x8001) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x1c}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x9, 0x0, 0x7, 0x5e8f, r2}, &(0x7f0000000140)=0x10) truncate(&(0x7f0000000180)='./file0\x00', 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000340)=0x14) sendmsg$inet(r3, &(0x7f0000000440)={&(0x7f00000001c0)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000200)="bb87bba64806d22c6be885fe30893557c7aed64658da", 0x16}], 0x1, &(0x7f0000000380)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x44, 0x5, "531e58"}, @noop]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9c8}}, @ip_retopts={{0x38, 0x0, 0x7, {[@end, @noop, @lsrr={0x83, 0x23, 0x3, [@dev={0xac, 0x14, 0x14, 0xb}, @rand_addr=0x800, @multicast1, @remote, @broadcast, @broadcast, @rand_addr=0x6, @local]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @remote, @broadcast}}}, @ip_tos_int={{0x14}}], 0xb8}, 0x801) 15:24:33 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x7, 0x9, 0x3, {0x3, @pix={0x9, 0x56a, 0x3772775b, 0x3, 0x400, 0x2, 0x9, 0x9, 0x1, 0x1, 0x1, 0x7}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x1, 0x10, r0, 0xa) [ 599.030199] net_ratelimit: 22 callbacks suppressed [ 599.030206] protocol 88fb is buggy, dev hsr_slave_0 [ 599.040389] protocol 88fb is buggy, dev hsr_slave_1 15:24:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000014c0)="11dca5055e0bcfec7be070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000620920144f88cd8bf8fa050030cea0e283d9b22703305b8fe23074bc015a41200581e5ef57c5000000000000000bcbb61c10b1f4451c"], 0x1}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = syz_open_dev$cec(&(0x7f0000000200)='/dev/cec#\x00', 0x3, 0x2) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r2, 0x800443d2, &(0x7f0000000080)={0x6, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}]}) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 15:24:35 executing program 2: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x8, 0x520c1) syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb7fc86d4f66732e66617400020341000500077008f8", 0x16}], 0x8000, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fsetxattr$security_selinux(r0, &(0x7f0000000180)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:netutils_exec_t:s0\x00', 0xffffffffffffff4a, 0x2) 15:24:35 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = add_key$keyring(&(0x7f0000000500)='keyring\x00', &(0x7f0000000540)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x1}, &(0x7f0000000400)="12a26a9c67b905b26d777811932ba7f807775cd13042d552903ce641a6881089ee74cf565549c369e144e4089406c38ad155d7e04347147d1876fcacdb0ffec5e3e292ba93a7ad44b4626ca9115dea8e90bfcdb6d2aeb0c48ef1824ce1a8143e4eb89bf57bc16240daf205259797e0ae142ed6473310869112ebc44366e5f220743e26d81b4581a11b9084a984e3feef6a6225dc8d825ff7c92bd05133f64167752ae7334f81312fbfb409b95e9c3f0cc8fc845b449dcf90edc485ed7d0a9cfa501db45c096c8c0e85a8716ff761f3301299c799a8f7f8905ff4", 0xda, r1) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x100000, 0x10000}) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000580)='/dev/autofs\x00', 0x200000, 0x0) write$UHID_SET_REPORT_REPLY(r5, &(0x7f00000005c0)={0xe, 0x1, 0x9c8, 0x1, 0xb, "c1ace9596aef537babb865"}, 0x17) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r6, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa080000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x100, r7, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0xa4, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x44, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3b0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100000001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x4}]}, 0x100}, 0x1, 0x0, 0x0, 0x40001}, 0x4000) 15:24:35 executing program 3: write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(0xffffffffffffffff) 15:24:35 executing program 1: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x4000000000002, 0x4380) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000180)={0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1c}}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1f}}, {0x2, 0x4e20, @remote}, 0x104, 0x0, 0x0, 0x0, 0x800, &(0x7f0000000040)='vlan0\x00', 0x72e, 0x1, 0x2eb}) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r1, 0x8000000) fcntl$setflags(r1, 0x2, 0x1) 15:24:35 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x20000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f00000000c0)={{0x7, 0x8}, {0x2, 0xad}, 0x5, 0x5, 0x3}) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) [ 599.224586] kvm [14279]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 15:24:35 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) 15:24:35 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='auxv\x00') getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000240)={'filter\x00'}, &(0x7f0000000180)=0x44) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x20000000014001, 0x108) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x57) syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@empty}}, &(0x7f0000000340)=0x33f) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0x552) write$FUSE_STATFS(r1, &(0x7f0000000580)={0x60, 0xff7ffffffffffffe, 0x2, {{0x2e0, 0x2000000001000, 0x8, 0x2, 0x57b, 0x8, 0x80000000, 0xe3}}}, 0x60) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000002c0)=[@in6={0xa, 0x4e23, 0xff, @loopback, 0x100000000}, @in6={0xa, 0x4e23, 0x5, @empty, 0x6}, @in6={0xa, 0x4e22, 0x8, @mcast2, 0x3}, @in={0x2, 0x4e22, @broadcast}], 0x64) dup3(r1, r1, 0x0) mount$fuseblk(&(0x7f0000000100)='/dev/loop0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='fuseblk\x00', 0x1000, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c726f6f746d6fff653d303030303436303030302c1361606c5f69643d899125", @ANYRESDEC=r2, @ANYBLOB=',group_id=', @ANYRESDEC=r3, @ANYBLOB="2c616c6c6f775f6f746865722c616c6c6f775f6f746865722c616c6ce753dcfe3903c9a75fe84db850296f775f6f746865722c736d61636b66736465663d6b657972696e67766d6e657431706f7369785f61636c5f61636365737376626f78"]) 15:24:35 executing program 1: remap_file_pages(&(0x7f0000a94000/0x1000)=nil, 0x1000, 0x2000009, 0x5, 0x1000) r0 = syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) 15:24:35 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x12000) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) prctl$PR_MCE_KILL_GET(0x22) [ 599.270150] protocol 88fb is buggy, dev hsr_slave_0 [ 599.275584] protocol 88fb is buggy, dev hsr_slave_1 [ 599.338962] mmap: syz-executor.1 (14304) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.txt. 15:24:36 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x101000, 0x0) ioctl$NBD_SET_TIMEOUT(r3, 0xab09, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) 15:24:36 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000080)) [ 599.527189] kvm [14318]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 [ 599.990135] protocol 88fb is buggy, dev hsr_slave_0 [ 599.995247] protocol 88fb is buggy, dev hsr_slave_1 [ 600.310174] protocol 88fb is buggy, dev hsr_slave_0 [ 600.315594] protocol 88fb is buggy, dev hsr_slave_1 [ 600.390188] protocol 88fb is buggy, dev hsr_slave_0 [ 600.395309] protocol 88fb is buggy, dev hsr_slave_1 15:24:38 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000014c0)="11dca5055e0bcfec7be070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000620920144f88cd8bf8fa050030cea0e283d9b22703305b8fe23074bc015a41200581e5ef57c5000000000000000bcbb61c10b1f4451c"], 0x1}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) sched_setscheduler(r1, 0x1, &(0x7f0000000080)=0x9) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x17) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 15:24:38 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0460f1c759802b78164f28799a153fa4fd8d1d0720e65549a9186093493d852f366ebc494a131e80040ee0053ec8858e3cd8c838fdeb783e46dab3a8c6a187fa0ad6e9e0a852223b16d98e5893df6aeed103f85dca6616"], 0x57) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f0000000080)={0x3, 0x2a13}) r3 = dup3(r1, r2, 0x80000) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000240)) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000180)={0x3}, 0x1) ioctl$SIOCRSACCEPT(r2, 0x89e3) close(r0) 15:24:38 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x7, 0x2, &(0x7f00000002c0)=[{&(0x7f0000000140)="b2acfa479563b82579042a9967f7d5841aa850c423cd4d7c2c143d36ae858798802308181ebaa4a100b6993fcd3a2b2c2f01af646844a18779db52b6e58fdbf0636f6f882db380098f19405b836623d000ec06a81307f0edb69206cda820e051e3f6749e4e7a028482cb72d44fa37b2d51935434ecadf051488de6d4c091119ace775a8dc2208d427f4386fbed8997be4c25dbfd2a", 0x95, 0x1}, {&(0x7f0000000200)="0f93e3f63d2f32b027aa43e9a742a0232f361a994fa5b3a8c44b458edc5c6d4b2f5238b4563969db89b587ea03e227143281441c196560e62828e0b2a43f695873597e0a614d546561743d9406d1d881c4760b0a82b68ba35416c93c7a12da9900b9982a71e01aa63e649fe7be0c2f2a45e3dd59c1fabe989aa8a5f80639e4220eff4e68c9", 0x85, 0x8000}], 0x9, &(0x7f0000000300)={[{@prjquota={'prjquota', 0x3d, 'vfat\x00'}}, {@nouser_xattr='nouser_xattr'}], [{@fsmagic={'fsmagic', 0x3d, 0x7}}, {@subj_user={'subj_user', 0x3d, 'selinuxd'}}, {@smackfsdef={'smackfsdef', 0x3d, '-em1'}}]}) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x400, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f00000003c0)={0xfffffffffffffffa, 0xffffffff00000001}) memfd_create(&(0x7f0000000480)='}em0[posix_acl_access\x00', 0x6) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb7fc86d4f66732e66617400020341000500077008f8", 0x16}], 0x8000, 0x0) 15:24:38 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x6, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) 15:24:38 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x20000) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) bind$isdn(r0, &(0x7f0000000040)={0x22, 0x40, 0x9, 0x1f}, 0x6) close(r0) 15:24:38 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x101000, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) geteuid() 15:24:38 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = dup2(r0, r0) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x6, 0x0, 0x0, 0x2}, 0x10}}, 0x4000004) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) 15:24:38 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) getsockopt$sock_int(r0, 0x1, 0x13, &(0x7f0000000000), &(0x7f0000000040)=0x4) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) 15:24:38 executing program 2: r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) sendto$inet(r0, &(0x7f00000000c0)="99bd80faa7708f1a7ab5bf2fa8a1f15f4be648de0b6afa5fed349ae2d7b670dc2ec0a4ca6553f4ab74a65d059690221df80c7223c414bb8b4546eb3531217f11857be87c3f7e1813635a21ce47b8d783e1811503aa18fa7c0e6f2e2803bd405bc5e97e06c85e711eea75c81c5b641de0caf8b2975bd97d5e654c5372c7cfa6f1c440f62730d3e623bc8ef63b8cf1eb100041d7fb18a5ab", 0x97, 0x4000801, &(0x7f0000000180)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000040)={0x20, 0x0, 0x2, 0x4b}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000080)={0x80007, r1}) 15:24:38 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x200, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000100)=0x4, 0x4) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) r2 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x6bd, 0x400003) ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000000140)={0x0, 0x8}) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) [ 602.291560] kvm [14335]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 15:24:39 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x440080, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) 15:24:39 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000340)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xd1, 0xd, 0x2, {0x1, @sliced={0x2, [0x10a5, 0x2, 0x80000000, 0xffffffffffffffff, 0x6, 0x376, 0x7fffffff, 0x9, 0x4, 0x3633, 0x8, 0x55, 0xffffffffffff8001, 0x800, 0x5, 0x10001, 0x3, 0x100, 0x10000000, 0xa232, 0x3, 0x1f, 0xfffffffffffff3ee, 0x6, 0x1, 0x0, 0x4, 0x5198, 0x3, 0x80000000, 0x353b, 0x1, 0x8, 0x8, 0x1, 0x1, 0xfff, 0x7fff, 0xfffffffffffffffb, 0x1, 0x5, 0x1, 0x5, 0x101, 0x5, 0xded, 0xff, 0xffff], 0x80000000}}}) fsync(r0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r0, 0x4040ae72, &(0x7f0000000240)={0xfffe, 0x3, 0x7f, 0x1, 0x3ff}) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000000)={0x0, 0xc388, 0x30, 0xffffffffffffea2e, 0xc9}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180)={r1, 0x81, 0x7}, &(0x7f00000001c0)=0x8) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x0, 0x0) ioctl$TCFLSH(r2, 0x540b, 0x5) [ 604.150194] net_ratelimit: 18 callbacks suppressed [ 604.150198] protocol 88fb is buggy, dev hsr_slave_0 [ 604.161314] protocol 88fb is buggy, dev hsr_slave_1 [ 604.470193] protocol 88fb is buggy, dev hsr_slave_0 [ 604.475382] protocol 88fb is buggy, dev hsr_slave_1 [ 604.550152] protocol 88fb is buggy, dev hsr_slave_0 [ 604.555273] protocol 88fb is buggy, dev hsr_slave_1 [ 604.950152] protocol 88fb is buggy, dev hsr_slave_0 [ 604.955261] protocol 88fb is buggy, dev hsr_slave_1 15:24:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000014c0)="11dca5055e0bcfec7be070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000620920144f88cd8bf8fa050030cea0e283d9b22703305b8fe23074bc015a41200581e5ef57c5000000000000000bcbb61c10b1f4451c"], 0x1}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$cont(0x18, r1, 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xa40, 0x120) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000000080)) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 15:24:41 executing program 2: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb7fc86d4f66732e66617400020341000500077008f8", 0x16}], 0x8000, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x6, 0x8200) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000100)={0x1, [0x0]}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000480)={r1, 0x1000, "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"}, &(0x7f0000000180)=0x1008) 15:24:41 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$VIDIOC_G_CTRL(r4, 0xc008561b, &(0x7f0000000040)={0x3, 0x3}) 15:24:41 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) r1 = syz_open_dev$vbi(&(0x7f0000000280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r1, 0x7706, &(0x7f00000000c0)) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x7ff, 0x4000) sendto$x25(r1, &(0x7f00000001c0)="f130b6387b7045585426fc6c53f7c61e4e742c76fa65c3deca2a389cce27eb359c80", 0x2b4, 0x800, &(0x7f0000000140)={0x9, @null=' \x00'}, 0xfffffffffffffcf8) close(r0) 15:24:41 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:24:41 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x80010, r0, 0x8000000) [ 605.270158] protocol 88fb is buggy, dev hsr_slave_0 [ 605.276904] protocol 88fb is buggy, dev hsr_slave_1 15:24:41 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) 15:24:42 executing program 2: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb7fc86d4f66732e66617400020341000500077008f8", 0x16, 0x80}], 0x8005, 0x0) shmget(0x2, 0x1000, 0x8, &(0x7f0000fff000/0x1000)=nil) 15:24:42 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) close(r0) [ 605.361293] kvm [14386]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 15:24:42 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000080)=@HCI_ACLDATA_PKT, 0xfffffffffffffd5f) close(r0) 15:24:42 executing program 2: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb7fc86d4f66732e66617400020341000500077008f8", 0x16}], 0x8000, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x200000, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000100)=0x0) r2 = shmget(0x1, 0x2000, 0x200, &(0x7f0000ffb000/0x2000)=nil) shmctl$IPC_INFO(r2, 0x3, &(0x7f0000000480)=""/185) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000001c0)={{0x4, 0x6, 0xa, 0x100, 'syz0\x00', 0x4}, 0x4, 0x3000000b, 0x673, r1, 0x6, 0x2, 'syz0\x00', &(0x7f0000000300)=['vboxnet1wlan1.\x00', '1S\xad:\xc0\x9c\x12', 'vfat\x00', 'vboxnet0\x00', '*]@]prockeyring@-\x9aem0#wlan0mime_type+}:selinux\x00', 'vfat\x00'], 0x58, [], [0xd3c, 0x8000, 0x7, 0x80000001]}) syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x3, 0x100) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) bind$bt_hci(r0, &(0x7f0000000380)={0x1f, r3, 0x3}, 0xc) 15:24:42 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) 15:24:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000014c0)="11dca5055e0bcfec7be070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000620920144f88cd8bf8fa050030cea0e283d9b22703305b8fe23074bc015a41200581e5ef57c5000000000000000bcbb61c10b1f4451c"], 0x1}}, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$cont(0x9, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 15:24:44 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) 15:24:44 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x0, 0x0) write$vhci(r0, &(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, "c85d7f3f4070b1bf9bf8919c1011feeac5980ff49e333e6c3c58a6e25a32a4b601b100c0fe46457f65fca5cd5b99515fe88860917acaa90ce0f7e9ae9b9daeeb2d9b4cd774903f1fdd472ee5fb1320"}, 0x50) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) r2 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x8, 0xc1) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f00000000c0)=0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 15:24:44 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80000, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000100)=@raw={'raw\x00', 0x9, 0x3, 0x3e0, 0x0, 0x0, 0x190, 0x190, 0x190, 0x310, 0x310, 0x310, 0x310, 0x310, 0x3, &(0x7f00000000c0), {[{{@ipv6={@mcast2, @initdev={0xfe, 0x88, [], 0x1, 0x0}, [0xff, 0xffffffff, 0xffffffff, 0xffffffff], [0xff, 0xffffffff, 0x0, 0xffffff00], 'rose0\x00', 'bridge0\x00', {}, {}, 0x67, 0x2, 0x1, 0x2e}, 0x0, 0x148, 0x190, 0x0, {}, [@common=@inet=@set3={0x50, 'set\x00', 0x3, {{0x0, 0x1f}, {0x5}, {0x2, 0x4}, 0x100}}, @common=@frag={0x30, 'frag\x00', 0x0, {0x66a4fc39, 0x9, 0x5, 0xf42beb1ae5289b54, 0x2}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x100000000, 0x0, 0x0, '\x00', 0x4}}}, {{@uncond, 0x0, 0x138, 0x180, 0x0, {}, [@common=@unspec=@nfacct={0x48, 'nfacct\x00', 0x0, {'syz1\x00', 0xfffffffffffff103}}, @common=@mh={0x28, 'mh\x00', 0x0, {0x8, 0xf4, 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x1, 0x4, 0xffffffffffffff00, 'pptp\x00', 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) 15:24:44 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) pwritev(r0, &(0x7f0000000500)=[{&(0x7f0000000240)="08cd9a0c901021dca335acb4072814dc94563790f87b5649109f1742015e89cd1410de4b29e26f310934800862b26551372b76157670435f7a50817d3de0f367c1d7579517fab050050a5cd8edeb917c3c4cecbf5458d8afa7c7a98b687b5a15e03d9673167604b42a0102a90cfff4a3d6c38f5a4f9274c511887631d697c51740b073f0feda34622a5ab13d2795b513867e601d55e0bfc747cdac9a28f1456af459ac9871b7186ded0f5f40726d1822c3e229c174f86bc5c2ce57128526be5fd6ad6842608b021c0884bd99326fe4f87b1c37910a9ca73638656c7efcb7c15b3d989615fbbce709aecd93", 0xeb}, {&(0x7f0000000340)="62d1eaacdf8259defed64b031bee6808cc95eeeb07a07b8e68d3205a6f98cbaf928eb909fd12de30cde823977bc2438024c7b11e11f47d9b2d60462f9fbc368e652711ac300f8ca1f3f5e4f345e34a52fe0ee080904bd067070e447b8ac39b0960ab6b8996dbded14369b579991127cdef83b55e409bbbdc28ecefbcf50d802373", 0x81}, {&(0x7f0000000000)="927abf5d677c519fb9a582beb56918aeac8767f65511ce01b9093de80fc709d50b369a286e624e12fc332b1c969d775cafc8876434c8dcec3a7c7464fd114679110fbc66fde599b3a8cc8e4ea24ede336a6e76ed6026e7816475ff8dc49ffcf844e9ec4cfe67", 0x66}, {&(0x7f0000000400)="6dcd96212a99945ad4fe5ae17d8622786a5679ceffc63235e89b99d6005f650430aa56fab5eb170a04600f8026808e8fe70433f398d38dea8e75844d5523ec380977c35abc54d39ea206e661237d2cf3d4bd858a2b7e4671b68707ea090b18ab3c2dea1a30c2383174b9b42070778210612764b198b1f62f61a19e60d4e49eeee2a688f56878059626ec00ade69e622da0393ba984d9ecef39161226388b07fff66c09f18817afb1bc5c2f8f70b1d2a71c57e710ec958fc422f8aa56cf61507ef6e9304fd09e606b22304b79736caaeae91fbd99d3ea631c03205f13dc8f8578a2f8ce79dd4edded2886c11a27e79b5cb5cb82f279116e8eba01ebb372af5d", 0xff}, {&(0x7f0000000180)="c4a5045070e942c321af28c1be", 0xd}, {&(0x7f00000001c0)="82a9a7", 0x3}], 0x6, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) dup2(r0, r0) 15:24:44 executing program 2: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7ff, 0xaaaaaaaaaaaad40, &(0x7f0000000040)=[{&(0x7f0000000080)="eb7fc86d4f66732e66617400020341000500077008f8", 0x16}], 0x8000, 0x0) 15:24:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000014c0)="11dca5055e0bcfec7be070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000620920144f88cd8bf8fa050030cea0e283d9b22703305b8fe23074bc015a41200581e5ef57c5000000000000000bcbb61c10b1f4451c"], 0x1}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001440)='/dev/sequencer2\x00', 0x2, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001600)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000001880)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x2200}, 0xc, &(0x7f0000001840)={&(0x7f0000001640)={0x1ec, r3, 0x800, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x28, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x14d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}]}, @TIPC_NLA_BEARER={0xec, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x6, @rand_addr="0111cdd6dcbf2ca66bfe93cee7f6c488", 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x4, @remote, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x8, @remote, 0x43}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @empty}}, {0x14, 0x2, @in={0x2, 0x4e20, @loopback}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_BEARER={0x8c, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6da7}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x8000, @loopback, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}]}]}, @TIPC_NLA_NODE={0x2c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10001}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x101}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x20000010}, 0x8010) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x40800, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000001500)={0x6, 0x0, [{0x5000, 0xbf, &(0x7f0000000180)=""/191}, {0x10000, 0x1000, &(0x7f0000000240)=""/4096}, {0x2, 0x6, &(0x7f0000000080)=""/6}, {0xf001, 0x51, &(0x7f0000001240)=""/81}, {0x5000, 0x8c, &(0x7f00000012c0)=""/140}, {0x3000, 0xc0, &(0x7f0000001380)=""/192}]}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) ioctl$SIOCRSGL2CALL(r4, 0x89e5, &(0x7f0000000100)=@netrom) 15:24:45 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x2f, 0x1, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) 15:24:45 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000100)=[@in={0x2, 0x4e23, @empty}, @in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x4e23, @local}, @in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e20, 0x80000001, @dev={0xfe, 0x80, [], 0x18}, 0x3ff}, @in={0x2, 0x4e21, @empty}], 0x7c) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x200000, 0x0) 15:24:45 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x4000, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10008}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xcc, r2, 0x621, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x44, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x39}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40400000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x274800000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x761b}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER={0x50, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x27}}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4}, 0x4004080) 15:24:45 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000040)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) 15:24:45 executing program 2: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb7fc86d4f66732e66617400020341000500077008f8", 0x16}], 0x7ffe, 0x0) 15:24:45 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f0000fb4000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="260f01cfc0d1a70f01cf36f30f2d400abaf80c66b884d3028b66efbafc0cec6f0f019cbe96d70f07ba4000ec", 0x2c}], 0x1, 0x4, &(0x7f00000002c0), 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x200}, {r0, 0x1}, {r0}, {r0, 0x80}, {r0, 0x210}, {r0, 0x4288}], 0x6, &(0x7f0000000180)={r1, r2+30000000}, &(0x7f00000001c0)={0x5}, 0x8) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) shmget$private(0x0, 0x4000, 0x204, &(0x7f0000aed000/0x4000)=nil) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f00000002c0)="92f8c66bd64a44e157ad86ed3e6bc7a140de7480ec0a27bdf6f5b056fc82736867f0241c8baeda5ba6836b3183fd3bbef2a7439a1f210457c23914e985fe1484af300659ac2a3c6a82880c9d98a077b88a34c6401157f10284506d5df2bcc45a4da0a2d2638ec38a25bb9718dfae94d94e53029a86556b32606303202aa2bb015301695a7e") 15:24:45 executing program 3: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x0, 0x400000) ioctl$CAPI_CLR_FLAGS(r1, 0x80044325, &(0x7f00000001c0)=0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000100)='trusted.overlay.nlink\x00', &(0x7f0000000140)={'U+', 0x9c}, 0x28, 0x3) r2 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x1, 0x80040) write$selinux_context(r2, &(0x7f00000000c0)='system_u:object_r:setrans_exec_t:s0\x00', 0x24) sendfile(r1, r2, &(0x7f0000000200), 0x4) [ 608.564627] kvm [14470]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 15:24:45 executing program 2: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x0, &(0x7f0000000040), 0x8000, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x8001, 0x2) r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)=""/197, 0xc5}, {&(0x7f0000000200)=""/232, 0xe8}, {&(0x7f0000000300)=""/172, 0xac}, {&(0x7f0000000480)=""/186, 0xba}, {&(0x7f0000000540)=""/192, 0xc0}], 0x5, &(0x7f0000001a40)=[{&(0x7f0000000600)=""/211, 0xd3}, {&(0x7f0000000700)=""/196, 0xc4}, {&(0x7f00000003c0)=""/116, 0x74}, {&(0x7f0000000800)=""/115, 0x73}, {&(0x7f0000000880)=""/170, 0xaa}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/2, 0x2}, {&(0x7f0000001980)=""/149, 0x95}], 0x8, 0x0) 15:24:45 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/connector\x00') setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x1082, 0x1, 0x14, 0x7, 0xf3}, 0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mq_notify(r1, &(0x7f0000000280)={0x0, 0x22, 0x1, @thr={&(0x7f0000000140)="62f755b74f3eb6f0690dbd69787da06fa861cc7a0974f0b6f927c83c63593c0d4a227ba1d1c2da4093a78e37b9d6715677cf49c0c48a23541bc4f6656fa7b3e32a3f026d0aad7a4bf7b0c263dbec7ed9fc6eb2e1ddc5c934049727379459c441106f9db899699a4c91320874eac88e5afe85b8396950c6ee327c72794f432339c09c62376200883793d7fc90a6c1fe40a0bfa1840d6319d09b078eb3dbe8629e8a66a1d097eb325dc564ba300a5745a316743bb6e268", &(0x7f0000000240)="810524b4a2551cf8f1f8399279056741aeb20cb276bd58898974d2cc186c9e637a"}}) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) 15:24:45 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0xbf, 0x40) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f00000000c0)) 15:24:45 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0x10102, 0x0) write$P9_RMKDIR(r1, &(0x7f00000002c0)={0x14, 0x49, 0x2, {0x80, 0x0, 0x5}}, 0x14) r2 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r2, 0xc0a85322, &(0x7f00000001c0)) ioctl$KVM_ARM_SET_DEVICE_ADDR(r2, 0x4010aeab, &(0x7f00000000c0)={0x1000, 0x4000}) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r2, 0xc0a85322, &(0x7f0000000100)) [ 608.790957] kvm [14493]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 [ 608.859543] kvm [14493]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 [ 609.430155] net_ratelimit: 22 callbacks suppressed [ 609.430159] protocol 88fb is buggy, dev hsr_slave_0 [ 609.441149] protocol 88fb is buggy, dev hsr_slave_1 [ 609.670178] protocol 88fb is buggy, dev hsr_slave_0 [ 609.675331] protocol 88fb is buggy, dev hsr_slave_1 [ 610.390176] protocol 88fb is buggy, dev hsr_slave_0 [ 610.395300] protocol 88fb is buggy, dev hsr_slave_1 [ 610.710165] protocol 88fb is buggy, dev hsr_slave_0 [ 610.715262] protocol 88fb is buggy, dev hsr_slave_1 [ 610.790149] protocol 88fb is buggy, dev hsr_slave_0 [ 610.795276] protocol 88fb is buggy, dev hsr_slave_1 15:24:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000014c0)="11dca5055e0bcfec7be070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000620920144f88cd8bf8fa050030cea0e283d9b22703305b8fe23074bc015a41200581e5ef57c5000000000000000bcbb61c10b1f4451c"], 0x1}}, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000000080)) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4203, r2, 0x67d, 0x100002) tkill(r2, 0x17) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 15:24:48 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) setsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000000300), 0x4) r1 = add_key(&(0x7f0000000040)='id_resolver\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000240)="fd71eee2f6aa8a81a114a26873bf4d7e851367f11f9f02f33c66bd77f27ec09cf57459dc5620eea7e89c877b33ead39d3938cebaa2f6b255c0f15b2849a15a53911ba6f54d6092193b216315ea0781d70a987bfe01b8f3edf9f69eb3dc155eef3d6fbe98c6", 0x65, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$negate(0xd, r1, 0x100000001, r2) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000000000)={0x100, 0x8, 0x5, 0x6, 0x4, 0x100}) 15:24:48 executing program 2: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb7fc86d4f66732e66617400020341000500077008f8", 0x16}], 0x8000, 0x0) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x200000, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000180)={0x0, 0x3e, "b01da0c22e257b5c401619e3132f125dd7b11a79edd8de916f748518b5832fb550840e053e1295804aa18ee04fac4969ea99d1656dc8c17835a71b726ac6"}, &(0x7f0000000200)=0x46) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={r1, 0x4, 0x10}, &(0x7f0000000280)=0xc) ioctl$NBD_DISCONNECT(r0, 0xab08) 15:24:48 executing program 4: open$dir(&(0x7f0000000080)='./file0\x00', 0x1c000, 0x69) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:24:48 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/prev\x00') ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000100)=@req={0x28, &(0x7f00000000c0)={'eql\x00', @ifru_addrs=@ax25={0x3, @null, 0x7}}}) ppoll(&(0x7f0000000180)=[{r0, 0x8100}, {r0, 0x1004}, {r0, 0x400}], 0x3, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000200)={0x9}, 0x8) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000140)=0x58fc942f) getsockname$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @multicast2}, &(0x7f0000000300)=0x10) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000240)=""/111) 15:24:48 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x6, 0x200000) lseek(r2, 0x0, 0x6) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) 15:24:48 executing program 2: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="eb7fc86d4f66732e66617472b60341000500077008f8", 0x16}], 0x8000, 0x0) 15:24:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x7b7c, &(0x7f00000014c0)="11dca5055e0bcfec7be070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000620920144f88cd8bf8fa050030cea0e283d9b22703305b8fe23074bc015a41200581e5ef57c5000000000000000bcbb61c10b1f4451c"], 0x1}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) sched_rr_get_interval(r1, &(0x7f0000000100)) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x17) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) setsockopt$sock_timeval(r0, 0x1, 0x0, &(0x7f0000000180)={0x77359400}, 0x10) ptrace$cont(0x9, r2, 0x0, 0x0) [ 611.444288] kvm [14521]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 [ 611.474657] kobject_add_internal failed for hci2 (error: -2 parent: bluetooth) [ 611.485103] Bluetooth: Can't register HCI device 15:24:48 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x18) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000240)={0xe, 0x1, 0x9, 0x0, 0x50, "1de21521254875d578a2ae9c4d1dd619c5a09da90e0e7f2ea4526d6bc977ddbdf667a4e76f16d3e29a1987383d29d10afcb96286d0923876f4d3d60b39c3cdf8e7b958cc7751654ea8617a02f270f260"}, 0x5c) 15:24:48 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x200) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x21) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) 15:24:48 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) r1 = fcntl$dupfd(r0, 0x406, r0) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, 0x7, {0x7, 0x1f, 0x5, 0x0, 0x5, 0x1489, 0x8001, 0x7}}, 0x50) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:24:48 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4001, &(0x7f00000001c0), 0x8000, 0x0) syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x9, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb7fc86d4f66732e66617400020341000500077008f8", 0x16}], 0x8000, 0x0) [ 611.589301] kvm [14521]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 15:24:48 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000000)={0x4, 0x102, "38585d74e902cece00d031bb2836b834fd030188c2e7f3612deebb76daa77480", 0x5, 0x6, 0x6, 0x6, 0x96}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) r1 = getgid() setgid(r1) 15:24:48 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x42000, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0x97fd}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={r2, 0x3f}, 0x8) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:24:48 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0x8, 0x0, 0x4000000a, 0xfffffffffffffffc], [0xc1]}) 15:24:48 executing program 2: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb7fc86d4f66732e66617400020341000500077008f8", 0x16}], 0x8000, 0x0) r0 = accept(0xffffffffffffff9c, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, &(0x7f0000000000)=0x80) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f0000000180)={0x0, 0x90}, &(0x7f00000001c0)=0x8) ioctl$void(r0, 0x5451) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000200)={0x1, 0x8000, 0xfffffffffffffff8, 0x20, r1}, &(0x7f0000000240)=0x10) 15:24:48 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x3ff) close(r0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x180, 0x0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f00000000c0)={0x3, 0xffffffffffff219f}) 15:24:48 executing program 2: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0xf1f5e16c2fc0dd7e) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)=0x0) r2 = gettid() setpgid(r1, r2) getsockname$unix(r0, &(0x7f0000000100), &(0x7f0000000180)=0x6e) syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb7fc86d4f66732e66617400020341000500077008f8", 0x16}], 0x8000, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) 15:24:48 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) timerfd_create(0x8, 0x80800) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) [ 611.979838] audit: type=1400 audit(1560525888.612:66): avc: denied { wake_alarm } for pid=14587 comm="syz-executor.5" capability=35 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=capability2 permissive=1 [ 611.982412] kvm [14587]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 15:24:51 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e22, @loopback}}, 0xb046, 0x2, 0x5a, 0x0, 0x6}, &(0x7f0000000080)=0x98) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000100)={r1, 0x10000, 0x10, 0x4, 0x3}, &(0x7f0000000240)=0x18) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000014c0)="11dca5055e0bcfec7be070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000620920144f88cd8bf8fa050030cea0e283d9b22703305b8fe23074bc015a41200581e5ef57c5000000000000000bcb1c10b1f4451c"], 0x1}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r4 = shmget(0x1, 0x3000, 0x1000, &(0x7f0000ffc000/0x3000)=nil) r5 = geteuid() getresgid(&(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000440)={{{@in=@broadcast, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000540)=0xe8) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000680), &(0x7f00000006c0)=0x8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f00000005c0)=0xc) shmctl$IPC_SET(r4, 0x1, &(0x7f0000000600)={{0xffffffff, r5, r6, r7, r8, 0xa0, 0x4}, 0x200, 0x9, 0x8, 0x7, r3, r3, 0x6}) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x17) ptrace$cont(0x9, r3, 0x1, 0x100000000) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000280)={r1, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}}, 0x24471489, 0xfffffffffffffffb, 0x3ff, 0x400, 0x8}, &(0x7f0000000340)=0x98) ptrace$cont(0x9, r3, 0x0, 0x0) 15:24:51 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0x4}, 0x68) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:24:51 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x0) write$vhci(r0, &(0x7f0000000100)=@HCI_EVENT_PKT={0x4, "c2096504ffca1d65e921d961505ca6820df31862fd4634b99a956a1d5cebc51cb736c37813ce93ffb1c6117d96b92e1745efc7c99ae23db5d00a04bb7f9b4cca232c196077d7a02b9bccc6903dbc850f35c07f70335efcf4827bc4aa1e5dee87a624381816ea08092cdfd59584c8471abf38fce0109734f0cb3966570cec61123bcf6fb3a8dad29992d4984c876455ef6330a4e5c99c0490e02deb142c413cd46326b570057aec1d56fcfcd76eb2684bf39b4d8628e35ce3061fe4cb37a9a634aa839c3511b486e5e4a31e"}, 0xffffffffffffff18) socket$inet6_sctp(0xa, 0x1, 0x84) close(r0) 15:24:51 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0x4, 0x0) syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb7fc86d4f66732e66617400020341000500077008f8", 0x16}], 0x8000, 0x0) 15:24:51 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000240)={0x0, 0xe0, "bb756ddb38a242098167b977f1f5b10fa530371b60437c5f5fb843ecf5cd46871256f6fea7245dfa84a9a80848775a419b4ead3b42af8538b9d818ad7d2068e04247d401d92bda2d303bbb5a9bccec5b2fb8507a657e2611c448d570928f2e00584bbd78f71a0d66a1a9cbd4e07d6c4995f2885f46f356ffee2c5eddc783c1c63c128be40e87e438a9db97215b1fece2a98d76b3e43ad96a4f1f704de7252836e3f7c26abf97704a5c998371dfd15c4aa78501f7a6dcfafd6ac0ee9fd225f88ff330277bc49d7d3640d0b84edd635e762eefb354c0f6daa918a0ad554d53ee38"}, &(0x7f0000000000)=0xe8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000340)={r1, @in6={{0xa, 0x4e23, 0xb4, @ipv4={[], [], @local}, 0x8}}}, &(0x7f0000000040)=0x84) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) 15:24:51 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) fcntl$notify(r1, 0x402, 0x0) 15:24:51 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x9, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, 0x0, 0x4107, 0x0, {0x4c, 0x18, {0x7, @media='ib\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x8040}, 0x4) 15:24:51 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x280) r1 = getuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0xc) getresuid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)=0x0) getresuid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)=0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x820400, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@loose='loose'}, {@cache_fscache='cache=fscache'}, {@debug={'debug', 0x3d, 0x6}}, {@dfltuid={'dfltuid', 0x3d, r1}}, {@debug={'debug', 0x3d, 0x9}}, {@version_9p2000='version=9p2000'}, {@access_user='access=user'}, {@access_client='access=client'}, {@uname={'uname', 0x3d, '/dev/input/mouse#\x00'}}, {@access_any='access=any'}], [{@uid_gt={'uid>', r2}}, {@permit_directio='permit_directio'}, {@audit='audit'}, {@fsuuid={'fsuuid', 0x3d, {[0x65, 0x62, 0x63, 0x0, 0x37, 0x3c, 0x77, 0x77], 0x2d, [0x7d, 0x77, 0x64, 0x31], 0x2d, [0x35, 0x64, 0x32, 0x63], 0x2d, [0x34, 0x7b, 0x32, 0x64], 0x2d, [0x62, 0x3f, 0x37, 0x7f, 0x39, 0x3d]}}}, {@euid_lt={'euid<', r3}}, {@euid_eq={'euid', 0x3d, r4}}]}}) getsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f00000000c0), &(0x7f0000000100)=0x4) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(0xffffffffffffffff) [ 614.560149] net_ratelimit: 18 callbacks suppressed [ 614.560155] protocol 88fb is buggy, dev hsr_slave_0 [ 614.570813] protocol 88fb is buggy, dev hsr_slave_1 15:24:51 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x2000, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000001100)={'broute\x00', 0x0, 0x3, 0x1000, [], 0x1, &(0x7f00000000c0)=[{}], &(0x7f0000000100)=""/4096}, &(0x7f0000001180)=0x78) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 15:24:51 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, '/dev/swradio#\x00'}, {0x20, 'i)'}, {0x20, ']mime_typemd5sum-'}, {0x20, 'vboxnet0vboxnet0]ppp1vmnet0cgroupproc{userppp1'}], 0xa, "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"}, 0x105e) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001200)={{{@in6=@initdev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @remote}}}, &(0x7f0000001300)=0xe8) stat(&(0x7f0000001340)='./file0\x00', &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001400)={{{@in=@multicast2, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@multicast2}}, &(0x7f0000001500)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001540)={0x0, 0x0}, &(0x7f0000001580)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000015c0)={0x0, 0x0}, &(0x7f0000001600)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001640)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@remote}}, &(0x7f0000001740)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000001780)={{{@in=@multicast2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@local}}, &(0x7f0000001880)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000018c0)={0x0, 0x0}, &(0x7f0000001900)=0xc) r9 = getegid() r10 = getgid() fsetxattr$system_posix_acl(r0, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000001940)=ANY=[@ANYBLOB="02000000010000000000000002000700", @ANYRES32=r1, @ANYBLOB="02000000", @ANYRES32=r2, @ANYBLOB="02000000", @ANYRES32=r3, @ANYBLOB="02000500", @ANYRES32=r4, @ANYBLOB="02000500", @ANYRES32=r5, @ANYBLOB="02000400", @ANYRES32=r6, @ANYBLOB="02000400", @ANYRES32=r7, @ANYBLOB="020024b5", @ANYRES32=r8, @ANYBLOB="040005000000000008000700", @ANYRES32=r9, @ANYBLOB="0800e400", @ANYRES32=r10, @ANYBLOB="10000000000000002000010000000000"], 0x74, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) 15:24:51 executing program 2: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x803, 0xaaaaaaaaaaaac8f, &(0x7f0000000040), 0x8000, 0x0) 15:24:51 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") prctl$PR_SVE_SET_VL(0x32, 0x11d6a) acct(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x0, 0x2, 0xff, 0x8, 0x2, 0x1}, &(0x7f0000000080)=0x20) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) [ 614.799237] kvm [14634]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 [ 614.855102] kvm [14634]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 [ 614.870137] protocol 88fb is buggy, dev hsr_slave_0 [ 614.875351] protocol 88fb is buggy, dev hsr_slave_1 [ 614.950174] protocol 88fb is buggy, dev hsr_slave_0 [ 614.955423] protocol 88fb is buggy, dev hsr_slave_1 [ 615.350176] protocol 88fb is buggy, dev hsr_slave_0 [ 615.355308] protocol 88fb is buggy, dev hsr_slave_1 [ 615.670190] protocol 88fb is buggy, dev hsr_slave_0 [ 615.675367] protocol 88fb is buggy, dev hsr_slave_1 15:24:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000014c0)="11dca5055e0bcfec7be070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000620920144f88cd8bf8fa050030cefc6effffffffffff5b8fe23074bc015a41200581e5ef57c5000000005470bdf6cbb61c10b1f4451c"], 0x1}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$cont(0x18, r1, 0x0, 0xfffffffffefffffe) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 15:24:54 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) pipe(&(0x7f0000000080)) close(r0) 15:24:54 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000dfd000/0x2000)=nil, 0x2000, 0xffffffffffffffff, 0x11, r0, 0x8000004) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000000)={0x3, 0x7, 0x8000}) ioctl$RTC_PIE_OFF(r0, 0x7006) 15:24:54 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhci\x00', 0x180fc) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x80201) close(r0) 15:24:54 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") creat(&(0x7f0000000100)='./file0\x00', 0x0) mount$bpf(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6d6f64653d3430303030303030303030f7f2202e71ff0a66a79449f8930f114c238fe8bd46d823af424bc5ef17ad7b467a9231ef0362e5cfebbaa581a4eaead6964fcc7ed2a1862086a1028b25715fed7cb5c64bc022a76622ca05501255b9bee6880fec8345fa231e5c6dcb708265cd38e9cf6a1aee8400"/133]) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f00000001c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) 15:24:54 executing program 2: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x0, &(0x7f0000000000), 0x8000, 0x0) 15:24:54 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10) shutdown(r0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) sendto$inet(r1, &(0x7f0000000100)="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", 0xfe, 0x90, &(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r2 = syz_open_dev$video(&(0x7f0000000680)='/dev/video#\x00', 0x7f, 0x440302) ioctl$VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f00000006c0)={0xc, 0x101, 0x3, 0x80000, 0xffffffffffffff9c}) close(r1) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x400000, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000640)={&(0x7f0000000400), 0xc, &(0x7f0000000600)={&(0x7f0000000480)=ANY=[@ANYBLOB='x\b\x00\x00', @ANYRES16=r5, @ANYBLOB="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"], 0x178}, 0x1, 0x0, 0x0, 0x804}, 0x80) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000340)={0xa0, 0x0, 0x3, {{0x1, 0x0, 0x100, 0x4, 0x1f, 0x3, {0x0, 0x6, 0x0, 0x4, 0x8, 0xe8, 0x1, 0x3, 0x5e, 0x4, 0x5, r4, r6, 0x8001, 0x401}}, {0x0, 0x12}}}, 0xa0) 15:24:54 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) ioctl$KVM_RUN(r0, 0xae80, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) r2 = fcntl$getown(r0, 0x9) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x214840, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000180)={r3, r0, 0x2}) 15:24:54 executing program 2: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb7fc86d4f66732e66617400020341000500077008f8", 0x16}], 0x8000, 0x0) removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=@random={'btrfs.', 'vfat\x00'}) 15:24:54 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @local}}, 0x4, 0x8}, &(0x7f0000000180)=0x90) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000001c0)={r2, 0x8, 0x1}, &(0x7f0000000200)=0x8) close(r0) 15:24:54 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x9c, &(0x7f0000000240)="3f4686e3bf0b86db2c9dcc7c6f83252b682cf6104a20da7a2a06f02dfeacc5e07a8bc938") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'veth0_to_hsr\x00', 0x100}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) ioctl$TIOCLINUX7(r4, 0x541c, &(0x7f0000000180)={0x7, 0x7}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x5, 0x3, 0x100000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) ioctl$TUNSETVNETLE(r4, 0x400454dc, &(0x7f00000001c0)=0x1) 15:24:54 executing program 2: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb7fc86d4f66732e66617400020341000500077008f8", 0x16}], 0x8000, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x200000, 0x0) [ 617.889430] device veth0_to_hsr entered promiscuous mode [ 617.941211] kvm [14687]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 [ 619.830195] net_ratelimit: 21 callbacks suppressed [ 619.830202] protocol 88fb is buggy, dev hsr_slave_0 [ 619.840648] protocol 88fb is buggy, dev hsr_slave_1 [ 620.070218] protocol 88fb is buggy, dev hsr_slave_0 [ 620.075587] protocol 88fb is buggy, dev hsr_slave_1 15:24:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000014c0)="11dca5055e0bcfec7be070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000620920144f88cd8bf8fa050030cea0e283d9b22703305b8fe23074bc015a41200581e5ef57c5000000000000000bcbb61c10b1f4451c"], 0x1}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$cont(0x18, r1, 0x2000000000005, 0x8) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r2 = semget(0x3, 0x4, 0x210) semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f0000000180)=""/4096) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 15:24:57 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) 15:24:57 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x400) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:24:57 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x420000, 0x0) r1 = semget(0x2, 0x0, 0x406) semctl$SEM_STAT(r1, 0x2, 0x12, &(0x7f00000002c0)=""/94) close(r0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x40080, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={0x0, 0xb1}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e21, 0x3, @ipv4={[], [], @local}, 0x401}}}, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000240)={0x7, 0x0, 0x202, 0xfffffffffffffff8, 0xffff, 0x1000, 0x8, 0xffffffffffffffc0, r3}, &(0x7f0000000280)=0x20) 15:24:57 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) write$selinux_attr(r0, &(0x7f0000000180)='system_u:object_r:sudo_exec_t:s0\x00', 0x21) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/commit_pending_bools\x00', 0x1, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000100)=0xfffffffffffffffb, 0x4) syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb7fc86d4f66732e66617400020341000500077008f8", 0x16}], 0x8000, 0x0) 15:24:57 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40100, 0x52) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000240)={{0x9f, @empty, 0x4e23, 0x0, 'fo\x00', 0x1, 0x10, 0x75}, {@multicast2, 0x4e23, 0x2001, 0x544d, 0xc0b, 0xfffffffffffffffc}}, 0x44) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f00000002c0)={{0x0, 0x5, 0x8, 0x9, '\x00', 0x6}, 0x1, [0x9, 0x4, 0x8, 0x3ff, 0xfffffffffffffff8, 0x9, 0x6, 0x3f, 0x4, 0xad3, 0x7fff, 0x2, 0x455, 0x400, 0xffffffffffff7fff, 0x2, 0x7, 0x7, 0xa755, 0x4, 0x1ff, 0x1ff, 0x8, 0x0, 0x0, 0x4fc7, 0x7fff, 0x3, 0x40, 0x2, 0x9, 0xffffffff, 0x40, 0x5, 0x8000, 0x93, 0xffffffffffff8000, 0xfff, 0x80000000, 0x5, 0x100000000, 0x3, 0x10001, 0x8, 0x4, 0x0, 0xfffffffffffffffd, 0xbe42, 0x3, 0x8, 0x7, 0x80000000, 0x5, 0xfa93, 0x7, 0xb97, 0x8, 0x1, 0x9, 0x5, 0x8001, 0x9, 0xfffffffffffffff8, 0x5, 0xffffffffffffffe0, 0x80000001, 0x10001, 0xe4, 0xbf, 0x6, 0x7, 0x1000, 0x1, 0x3, 0x7, 0xff, 0x4, 0x10001, 0x100, 0xffffffffffffff50, 0x4, 0xdf6, 0x1000, 0x75, 0x4, 0xfffffffffffffffb, 0x101, 0x9, 0xa000000000, 0x1, 0xa92e, 0x7, 0x3, 0x0, 0x6, 0x8, 0x9, 0x9, 0x0, 0x0, 0x20, 0x7, 0x0, 0x8, 0x6, 0x5, 0x3, 0x7, 0x0, 0x5, 0x5, 0x6, 0x2ff2, 0x9, 0x0, 0xffffffff, 0x40, 0x100, 0x3, 0x0, 0x2, 0x3, 0x1000, 0x0, 0xffffffffffffffff, 0x9, 0xfffffffffffffffb, 0x2], {0x0, 0x989680}}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000140)={{0x2, 0x4e20, @empty}, {0x307, @dev={[], 0xc}}, 0x2, {0x2, 0x4e21, @rand_addr=0x746}, 'ip6_vti0\x00'}) 15:24:57 executing program 2: getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=@random={'btrfs.', '-system\x00'}, &(0x7f0000000140)=""/133, 0x85) syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb7fc86d4f66732e66617400020341000500077008f8", 0x16}], 0x8000, 0x0) 15:24:57 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x8000000000000001) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:24:57 executing program 1: r0 = pkey_alloc(0x0, 0x1) pkey_free(r0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) recvfrom$inet(r1, &(0x7f0000000300)=""/146, 0x92, 0xf8dca39743cc4c33, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x22, 0x95, &(0x7f0000000000)="884f9122def4bbea3bf5f891f8ad7b7f52fb4a40424bc3ec267ed094e1af75ec6dbf", &(0x7f0000000240)=""/149, 0x5}, 0x28) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r1, 0x8000000) 15:24:57 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vsock\x00', 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f0000000240)={0xff, 0x5, 0x3ba, {}, 0x8, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x200000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x800, 0x60) ioctl$KDSKBLED(r5, 0x4b65, 0x400080) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_DELDEST(r6, 0x0, 0x488, &(0x7f0000000140)={{0x2b, @loopback, 0x4e20, 0x4, 'sed\x00', 0x8, 0x400, 0x4}, {@broadcast, 0x4e23, 0x0, 0x9672, 0x2, 0x5}}, 0x44) 15:24:57 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp\x00') ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000240)={0x7, 0x2, 'client0\x00', 0xffffffff80000000, "d037525fbe67feff", "03e9719257f9c71dc1fdada6be2b901ac0021cb153e829ce559314f983a25530", 0x1200000000, 0x81}) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x80000, 0x0) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/relabel\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000140)={r3, 0x0, 0x30}, &(0x7f0000000180)=0xc) 15:24:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000620920144f88cd8bf8fa050030cea0e283d9b22703305b8fe23074bc015a41200581e5ef57c5000000000000000bcbb61c10b1f4451c"], 0x1}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x1, 0x3) tkill(r1, 0x16) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x1ff, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 15:24:57 executing program 2: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb7fc86d4f66732e66617400020341000500077008f8", 0x16}], 0x8000, 0x0) dup2(0xffffffffffffff9c, 0xffffffffffffff9c) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x48180, 0x0) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000340)=r0) r1 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x1, 0x200) fanotify_init(0x4, 0x80400) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@loopback, @in=@broadcast}}, {{@in6=@empty}, 0x0, @in=@initdev}}, &(0x7f0000000280)=0xe8) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x80000000, 0x4000) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f0000000100)={0x1, 0x7f, 0x400, 0x800}) 15:24:57 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000240)={0xb, @output={0x50ca573d2fe76903, 0x1, {0x0, 0x9}, 0x4, 0x3}}) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000000)={0x8}, 0x4) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r1, 0x8000000) [ 620.778193] Unknown ioctl 1076646722 [ 620.790149] protocol 88fb is buggy, dev hsr_slave_0 [ 620.795331] protocol 88fb is buggy, dev hsr_slave_1 [ 620.817781] Unknown ioctl 1076646722 15:24:57 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x600000, 0xc1) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000180)=0x1) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r2, 0xd00, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x24, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x400}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000000c0)={0x3, 0x1, 0x0, 0x320, 0x5}, 0xc) close(r0) ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000000100)=0x0) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f0000000140)=r3) 15:24:57 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x80000000, 0x400100) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000200)={0xfffffffffffffffe, 0x40000fff, &(0x7f00000000c0)="26612e303ee71838282a01355b61b1cbf8bdc806aca395312200fa31c28bd928688e2ce8f81014d51f263d355497ab7789ab02410b9d00e1060f7e00425448a08ca8c7d3886ddd7d9fdf8abff852f4deee75b11a231f230e66f2cfdbc281fa317a348e08881700625731129a41fc2bdc9deea21dd63c2d814714fbacdf64057c7cf61c17758a09b350111e1b6740d14f74eec7c92a1592058944179852c8057bb23ae4de1cbacff67f4067e6e94b14b133ab5623855417de1e834340686a0a2d30fad057a042c1c2018f31f0938fd44b96aded58a97a4eb68c3c433d5587008dc1d7521acae98396e12d51", &(0x7f00000001c0)="84dd5cb48a801a1ca9359bf869b94feb9c81130013b497e27b01605c6493044c53937d79b6a8e8538f0c", 0xeb, 0x2a}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000240)={0x0, 0x1000, "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"}, &(0x7f0000001280)=0x1008) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000012c0)={0xf9b, 0x1, 0x20, 0x7, r2}, &(0x7f0000001300)=0x10) close(r0) 15:24:57 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000400)={0x0, @broadcast, @dev}, &(0x7f0000000440)=0xc) r2 = syz_open_dev$audion(&(0x7f0000000680)='/dev/audio#\x00', 0x8000, 0x80) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000740)='/dev/dlm-control\x00', 0x4000, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000780)='/dev/vcs#\x00', 0x7ff, 0x80) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000007c0)={r3, 0xbba, 0x80, r4}) sendmmsg(r0, &(0x7f00000006c0)=[{{&(0x7f0000000040)=@isdn={0x22, 0x401, 0xfffffffffffffbff, 0x80000001, 0xc6a}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000240)="ce91ab650af0b0a4449f86a634a33b6d36932e47817bd35847690c6c8b59a6f600dbfb205400d0e1153a1309a5d201571ac7230a59dcd7a623e713a0cbbde1af81b9e93b9cdb4d5fab90feee2eaee10ca85861f3d42255fbddacc31aeb3637950b758c09342ecbacf889bad27e2b04917089996a09a02421d4ce5d413cffc66f3e5c21d44564b5846faef7cb1d902fcc5e5eeb10e822bbfe3fa19b224b4c3f3db8fc88c81f0798ff7bf9f9378bfe822314df0362ac54219665d8ec16779ca20f9ba7c18d8ad136626ee800e1ea8cadfd3835da7ec19680271b6a712d4650634d65117d43acf6811956e86f8a7a6cd40495", 0xf1}, {&(0x7f0000000140)="6273ae8a4fc7d7081acf404e275cc66804b84a41387d402446083c456efe24633d1eea4e79caf56752c438b7c55282e23952bc77d03db269eacef6ac5d854fb3fc610ca2b64be113bb5c44e573c73974dea79379c6cd3e7903abb5ae4edfa1d41406bc4f0c12589065a678ece269b0772534f8fd80f7aef61c3cb9", 0x7b}, {&(0x7f0000000340)="26e4ef8ed5af6c3f89c2595c0f0ecb28f399218424953b76af1f36b4b797150b7d9ad912dc65267fbd7b67548ba5bfefbe220277b5c98b93b5d72bde4acd9d9b598bd85fd1009cc785adb7ab05c6ed58a719930f0bbfdb3e1052dea5aab8ef3596bbd2cfe49aabcf978aeaabbcb385156906ed0e0ef81f82ad437bd754a541d1af39d60bb2447d61b743cff9e4e00782a4d79e", 0x93}], 0x3}}, {{&(0x7f0000000480)=@can={0x1d, r1}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000500)="3b02ea0001a8d0527bbcc4f5b8d5e6232eb3943ac6d9500ac9b3f527e333e1927ccf13a9fd09a681ba3bdf7170d603e9b35670242a5b8c9a5ec9a62958d1db230895dd529c833ffa44acc4c4ab01ee93b88c34a014af7f11b032f3f98d40668c643950c233ba926ab37ae5bf70ebea7f492f955ab329d6ee334c75f92b477c4f167add17633950fe461a76267287f5256dec2a486133fd20e29344587393764fada10e6273564229a48eb9a30c", 0xad}, {&(0x7f00000005c0)="9904d8bb3d755087c3b1bab830df8d38804d52a514e915100adc1f87535449a39ab51a1a781b1170255228a90c4d9abba5f890bb140da2ca99ce406e0a2d3e77984342521df8bf0ae5512bbf1baf81e65fca63d94caced", 0x57}], 0x2, &(0x7f0000000680)}}], 0x2, 0x800) ioctl(r4, 0x8d8, &(0x7f0000000900)="02000000000000000100000973f115bbc81a2692c6b118f2d25b2033757f994eb6d292a335439cae9808c83d55f48a2546caddc81ae2e9680e931d8f5378091319f360e7c9099d4321e436de4d6c553c57b6010a3c29f492abe3eefbec7ad306") r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r7, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) 15:24:57 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x5, 0xb, 0x8000000000000008, 0x0, 0x1}, 0x3c) r0 = bpf$MAP_CREATE(0x2, &(0x7f0000000000)={0x3, 0x0, 0x77fffb, 0x0, 0x820005, 0x0}, 0x2c) bpf$MAP_CREATE(0x4, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x0, 0x20820000, r0}, 0x2c) 15:24:57 executing program 2: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="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", 0x19a, 0x3}], 0x8000, 0x0) r0 = request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000002c0)='\x00', 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$instantiate(0xc, r0, &(0x7f0000000300)=@encrypted_new={'new ', 'ecryptfs', 0x20, 'trusted:', 'vfat\x00', 0x20, 0x5}, 0x30, r1) 15:24:57 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhci\x00', 0x101000) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40, 0x0) write$P9_RWALK(r1, &(0x7f0000000140)={0x30, 0x6f, 0x1, {0x3, [{0x8, 0x4, 0x4}, {0x42, 0x3, 0x4}, {0xc1, 0x3}]}}, 0x30) open_by_handle_at(r0, &(0x7f0000000240)=ANY=[], 0x100000223fc) 15:24:57 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x7c, &(0x7f00000000c0)={r1}, 0xc) 15:24:57 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f00000000c0)=""/142) getsockname$tipc(r0, &(0x7f0000000000)=@id, &(0x7f00000001c0)=0x10) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000180)=0xf4240) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000080)=@HCI_VENDOR_PKT, 0x155) close(r1) [ 621.079541] kvm [14764]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 [ 621.110149] protocol 88fb is buggy, dev hsr_slave_0 [ 621.115310] protocol 88fb is buggy, dev hsr_slave_1 15:24:57 executing program 2: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb7fc86d4f66732e66617400020341000500077008f8", 0x16}], 0x8000, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x40) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x8, 0x7, 0x4}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000240)={0x0, 0xdc, 0x6, [0x3, 0xdc, 0x1, 0x5eb, 0x100000000, 0x0]}, &(0x7f0000000280)=0x14) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000002c0)={r1, 0x7, 0x6, 0x100000000, 0x5, 0x9, 0x2, 0x3f, {r2, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}}, 0x175, 0xfffffffffffffc00, 0x8001, 0x5, 0xfffffffffffffffb}}, &(0x7f0000000380)=0xb0) socket$unix(0x1, 0x5, 0x0) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4002, &(0x7f0000000000)=0x7, 0x3, 0x2) [ 621.190140] protocol 88fb is buggy, dev hsr_slave_0 [ 621.195448] protocol 88fb is buggy, dev hsr_slave_1 [ 621.948324] syz-executor.1 (14792) used greatest stack depth: 23440 bytes left [ 621.955853] syz-executor.1 (14787) used greatest stack depth: 22912 bytes left 15:25:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000014c0)="11dca5055e0bcfec7be070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000620920144f88cd8bf8fa050030cea0e283f6b22703305b8fe23074bc015a41200581e5ef57c50083d6a475210000000000000bcbb61c"], 0x1}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) ptrace$cont(0x3f, r1, 0x80b, 0xffffffffffffffff) 15:25:00 executing program 3: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x2, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000140)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) close(r1) prctl$PR_SET_SECUREBITS(0x1c, 0x20) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x2, 0x4) 15:25:00 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000040)={[{0x5, 0x400, 0x1, 0xb1d, 0x3d, 0x7ff, 0x200, 0x5, 0x1, 0xa72, 0x1, 0xfff, 0x7f}, {0x800, 0x4e9, 0x1800000, 0x1, 0x8, 0x4, 0x4, 0xf1, 0x6, 0xa, 0x8000, 0x2, 0xfffffffffffff37a}, {0xfffffffffffff801, 0x1, 0x3ff, 0x6, 0x2, 0xff, 0x4, 0x1, 0xfffffffffffffff9, 0x400, 0x1, 0x7, 0x9}], 0x7}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) 15:25:00 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r1 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x80800) connect$bt_sco(r1, &(0x7f00000000c0)={0x1f, {0x4, 0x6, 0x4, 0x9, 0x3ff, 0x6}}, 0x8) close(r0) 15:25:00 executing program 2: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb7fc86d4f66732e66617400020341000500077008f8", 0x16}], 0x8000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = accept4$rose(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) connect(r0, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x2, 0x3, 0x4, 0x3, {0xa, 0x4e24, 0x1, @mcast2, 0x4e79}}}, 0x80) 15:25:00 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f909, 0xfffdfffffffffffe, [], @string=&(0x7f0000000040)}}) [ 623.834081] audit: type=1400 audit(1560525900.462:67): avc: denied { connect } for pid=14805 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 15:25:00 executing program 2: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb7fc86d4f66732e66617400020341000500077008f8", 0x16}], 0x8000, 0x0) r0 = fcntl$getown(0xffffffffffffffff, 0x9) capget(&(0x7f0000000380)={0x20080522, r0}, &(0x7f00000003c0)={0x62, 0x80000001, 0xd79, 0x3, 0x8}) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x200000, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000080}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1a0}, 0x1, 0x0, 0x0, 0xc080}, 0x400c044) 15:25:00 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]}) fchmodat(0xffffffffffffffff, 0x0, 0x1) 15:25:00 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r1 = dup3(r0, 0xffffffffffffff9c, 0x80000) bind$isdn_base(r1, &(0x7f0000000080)={0x22, 0x5, 0x1, 0x3, 0x5}, 0x6) connect$pptp(r1, &(0x7f00000000c0)={0x18, 0x2, {0x2, @multicast2}}, 0x1e) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/dsp\x00', 0x4000, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000001500)=0x7, 0x4) close(r0) [ 623.918253] kvm [14803]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 [ 623.956305] kobject_add_internal failed for hci0 (error: -2 parent: bluetooth) 15:25:00 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000140)="0f2182baf80c66b85cbdbd8366efbafc0c66b8716d000066ef64f00fb1942fcc0f060f01d12e0f21a166b9a50a000066b80088000066ba000000000f300f07653e0fc7a90000d9ee", 0x48}], 0x1, 0xa, &(0x7f00000001c0), 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x10000000000002) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) r5 = gettid() syz_open_dev$mice(&(0x7f0000000280)='/dev/input/mice\x00', 0x0, 0x8000) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f00000001c0)=r5) ioctl$KDGKBMODE(r3, 0x4b44, &(0x7f0000000240)) 15:25:00 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000180)=0x8) syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb7fc86d4f66732e66617400020341000500077008f8", 0x16}], 0x8000, 0x0) [ 623.995024] Bluetooth: Can't register HCI device 15:25:00 executing program 1: [ 624.145180] kvm [14837]: vcpu2, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 [ 624.227601] kvm [14837]: vcpu2, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 [ 624.950138] net_ratelimit: 16 callbacks suppressed [ 624.950149] protocol 88fb is buggy, dev hsr_slave_0 [ 624.960292] protocol 88fb is buggy, dev hsr_slave_1 [ 625.270185] protocol 88fb is buggy, dev hsr_slave_0 [ 625.275315] protocol 88fb is buggy, dev hsr_slave_1 [ 625.350163] protocol 88fb is buggy, dev hsr_slave_0 [ 625.355318] protocol 88fb is buggy, dev hsr_slave_1 [ 625.750161] protocol 88fb is buggy, dev hsr_slave_1 [ 626.070195] protocol 88fb is buggy, dev hsr_slave_0 [ 626.075310] protocol 88fb is buggy, dev hsr_slave_1 [ 626.310140] protocol 88fb is buggy, dev hsr_slave_0 15:25:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000014c0)="11dca5055e0bcfec7be070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000620920144f88cd8bf8fa050030cea0e283d9b22703305b8fe23074bc015a41200581e5ef57c5000000000000000bcbb61c10b1f4451c"], 0x1}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 630.230217] net_ratelimit: 19 callbacks suppressed [ 630.235334] protocol 88fb is buggy, dev hsr_slave_0 [ 630.240471] protocol 88fb is buggy, dev hsr_slave_1 [ 630.470212] protocol 88fb is buggy, dev hsr_slave_0 [ 630.475307] protocol 88fb is buggy, dev hsr_slave_1 [ 631.190191] protocol 88fb is buggy, dev hsr_slave_0 [ 631.195319] protocol 88fb is buggy, dev hsr_slave_1 [ 631.510193] protocol 88fb is buggy, dev hsr_slave_0 [ 631.515341] protocol 88fb is buggy, dev hsr_slave_1 [ 631.590162] protocol 88fb is buggy, dev hsr_slave_0 [ 631.595361] protocol 88fb is buggy, dev hsr_slave_1 15:25:10 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x7d6, 0x2) close(r0) 15:25:10 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000200)=[{0xffffffffffffffc0, 0x6, 0x3, 0x2}, {0x8517, 0x1d9, 0x9, 0x1000000000}]}, 0x10) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1c3000, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r2, 0xc0485661, &(0x7f00000000c0)={0x1, 0x81affa4a0441afb9, @raw_data=[0x3, 0x10000, 0xfffffffffffffff7, 0x8, 0x3ff, 0x5, 0x2, 0x400, 0x4, 0x0, 0x1ff, 0x8, 0x1fffffffc, 0x3, 0x1]}) 15:25:10 executing program 1: r0 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) write$P9_ROPEN(0xffffffffffffffff, 0x0, 0xffde) r1 = gettid() getsockopt$inet6_mreq(r0, 0x29, 0x0, 0x0, 0x0) write$P9_RCLUNK(0xffffffffffffffff, 0x0, 0xc1ca49d734cbfc23) socket$inet6(0xa, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) write$P9_RMKNOD(0xffffffffffffffff, 0x0, 0xb58cc0e068c8f18) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, 0x0) tkill(r1, 0x1000000000016) 15:25:10 executing program 2: fstat(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xffff, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="4aae363ebfadfb59f5a967edc5cb89e93d8124ce4afeb6a83f8c271096d58a94ac33f273e59f58c9cf69f2f1a45f5c480d9187609b1c440a7dbeb9d291137f0e36889034f93048b09b1ae6fdff1d2920474d4e6e2a08882d4856b484ff3c7008fc35d10c542f6f77ab2ede8ae2a6d4eb1b5e87a2edcf86ea0ee5e476e5106ad88fa6da75275bb4ddb8aa63ca348a9b73d275fea5452696e3ddac8bc8cb52b42a0f", 0xa1, 0x4}, {&(0x7f0000000200)="00568042b3c87e2ea980bd70097ee9abb9a408a33e44a0c2b0ed85d7c59233cd5d8a1831bcbd613d7d5e494fc7eb815cce", 0x31, 0x3}], 0x40000, &(0x7f0000000480)=ANY=[@ANYBLOB="757365667265652c657569643d02aaae5c9a22c743bc319cd07f65046e8f4ef13323c75d6d7d024a46774fa91acc5ebccdcfe354f9b4b0344a2f506bb7cc88764eda6fe91bfbe824e0f27f66ded3877a0d069e4d621f59459fcd78440e450fb280f5826a7611c2f166e852d6394a1323d908317d21c8f870004bafc1aa0255dfd1e457148f8a25d5efa7bf6df7943bfe585dcd3ad28cd25876ce12849a7906f1825a7121e96b81c476ae5c00f522ccb1c3df0e8e6e9857a45433272394fee9abf2831007bc811a2dc0828dcaff5d93b6dc4fed42469d2f0e5ca711da7489efc7812ad1d7a0b7b7a504", @ANYRESDEC=r0, @ANYBLOB=',smackfsroot=vfat\x00,permit_directio,defcontext=sysadm_u,audit,dont_hash,subj_user=vfat\x00,dont_appraise,\x00']) listxattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=""/23, 0x17) syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb7fc86d4f66732e66617400020341000500077008f8", 0x16}], 0x8000, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000300)='/dev/qat_adf_ctl\x00', 0x20000, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000340)={0x28, 0x2, 0x0, {0x5, 0x400, 0x1000}}, 0x28) 15:25:10 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008911, &(0x7f0000000180)="11dca5055e0bcfec7ce070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$int_out(r1, 0x5460, &(0x7f0000000140)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80800, 0x164) write$P9_RFLUSH(r3, &(0x7f00000001c0)={0x7, 0x6d, 0x1}, 0x7) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0xffffffffffffffff) fcntl$notify(r0, 0x402, 0x10) r5 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000000, r5) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/policy\x00', 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x0, r6, 0x1}) 15:25:10 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000014c0)="11dca5055e0bcfec7be070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000620920144f88cd8bf8fa050030cea0e283d9b22703305b8fe23074bc015a41200581e5ef57c5000000000000000bcbb61c10b1f4451c"], 0x1}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x80, 0x0) ioctl$VIDIOC_G_SLICED_VBI_CAP(r2, 0xc0745645, &(0x7f0000000180)={0x6, [0x7, 0x6, 0x5, 0x80, 0x3, 0x2, 0x93, 0x100000001, 0x2, 0x3, 0x7, 0x7629, 0x0, 0x1f, 0xbbb, 0x2, 0x80000000, 0x4, 0x200, 0x0, 0x6, 0x7fff, 0x9, 0x10001, 0x4, 0x6, 0xffffffffffff8001, 0x8000, 0x100, 0xffffffffffff9a10, 0xbec, 0x6, 0x1200000, 0xb8, 0xea, 0xc225, 0x8, 0x10000, 0x9fa9, 0x400, 0x401, 0x78, 0x6, 0x5b6, 0x9, 0x10000, 0x80, 0xdb], 0x6}) ptrace$cont(0x9, r1, 0x0, 0x0) 15:25:10 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000014c0)="11dca5055e0bcfec7be070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="200000620920144a4f3a0896972d4c30cea0e2000000926a693b01cbb6dfe81c10b1f4451c000000080029cb80825754bf0594647cb7d827110cdabe119afcd50e4a0d5d0f403f0e62cc47b595edb89c054a44b08cb9cb0219bb74391214b74b06d64396a25d2e994a6db1ce437a0c6a26118dc87173178d12e9622f03000000000000000000"], 0x1}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) r2 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x1c, 0x80000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e20, 0x1, @local, 0x9}}, [0x3, 0x7, 0x100000001, 0xffffffffffffff08, 0x2, 0x101, 0x8, 0x599, 0x2, 0x7, 0x101, 0x4, 0x0, 0x8, 0x8]}, &(0x7f0000000400)=0x100) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000500)={r3, 0xac, &(0x7f0000000440)=[@in6={0xa, 0x4e23, 0x10000, @ipv4={[], [], @remote}, 0x5cddb36f}, @in6={0xa, 0x4e24, 0x8, @ipv4={[], [], @local}, 0x80000001}, @in6={0xa, 0x4e24, 0xb7, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xb}}, 0x2}, @in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e21, 0x3ff, @mcast2, 0xff}, @in6={0xa, 0x4e22, 0x10001, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000540)=0x10) syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ptrace$cont(0x18, r1, 0x0, 0x400) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) getrusage(0xffffffffffffffff, &(0x7f0000000180)) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f00000000c0)=r1) 15:25:10 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) close(r0) 15:25:10 executing program 2: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000100)={0x85, 0x5, 0x5, 0x1000, 0x0, 0x7331, 0x8}) 15:25:10 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000080)=0x7, &(0x7f00000000c0)=0x2) close(r0) 15:25:10 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$KVM_RUN(r1, 0xae80, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f00000001c0)={0x7, &(0x7f0000000180)=[{0xfff, 0x200}, {0x8, 0xfffffffffffffff7}, {0x200, 0x3}, {0x800, 0x6612}, {0xffffffffffffadf4, 0x7}, {0x10001}, {0x3, 0x8}]}) r3 = socket$key(0xf, 0x3, 0x2) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getgid() r7 = getgid() getgroups(0x1, &(0x7f0000000400)=[0xee01]) lsetxattr$system_posix_acl(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="02000000010003000000000002000600", @ANYRES32=r4, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040002000000000008000200", @ANYRES32=r6, @ANYBLOB="3339f386", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="10000200000000002000060000000000"], 0x4c, 0x2) close(r0) flistxattr(r3, &(0x7f0000000080)=""/134, 0x86) 15:25:10 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x2002, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r1, 0x5385, &(0x7f0000000140)={0x9c, ""/156}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) 15:25:11 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb7fc86d4f66732e66617400020341000500077008f8", 0x16}], 0x8000, 0x0) dup2(0xffffffffffffff9c, 0xffffffffffffff9c) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x48180, 0x0) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000340)=r0) r1 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x1, 0x200) fanotify_init(0x4, 0x80400) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@loopback, @in=@broadcast}}, {{@in6=@empty}, 0x0, @in=@initdev}}, &(0x7f0000000280)=0xe8) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x80000000, 0x4000) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f0000000100)={0x1, 0x7f, 0x400, 0x800}) 15:25:11 executing program 2: syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb7fc86d4f66732e66617400020341000500077008f8", 0x16}], 0x8000, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000100)={0xf, @sdr={0x3f337f5f, 0x56c}}) 15:25:11 executing program 3: ioctl$ION_IOC_ALLOC(0xffffffffffffff9c, 0xc0184900, &(0x7f0000000080)={0x4, 0x0, 0x1, 0xffffffffffffff9c}) r1 = geteuid() getresgid(&(0x7f00000000c0)=0x0, &(0x7f0000000200), &(0x7f0000000240)) fchown(r0, r1, r2) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/policy\x00', 0x0, 0x0) sendmsg$tipc(r3, &(0x7f00000001c0)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x1, 0x3}, 0x4}}, 0x10, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x40d1}, 0x40004) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)=0x8) r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r4, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) ioctl$DRM_IOCTL_SET_VERSION(r3, 0xc0106407, &(0x7f0000000280)={0x7, 0xffffffff, 0xd727, 0x800}) close(r4) [ 634.453956] kvm [14909]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 15:25:11 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f0000fb4000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="260f01cfc0d1a70f01cf36f30f2d400abaf80c66b884d3028b66efbafc0cec6f0f019cbe96d70f07ba4000ec", 0x2c}], 0x1, 0x4, &(0x7f00000002c0), 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x200}, {r0, 0x1}, {r0}, {r0, 0x80}, {r0, 0x210}, {r0, 0x4288}], 0x6, &(0x7f0000000180)={r1, r2+30000000}, &(0x7f00000001c0)={0x5}, 0x8) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) shmget$private(0x0, 0x4000, 0x204, &(0x7f0000aed000/0x4000)=nil) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f00000002c0)="92f8c66bd64a44e157ad86ed3e6bc7a140de7480ec0a27bdf6f5b056fc82736867f0241c8baeda5ba6836b3183fd3bbef2a7439a1f210457c23914e985fe1484af300659ac2a3c6a82880c9d98a077b88a34c6401157f10284506d5df2bcc45a4da0a2d2638ec38a25bb9718dfae94d94e53029a86556b32606303202aa2bb015301695a7e") 15:25:11 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f00000010c0)=@HCI_EVENT_PKT={0x4, "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"}, 0x1001) close(r0) 15:25:11 executing program 2: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x8b, 0x2, &(0x7f0000000180)=[{&(0x7f0000000100)="6821719410c00736aae87edc153e1aa78478deb96fa40c02ec377157679b5249f6248bcbc779be27bbfe1b7355249c4964b72254eea7c741b91362d774cfa921ae819de315cd7e59b581e236062035d651c9539c8f59f4c01c32b1e40babc169a6e59d4db64ef9845e763ca5", 0x6c, 0x3}, {&(0x7f0000000480)="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", 0x1000, 0xf04}], 0x8000, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x101000, 0x0) stat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001480)={{{@in6=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in6=@empty}}, &(0x7f0000001580)=0xe8) syz_mount_image$jfs(&(0x7f0000000280)='jfs\x00', &(0x7f00000002c0)='./file0\x00', 0x3f, 0x1, &(0x7f0000000340)=[{&(0x7f0000000300)="ef59ef4625225977f5f5e241c2663d64b4ed17cb6eb7", 0x16, 0x1010000}], 0x4, &(0x7f00000015c0)={[{@noquota='noquota'}], [{@appraise_type='appraise_type=imasig'}, {@smackfstransmute={'smackfstransmute', 0x3d, '/dev/vga_arbiter\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x7f, 0x37, 0x0, 0x39, 0x7d, 0x7b, 0x61, 0x7e], 0x2d, [0x39, 0x37, 0x61, 0x38], 0x2d, [0x62, 0x0, 0x33, 0x65], 0x2d, [0x39, 0x36, 0x36, 0x36], 0x2d, [0x7f, 0x77, 0x38, 0x38, 0x32, 0x77, 0x7e, 0x73]}}}, {@fowner_lt={'fowner<', r1}}, {@uid_gt={'uid>', r2}}]}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x113, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, [], 0x22}, 0x2}, {0xa, 0x4e21, 0x3, @rand_addr="f589cac0255325c652756ae56b28a647", 0x2}, r3, 0x3}}, 0x48) ioctl$RTC_EPOCH_SET(r0, 0x4008700e, 0xfffffffffffffff8) open(&(0x7f0000000000)='./file0\x00', 0x800, 0x100) [ 635.350151] net_ratelimit: 16 callbacks suppressed [ 635.350156] protocol 88fb is buggy, dev hsr_slave_0 [ 635.365052] protocol 88fb is buggy, dev hsr_slave_1 [ 635.670177] protocol 88fb is buggy, dev hsr_slave_0 [ 635.675571] protocol 88fb is buggy, dev hsr_slave_1 [ 635.750141] protocol 88fb is buggy, dev hsr_slave_0 [ 635.755948] protocol 88fb is buggy, dev hsr_slave_1 [ 636.150173] protocol 88fb is buggy, dev hsr_slave_1 [ 636.470171] protocol 88fb is buggy, dev hsr_slave_0 [ 636.475378] protocol 88fb is buggy, dev hsr_slave_1 [ 636.710171] protocol 88fb is buggy, dev hsr_slave_0 15:25:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000014c0)="11dca5055e0bcfec7be070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000062bc2c95b453aa601406248601a91f0920144f88cd8bf8fa050030cea0e283d9b22703305b8fe23074bc015a41200581e5ef57c50000"], 0x1}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) process_vm_writev(r1, &(0x7f0000000400)=[{&(0x7f0000000040)=""/63, 0x3f}, {&(0x7f0000000080)}, {&(0x7f0000000180)=""/70, 0x46}, {&(0x7f0000000200)=""/148, 0x94}, {&(0x7f00000002c0)=""/129, 0x81}, {&(0x7f0000000380)=""/86, 0x56}], 0x6, &(0x7f0000000100), 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x1450c1, 0x0) ioctl$VIDIOC_ENUMINPUT(r2, 0xc050561a, &(0x7f0000000480)={0x43, "9e2bfa846ff1eed0cdbdf1236f1e0f0c6a82677c77ee4e9b3daf47d494ef5e2e", 0x2, 0x1000, 0x1, 0x8, 0x800, 0xe}) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 15:25:13 executing program 5: r0 = semget$private(0x0, 0x4, 0x80) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000180)=[0x10000, 0x7fff, 0x7]) r1 = syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0x5, 0x8200) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$VIDIOC_G_AUDIO(r1, 0x80345621, &(0x7f00000001c0)) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r4, 0xc008ae09, &(0x7f0000000240)=""/245) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x18000, 0x0) write$P9_RATTACH(r5, &(0x7f0000000080)={0x14, 0x69, 0x1, {0xa0, 0x2, 0x3}}, 0x14) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r6, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) 15:25:13 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:lirc_device_t:s0\x00', 0x23, 0x0) 15:25:13 executing program 2: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb7fc86d4f66732e66617400020341000500077008f8", 0x16}], 0x8000, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x880, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000300)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000380)={0x13, 0x10, 0xfa00, {&(0x7f0000000100), r1, 0x2}}, 0x18) 15:25:13 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f0000fb4000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="260f01cfc0d1a70f01cf36f30f2d400abaf80c66b884d3028b66efbafc0cec6f0f019cbe96d70f07ba4000ec", 0x2c}], 0x1, 0x4, &(0x7f00000002c0), 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x200}, {r0, 0x1}, {r0}, {r0, 0x80}, {r0, 0x210}, {r0, 0x4288}], 0x6, &(0x7f0000000180)={r1, r2+30000000}, &(0x7f00000001c0)={0x5}, 0x8) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) shmget$private(0x0, 0x4000, 0x204, &(0x7f0000aed000/0x4000)=nil) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f00000002c0)="92f8c66bd64a44e157ad86ed3e6bc7a140de7480ec0a27bdf6f5b056fc82736867f0241c8baeda5ba6836b3183fd3bbef2a7439a1f210457c23914e985fe1484af300659ac2a3c6a82880c9d98a077b88a34c6401157f10284506d5df2bcc45a4da0a2d2638ec38a25bb9718dfae94d94e53029a86556b32606303202aa2bb015301695a7e") 15:25:13 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) r1 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x6, 0x200000) mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x30, r1, 0x9) 15:25:13 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000000c0)={0x0, 0x0, 0x2, 0x0, [], [{0x100000000, 0x0, 0x5, 0x8, 0x9239, 0x9}, {0x6, 0x3, 0x40, 0x82, 0x101, 0x5}], [[], []]}) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0xb0) close(r0) 15:25:13 executing program 2: r0 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x1a3c, 0x40) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000002c0)={r0, &(0x7f0000000300)="23f46cad7f12a28ce93aa5b1e854544bd9fba8d7c54b8d807ad925ad1fc93ee3a8005d5a7bc77295da2e24b015e7bad3992806d1a413f59e28d783b9c782279269c7df229ec01ebd8b802148e1ed83a553425acc0cf676d62e9efc21b86bbac74c87de73f0368626e689a12b01cb666035bae6d116ab39e03ec3916f0c4734f078e2b58701c5765e1c971e2559e8f213e441b9b8ee3c89735e360c9582499912ad9047dddf83b9", &(0x7f0000000240)=""/107}, 0x18) ioctl$TIOCSRS485(r0, 0x542f, &(0x7f0000000180)={0x0, 0x4, 0x6}) syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb7fc86d4f66732e66617400020341000500077008f8", 0x16}], 0x8000, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x7, 0xa0040) write$P9_RREADLINK(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="10eeff0017020007002e2f66696c6538"], 0x10) 15:25:13 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f0000fb4000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="260f01cfc0d1a70f01cf36f30f2d400abaf80c66b884d3028b66efbafc0cec6f0f019cbe96d70f07ba4000ec", 0x2c}], 0x1, 0x4, &(0x7f00000002c0), 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x200}, {r0, 0x1}, {r0}, {r0, 0x80}, {r0, 0x210}, {r0, 0x4288}], 0x6, &(0x7f0000000180)={r1, r2+30000000}, &(0x7f00000001c0)={0x5}, 0x8) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) shmget$private(0x0, 0x4000, 0x204, &(0x7f0000aed000/0x4000)=nil) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f00000002c0)="92f8c66bd64a44e157ad86ed3e6bc7a140de7480ec0a27bdf6f5b056fc82736867f0241c8baeda5ba6836b3183fd3bbef2a7439a1f210457c23914e985fe1484af300659ac2a3c6a82880c9d98a077b88a34c6401157f10284506d5df2bcc45a4da0a2d2638ec38a25bb9718dfae94d94e53029a86556b32606303202aa2bb015301695a7e") 15:25:13 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x167000, 0x0) close(r0) [ 637.258445] kvm [14957]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 15:25:13 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000040)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) 15:25:14 executing program 2: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0x7ff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb7fc86d4f66732e66617400020341000500077008f8", 0x16}], 0x8000, 0x0) gettid() [ 637.399023] kvm [14994]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 15:25:16 executing program 0: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000014c0)="11dca5055e0bcfec7be070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000620920144f88cd8bf8fa050030cea0e283d9b22703305b8fe23074bc015a41200581e5ef57c5000000000000000bcbb61c10b1f4451c"], 0x1}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) timerfd_gettime(r1, &(0x7f0000000080)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:25:16 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x0, 0x0) write$vhci(r0, &(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, "c85d7f3f4070b1bf9bf8919c1011feeac5980ff49e333e6c3c58a6e25a32a4b601b100c0fe46457f65fca5cd5b99515fe88860917acaa90ce0f7e9ae9b9daeeb2d9b4cd774903f1fdd472ee5fb1320"}, 0x50) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) r2 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x8, 0xc1) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f00000000c0)=0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 15:25:16 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x40200, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video35\x00', 0x2, 0x0) r3 = fcntl$getown(r0, 0x9) fcntl$getownex(r0, 0x10, &(0x7f0000000880)={0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000008c0)={0x0, 0x0}, &(0x7f0000000900)=0xc) r6 = getegid() r7 = getpgrp(0xffffffffffffffff) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getegid() r10 = getpgrp(0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000a00)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@loopback}}, &(0x7f0000000b00)=0xe8) r12 = getegid() sendmsg$netlink(r1, &(0x7f0000000bc0)={&(0x7f00000000c0)=@proc={0x10, 0x0, 0x25dfdbfd, 0x4}, 0xc, &(0x7f0000000840)=[{&(0x7f0000000100)={0x10, 0x13, 0xa2094e8b6b6af3d2, 0x70bd28, 0x25dfdbfb}, 0x10}, {&(0x7f0000000180)={0x6ac, 0x1d, 0x900, 0x70bd2b, 0x25dfdbfb, "", [@nested={0x1c, 0x79, [@typed={0x14, 0x86, @ipv6=@dev={0xfe, 0x80, [], 0x1b}}, @generic="f84e"]}, @generic="8721579a44b60ea82bd114dabf3a6141fc2af13d4b12fc047c6819b487754944faee3ff627a7972544fd087e143fcb00f0ba6821acd6732327c587efeb819d2d5d456290d665fa55005281b7bdf714d8702b1457e6711e07753a00e58b048886c8e07ee3f3b104e1bffa19b1da98e176ee3f4443596b32a55aef3b9f9bfa80db70798e2000884f5d7ffd980dbc9bd6e7c9246df2776be4dd6e746f78ca45db7e6d50f1875b4937e617fc", @nested={0xb4, 0x31, [@typed={0x8, 0x3a, @u32=0x86}, @typed={0x4, 0x12}, @typed={0x14, 0x84, @binary="d22a56f0f1830de5e6f50e6ea1"}, @generic="cdb6f69cff324bfd29577c032ef8c3d7be2b7c34f6295d86d186065f592d34d202b8c92f5a06b7abb11ac0424de518ca073bc40666f1579c8b9e87641574b9788051ab6a0d4967c265688e44330c09da919c9e53474ceeb36fd2260cba93d5cc7e060ee1ebb773635da7da2d9e087c2c54b597a1e6fa71f99bda6235f4", @typed={0x4, 0x2c}, @typed={0x8, 0xc, @fd=r2}, @typed={0x4, 0x2}]}, @typed={0x8, 0x11, @ipv4=@multicast1}, @nested={0x1e0, 0x8f, [@generic="92ad6a4bf19afe3b044675c071de207047beb5067227e7286cc5583e120bf6b9b9dfec2140ad7b5613f77a9a83f102ea58b7131a1d55cb24130c03b2eb30eb87ed4c2b00c8d64ef544be0be4e2e43b07338a8398a34bd7ee80229832d0", @generic="af3bde1733b73a078d2fc154b72910184d1113e3984e4aab7c8d0c47c23fa4a1268c326c0f13b6da32cbd41a9ffb41e5dac41fd5a06fa8efdac7cdc5a29dc732f464416b5cc90873c169ca5bde82568e153b8b3e2f4508062f33011eea7fff75715517255726c97260205cb2f6c6cc9f8107a5e1df72438c28d79b5cdec7f2e456061c5e6ecb20ac24a8ec05b8c1d4eadea83a1f6c48a75e81ed255f1cf84f09b64694398ce6a72eab14efef5e8c23354404cc72c02b9be3", @typed={0x8, 0xc, @fd=r0}, @generic="980304a7cf2c524f3a122511927b2fe91bf20e78560afd8022ebe107719a1beed8e1afe2eb7c0f9ddefe5830086f3c45c7bf8999895232d5c2637cc269af9f8f", @typed={0xc, 0x8a, @u64=0x6}, @typed={0x40, 0x4, @binary="ea6473771a7701370e7137c5d46dac9ad19904966603a85e3fb1ba10ad69e2a8a042ed8c970ca72225c4f71d1fa0f62bb83cff96d8fefe9d1f"}, @typed={0x8, 0x72, @pid=r3}, @typed={0x10, 0x36, @str='/dev/vhci\x00'}, @generic="2c3063b7bde8517e2ae2143a7f26338bdc50d5909a00c56c0c25f0"]}, @nested={0x338, 0x38, [@typed={0xc, 0x27, @u64=0x2}, @generic="26ee113272e8ee24878d291c0e8bc9c0c218de2067d69b98cdfd35dfeda8af7782bb879c2390aef57ca9b907ccae3af58321010f6a94b2eac655a223cd2b4383dc61bcce6d9a9711080bb3f89c43fa5a6d308b68a321a36d784a0d354a0b6772a21c811883359097c8fb3f60f5b5754ad0fdea5ac3a9e0229575f99478f2092382a07d4c0482c9423f8b0d3bc05c67b15b5bf8c5d261dae55b48666924949f4bb59c6d2b38e53963868cc9ba579559d2d7503109cf6fb7d1e08b2d5e73a7c5f1fd2fc0d02da7dd40a4f2f1192ea1f1dc4ce8d98cf62f3217f55ffc38d25de3926305a634101f96db7ab717a3563d9d8c9f008a32cb3e77", @generic="d1c46e3ade2e6de3ca0af2a4fe2f8159c716133b01056c98432957c90fb896e7ae85cf04519660431f84024749de25f6d5d03ccb70a25cd8c2a4fb925bcea2a151a50d846f0fe062ca3b2ed7dd5a484843c883e924938c93a75008fa803e40b31fa3e7facf1d8fb13557da644d3e513f53dd32d35dc475051644ae4aa2d130cbffe72f2207c484e322fbec3ed9c93d878471eb83f089466d8184bd9f9db71a213af0263c6c058f5ab329ce429e20ac1bd2fff276c6740e18193095e885c8dd8e436c24abad9ddd45f19a3d76ae19d2fa699c76953e0db736192544a4c25442dc", @generic="f4765f88e6ba73918d9635bf539faef3e30a4d750ca5e9229cb7a2829cdcdc9b735c3e82cab8c631611675031d00c1604f1ec0dd2a2dd898e89e73938f41a6c84be6c352c7226347b8e43ce9fa9f6c6e", @typed={0xc, 0x67, @u64=0x9b73}, @typed={0x8, 0x95, @ipv4=@empty}, @typed={0x8, 0x18, @fd=r0}, @generic="40f3555207ed5e3d934b89e04b829ec61939f61e08", @generic="2d2eb1bb92366ed29c2e76fd1b3c871e4085e14bdf7ffda239d55d3f1f7ae9d3cc956a188be685f28d909f29a01fe0ab519d2f06cdeb023cee1f54b0a6c2ce19d6332097d9361bc2574b71b0176aba511d0a5ae8699190309d65267f4dc31def382199f57e9ac7a0b5441e98448fcc8fe28f7fb9c1ad35821ea70de701df4f17c0c0b8a6d2ba81ac8dd46c72f17e26bcc342922ec0eae238dece5b003d2e4c573472f546338fb4d38836e833f701307c746826411cf09efa5b807629426584a87048ba2833ac2c53199379d0da9be533"]}]}, 0x6ac}], 0x2, &(0x7f0000000b40)=[@cred={{0x1c, 0x1, 0x2, {r4, r5, r6}}}, @cred={{0x1c, 0x1, 0x2, {r7, r8, r9}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {r10, r11, r12}}}], 0x78, 0x8010}, 0x1) close(r0) 15:25:16 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x3}) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x40, 0x0) accept4$alg(r2, 0x0, 0x0, 0x800) 15:25:16 executing program 2: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000100)={0x852e, 0x6d, 0xa7, 0x200}, 0x10) getpeername$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000280), 0x4) getsockname(r0, &(0x7f00000001c0)=@caif=@dbg, &(0x7f0000000240)=0x80) syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb7fc86d4f66732e66617400020341000500077008f8", 0x16}], 0x8000, 0x0) 15:25:16 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_crypto(0x10, 0x3, 0x15) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) 15:25:16 executing program 2: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb7fc86d4f66732e66617400020341000500077008f8", 0x16}], 0x8000, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x10000, 0x101) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000100)={{0x3, 0x0, 0xff, 0x0, 0x9}, 0x5d, 0x1, 0x3}) [ 640.234384] binder: 15007:15011 ioctl 4018620d 200000c0 returned -22 [ 640.262552] kvm [15009]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 15:25:16 executing program 1: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000080)) 15:25:16 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x80000) ioctl$SNDRV_TIMER_IOCTL_STATUS(r1, 0x80605414, &(0x7f00000000c0)=""/4096) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:25:17 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x1, 0x7, 0x7, 0x2, 0x8}) r1 = syz_open_dev$vbi(&(0x7f0000000200)='/dev/vbi#\x00', 0x2, 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) ioctl$VIDIOC_S_PRIORITY(r1, 0x40045644, 0x2) syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x2462d742, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB="000000d9946feb88d03df5ec808af7d95f6e3009227299cc09a178f446a1e7fcbbaada15d59e2deb1936932e982991d2804d5d72c268e12fd6286b4ce744abbb3726a7b00b91d432c6f57452191b2eb6ebfed6b98494880b2b04d7282bb312df41ed9530963d3cc475bd4e9898ef3f30b9cf31e7b323908ef6a9c1791ac6cb9c0b13a4f8c5e9bd0e681ebc89a7a2207ee302b1af749a7cde3be2b2df1a037acabd752e97ea1cee9e72f48a076add976170d9846380c20bd7a6fb8ad79b4578c6404769f00bf84490d4ebbc98da4bc9411ff9a86bca8932ec1868dbc5fe"], &(0x7f0000000140)=0xe) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000180)=r2, 0x4) 15:25:17 executing program 2: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x7ff, 0x6, &(0x7f0000000340)=[{&(0x7f0000000000)="7c8e1021d5d3dfe7a2eb57504676e6f475e416da0ff82f3c00ed4a71", 0x1c, 0xffff}, {&(0x7f0000000180), 0x0, 0x2}, {&(0x7f00000001c0)="ec30fa34c3074de02248", 0xa}, {&(0x7f0000000200)="90c6e3ae5963cbb20b7742c72f8ca12452492f900c92419f77590cf1a6a371335fe94cab942cea87a8eeb75656e179ca436e65d3d5602a31e9663816", 0x3c, 0x9}, {&(0x7f0000000100)="ecf4a52b61553ade7c550d1575dc9021d87199ff6690db83c33416b2687cb9f9d33569b88389e44fd6d5c83df79776512ad143417acb0fac80d0978e9c6846e9005ae5e52e152e89eb461d5a1f82df834f867c4a42870695004cefc0ab421e358a3411b623b7d2b87ff4a18ad75e0324dc7e04b31948c9393d40855275b37639ea31f0bacba59f73b5e7b57084f823d0a7fcaf5802c25785", 0x98, 0x435}, {&(0x7f0000000300)="e137927bb2f68987cbbe62c54f0f63feb565cfef", 0x14, 0x9}], 0x8000, 0x0) [ 640.306129] binder: 15007:15024 ioctl 4018620d 200000c0 returned -22 15:25:17 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001e00)={&(0x7f0000000040)=@in6={0xa, 0x4e20, 0x6, @local, 0xff}, 0x80, &(0x7f0000000700)=[{&(0x7f00000000c0)="9dd5cbb0ca8840e526fb30bbb23597f3cebabaa4b9c5e43f16d16e1d2aa7b2e99d5b1f55b2708059aead4be5952e7041aa998a84187c972ccc4b03323067581d1d2297db5034168838", 0x49}, {&(0x7f0000000140)="8cea73f45a48a79b5fb536a02036537e32ba11440acf80f18b04fa16ab915aa367f08a51745f179ffcbc94049f34216fb0bd5a49fb262f8631d1358f0cc7ccb79ca83ec05add045e93d0a6e0bd2fb3e68a838f5021fdab2be8166ec8675643de87c59e65f5f45fdae2f37f859fd06c80eb11c57a9dcf8d52a255da6a5d8407d247c06494d213a6cef8ba9953ca1eeb9700454b5b145bd4776bd8af76cd98dd9a64eb9db3045152229501ac14b16c6cea9b13726d67b596889882d382539e8b5c", 0xc0}, {&(0x7f0000000200)="0529e089e3d175e06517343493d2b2b30212183333ba769cdd1c3e29aa6c7e64d662517550fdc2b7ffa3fd19022602a0b3dd6c11c51751096c26c9a4a0dae7aef30b43e48f8cbfc8b1e76936bc0ba2459a9122a12485eb2b50f42260521d19f2314fe80413b9b6e7c3ddf0d8cae144870ce48259a01ceb545f6782361ff32093cbbe761982723426c4f7c2214414931b339c103231452dcfeafc396776c54b301b906cddf5ca3bf8d971f1b99a261ce6b9e1352fc36b45f25be053c0b873e4786e7d149134c23d03e87b4d1cc261860fd62352b480adb70e33fb893616acb8fca37f86b5", 0xe4}, {&(0x7f0000000340)="5b2e894f47a5f4977c4fc5216edb646d658a27377f05241edf2aeaf01330b1126348e89f28a2fc565819a3bbf4c2fd13e4730b1d7d8e6527ae716d0851fe506757642dd4207bf5ceb0ecf6b7ecd386cbb64b097b219135270039cd6fe934e4d031d14dc60d7c34c3314cc8d7f3af17cca4efac1825e9f1a39513554cc65aea6a2a4121633f8bfad0028f8c6e3db7833910967029d56ef9528532a56f06711cb31720ab", 0xa3}, {&(0x7f0000000480)="874c3db1ee55526ab688bc5e303583ae2e8788767c44ab91e67bcdef2150b79931d6903aeb115e69f9c551a46bcc94208bb16e5b19f8d42b80ff4a918f02c37076cd2e7494ac9bc205f7cc0fb04805b86b9f4669b328b047505398cb62af70c09a3c091da02a", 0x66}, {&(0x7f0000000400)}, {&(0x7f0000000500)="84cc2ece6a93fc714324fb50cfe3f2045b93b76a17ea997dfa7742b5868c7cc1cdef72706260ea2b2d4a89ed7d9766ae92f6b57ed3b082c3cd4280bcd6ffde25fc0b6e84669382b53e49da81d533df68b87665bda5a89567ee64f881b7b7538470d922745b18c85a2c52bac425f832bc24e0abf89ca5a6a82c888080d1864847804a0dac095ea665e102bf3b7a3b39b393892bfb709906639fb7341ec2261f3ee9500a8f4e354049f4d2e4de297f39a4c866f18f5074211a981e69317d12cbc21281", 0xc2}, {&(0x7f0000000600)="2307df22f0241820e1882f944397756512bd53dd7299f117d45fb213c522b7900999eceaae2f0df62bbcc4d2d28c194c86d3e379e659f5751f3e9504ca26350bca579a8a7e1f7cd9f85eddb33d6754eb514cdea772e86796c13fd3581b4b2b4f905916928cab05f38974f80feab1d3f671370e7de1ca36a48bcb6238c80d6237d0530249822b965f322d677544b0621ce3e247d6ac253fee3abd06a0377c8adb84d27f580294a9941b003b24997b1ecab4326c", 0xb3}, {&(0x7f00000006c0)="b8d8096b3ddaa16e111f4a1713b07d86d0e829ea76", 0x15}], 0x9, &(0x7f00000007c0)=[{0x58, 0x0, 0x5, "063087422fb41b612370d3d3d388ec19eef4f76d04f7cc3f527f810921e782fcabce6fe6bcee50e332e58776675f79539ca754ed25520c9ca5b6b3944e60a7a8523178f9586a"}, {0xf8, 0x107, 0x2, "b5a42ef50a1dc82ca904ceba88413d19e696b38aecf95680bba0d5fd502825784071430f5fe5bc63570c9c0542abe8e819422b9ccaa9475ef2065aac66d77c9e6867e152ced61b8cc2f87d04eec22d4eb0fdc099254114a21c723ddbeb362d291b893d572d12a988a79e40edf42cfc212c1ccbf4b134a3121bf51955256cd2fdf423e13f199958a293747502cdf69ab81a3511dcce2b9609de7fb5df5fb69e0e93503fb8fd34902042c1a20ee55630395dd0c74fe78189262c96fd7089e6f74fab79e5993fb89472c009b9d8c138cb09a3d042796746266b27571bd9ae5cdbaca7f4dd"}, {0xf0, 0x11e, 0x2981b621, "e4eed43732fe16fb4c1b94960d9b21e38be40b8284662129ce4ee41af702a6dbc46ddf5a28587bdf4417af5a261b4265cf575353ebe5d02fc2ef956e9157f5523d0521e18892177a147b2732cf0108fbcb5a310d40bdc305c3ae8ad8706db53dc6946694f8d21dcb9269ef9df23b45dcba846cf7ce2defa3452155d28f239f3ac8d25cf738df9472f6db78724c78fa247aa8a7ef9bf8fe6c42f7fc98543a93b562b49734e583f124ce8b9459a2a0aca4aa0aecb8dc69004fb7c35c4181d5b31e1ba1f1c641f3571215a4586882c79990fe2ec42b32ec421079"}, {0x100, 0x114, 0x1, "3977341f4d45dc3930c4cc759ebfd17e9d01c24536db8987efcf719484b05f1b663536790637a0ec3e3186b8c873c45a0a76fd3579d146e938616c53a1526acd13c09ee68a92fca2216c0610f19ad33271d62667abfa604e3896dc22c710d4b61441a3cf18b5b73856f4e7e4f39da72a2a73ee2537cd2ea9c988da77533973c4b39cbfd086ae4a27706ebc2612e433d0b12fc1a2d6eb861aab2cb6d8d1f867a77ec27889cec4a096497a4acf94e24927b7195b8feb30773986615a66bb25c14552ef4d8efe5919a8cf7836bca17508318bb2c0a77c6e29bc4ec2a8539d6d3ed04b005bf9dc3e2ba2fa8a6a"}, {0x20, 0x11d, 0x6, "d15489aee36584b062"}, {0x30, 0x101, 0x80, "2550859119c893c347aa30cb7de7abaf9ca0a9330aa0c5ebbae93e8dde04e5"}, {0x80, 0x10b, 0x20, "6be4888fc2acdc939c2acc7741d0d02fb117cc87ebaa86a8325ef0446abedaec76aae134133b7998424dbfc6d40faa14428316a59b687d7d279058f0436b383dd431bed88c7b625d72042083e9c23fd724fb5bde1e7e473803e1fa54fd2e4168716202d651132bda873c811b0335"}, {0x1010, 0x10c, 0x0, "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"}, {0xf8, 0x11e, 0xdbd, "f26c77b2c3f4ff369d40f0c4e8856db1880222ad2f3b4495cc60f571974eea9dd5114cf52a865b8251d254bdd84b5a5da0821137f77d7567c9b4c00fa355cc843432bf760ff3eae8ea29fea0918ca1ceaa79fd8add2405f2b6fac5a099a512fa61fbdb4965fc22688816fadc1d3d852b309f4d7a34678cd075a93f3186b64edf8c21d6615a775e239139aafb754f8dd11bcc2189cdd90ead290a62a7476bc9e6cbe0206fe81b9d770be5130b9fc44e8cc0f34e6bd653eccff4c33be1a747189de8e5a3310592c17282274c8cec4a83b7a567e702506761d0725bee0bc286970b0e408bb8"}, {0x100, 0x10f, 0x8001, "8f473cdc7b4002e029c9ba29deaa7b102f0a50b27028dac31f17be2a90dde0a6a7fc3dc566ff89a0a74b135d0457219b96c39668d50094d4f54b18d5898706643e94fef7e891d2a5dbd7b5aae30d3f6c8b82e73d01da291f7a13effd6576c0e894451169cd9193a3e9c82107e55e28ebfed5f8ed13a6bd322df6a17a42e380da623fcca33f1949148041435a6ca122e6e3d01398cb7ead6d42d62281d19f06fc30e94a6105e9e9e9deeb3934bcbd4c0334f10c9ffb14eb152bcb083cc3a01fb5312c019fbff91e7d8277bd36e3070f4d1152c67d9c8c2969fd19e662cf823ca635b16d027ebc910407b05b"}], 0x1618}, 0x5) syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000300)='./file0/file0\x00', 0x802, 0xaaaae9e, &(0x7f00000002c0), 0x8003, 0x0) [ 640.381907] kvm [15009]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 [ 640.630145] net_ratelimit: 19 callbacks suppressed [ 640.630150] protocol 88fb is buggy, dev hsr_slave_0 [ 640.640246] protocol 88fb is buggy, dev hsr_slave_1 [ 640.870181] protocol 88fb is buggy, dev hsr_slave_0 [ 640.875282] protocol 88fb is buggy, dev hsr_slave_1 [ 641.590126] protocol 88fb is buggy, dev hsr_slave_0 [ 641.595413] protocol 88fb is buggy, dev hsr_slave_1 [ 641.910133] protocol 88fb is buggy, dev hsr_slave_0 [ 641.915305] protocol 88fb is buggy, dev hsr_slave_1 [ 641.990122] protocol 88fb is buggy, dev hsr_slave_0 [ 641.995236] protocol 88fb is buggy, dev hsr_slave_1 15:25:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001280)="11dca5075e03cfec7be070756823c7c7a21c4a78911a029f35e113eda377d92202784ba91da9680be89988c688981ea302707a461ec25aa24e390a713c8fd08582717d0eb13ee8e5955edf00991661e289a5c4c7e26a1d88c39bd1d3a62463c0fc76011c3a26a7670117b854625f00"/122) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x3, 0x2a00) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x0, 0x1000, 0x5e, &(0x7f0000000180)="b1972c576a0fcd31f38759abf41a172925037cc5148999eebbde8648e05740a06cf7bb9c1e4f171b2f9644ca26bf80838880ca9e438a1c797bc85aad63c688ca28f928478c046b08c19f640a3b429eac4bae1cccf4f02814e853fa7a4b1cd8d7961256ba3aac981b93337e86cad99f4e4c4604c0fbc32b3123ba7006bdd4ec357266b35e4e045f28b0aaed3d128f7ce5396e22c23ae6a83d7713f87e18a2191d373f83b8b530f575a74e758e29d201982a4cd7d8b22192f29b1cb565c7ff447419a8eb189bec2dd4f4b4ffbda92b1f95efcadd9b714bdd0cf8639a6470da3eb5c9f526522d3bbdf2d400f2faa0e64becb0df24bc415a905215e19aaad00008c51e75e193d2b69069f824aa81d053c8ee318751bf35ef7f7dc3960aa5577bb3b9103c03da5ee5b355ef7b278d7e1cf3efb49e3ea02e56e32d57f4806adad1e76f3a29abf9b463d376715fe14306858ebec77c1883b638094662c87a88d971c070777e74522218ed593f2d72060f4295681d796605f465b4a74ac6a12b0c0ab7dce76f92244816710ee0742850ee54e6b0c739d6b422a950b3bbecae72955293aa58b2e768702e7b5767f87813d4c1f085d6ddf74af61aed220b5ca220ef39d9251e2cf5f65788d3433d589db573271e325ed7f3f9c16f7cc2547cc679be3cd0b2ee65feb3fdc13324e8327b6113fb5c6754f4efaac11e2a8ec091f1166abff558563347a03430a82c8fc5286f3ebf5f370ceb328e2548b4b2e60e6b251a712b9dd10b6ea54ee982393bb347ce31126518a1ade9f1f194bb2756a1c8295fb6724b1202e3983c0d954e86295cc8be83c77c0fc00c4f3534ab2e5d31b66e42ecb94056f4d48292836afdcdbc746fa2f19ae573f34489dbbb07a838c575525d50e30260d91585540b80e33e8e91c7eb8d8d405cb20ed5ae6490edd63b228b17771f0ea9ef8163b88eb1115320f6e9b434fedf59747fdb59984264ab6272c32fac9887982d9832f78e36815689e26cfa8e88266c22ecf1ba82b9f7fdad5f5a89605d9098113541fe20972c6d42bad9083a210a201127389aa6ffab37e1b093042c1893a7d7ada5dbb793d1dc361f1be96b5720a42d0bf9c1c7234448452bf06e823378dff703ce7a531ca867e6cb145139061b68afa6dff02cf57b9cd517b7a86fc82f0dc8ff172dae868f28499c680faba2232a36bf24f3cd5faa2f21d32cc9c649e5f2f053de06c59da45308b286c20bdbeac7a7b3097111012e93d861cceb55aaaa2177cea36e8e11f6245f53f46f503f98a19e7944db3839d8d7bef86b98d2fcc76907abc23982da014db77e2810a536e68ac272379bc2d414dacea8cf5b75a4765ecec7a1f446f282911d688205c514b601ff338c97ab368147f7b5ef76b16a6f95fe4735082c90996c25fd4daf701024ca6fc658ea4fd353181bb4502b9ce57abd077a976616fe67a3b0f48455f5b2ef719e22a3c0c8d99e2e7f560f55c391764c9a246281950a609de5fa9e178cb59250d2f1c53df61571252e5f8a5122ebf5816662a4a12451dead17372ab305d71c23fd72c035573c4720196006280504f95671d6f3559cf9ef70589011ec28fe55d1247f7926ba7884b3be2ecdf7eea8adf5354d02f3f44b3ce1dba692de506d4c570b69bf382ab66898ec88b3aae19b529a8437b6517186bf013387b6ef604e0c887557e1f6e4b138330326c115c9e58cdb5e4405bb05c0a1d04e3d4bc1f55a186aa358a35dfbef2a48076fc5d2e9c8749017848797188e740fd8bfa07d04f1c721a4d4f599991966d58eb114c5ce7eba144bd27fe79c6127740f0569842a7c3eef3ce3d330a97aa9c916732431ed7c4a1c09d11931f749302811eb519ddde9fd98398cdee53b8c080efc4084ff751d4da38514f0e5d52382b3e00768c4732c0b07a89ffd4ba1cf89bf5dab3b57cc997ef3d0a34d77c929197d40354a717f26a927626b97bb78e042349b48ff9420a1dd4cd5f3facc4363df6a7fd37f07fe0a115d9c153e2fe86fe812f9934f02a67f7b145722966ebfb9deb23455985f4d04c68859a92a84b01cb6e0d560517d384540fddb535da694890540e68ae9ccf1b4ad348e68b517bd335379311b28a06ba07c903946c7326ff2138a9bfbdf1612816913095b5fc0d0f066330844577279cc5acfcd660d78749a661e53b7c2bafbb5097c87836d42bbb03cf51cdf60de29a1db0db6ded81a222b0bc6319879ea45a47e4a4f9568c468789127de006202084d7ffbdf6e950a75d5f82d0b4af0f40f9ae8bd6adeff3fb9293b9e68303205a9ede9138140051349087339b4e2003009bb0b1d1574641651685799d34f8a0d02f573434bc4ed2dc5d97d282f3a608c49b2f1b03e9a31f1e1b4890dca0924a1f2f48b77c041b76281c71d004a244655d9c3a379871758edab06daf8123b7e9e63475b385e4dfec67e9f8c0f71e64c7a7b8e16657c547a181e193cc46fb382d8759fa9e382915baa62fa152f20c4fa790eb8f887f9f87ff1e8d88b00124ea6c0b1641bed4ac0add14690f299bbbf34b7c18654d027ae5df229adce6a4515cd8ca0889068c08c3f73025d808b3368a05638420b7e65593cd3094d741336f76b62b2ba3495ced72d8153dd886ae67e7d67f4cf6e24cfd5082e24dcaa87de200fbf73caae338fe9c59ba1e19d4aa3d1b45d82e8dd25f65571af8df2d289acd813edad54d814ee2fa65c608190688425ed68f7ff8eacd02aaa28b9cde77a69b439d6a9975677c42e8006146468691433cd98cefefb3416bd8c58320a867aab857b13ef57b6741dd58f2117c4831a2d5cacfdc40c6ebda3f60877a7c0d42857707b6c1b59daeb587721be7cfe83bb97eeba81e286fc46f8c0c1441a4b0c0ec270c6a0f98acc4faa90663eabc78ac056abaef4c578ed749774445eedfd71c7fa0c3d6dfd028430248555f27b2eeeb4f42fe2be404ebd1fd076a3fca756d7b2a65c080cf6b4d245c52d8cabc61dd70f0e150d7ee41ccd3ef12e97fe72b91090af3ef1f7334f9f3c8add4d7cc98afbfe3ea1db0b757c4635b7fd2b814cddd6ba2904b0defe5df59404ce6f94db99b9032226c259922c9e27aa57f40ed4f1a96f69e727f6b577fb6e1a653520feb2fbf2c459a949709254c055c36d392f4f02d09947397685b7117d751cd0d661a5443a5dabb685cefa75cce882ebe0896e5d576ab86aaff33750b9829123ce5024e80462b8fdc41f0d0919868a680272050b4ec4bc90ad756efebc87b023420b374b573309c6a0649c045467027e124585bf9dfbd449113b20b14bc1963bc3fd7a0ce2ae4686b8fb146700859e9d740bb8f35d687707585ee9313fb12c2106f6bd85f877a0d517c4ee3ccc3d441e7484511eea5eb4d6bfe3ff0a17fe9effde8e6452cc50e4f6b37e871fc6ebe8cf772a97f541140c2d7c9306e407c2f6712edfcd680a22ca5ae9200adc5bee40a279e14facf0fb8d887513c6c16cffd7d847eb5d5c90eee74f1cc6249bcb43239459fca939da13d4191c131fc5e4aa1b5f0e1acc9aa6a14da5bb5e63dd08d3e6cb5ec8332ff113709964daa70f63fc8fde4b621ad7e27c582062af81e421e42cbadd9c379f51b89c8ea65c7585ce4706907c67da6e208192545fac71a314791409554d92b2f7ddae1cb5f81b102129f62495d6c9a0edfaa8d20e1ea9de5542ca0de283d2a2645329b3a212d600c078a65d19728f748a4c22f8eadf5a302a0073713b5103cb48693e41cea1913de75ca483c93c0e1175960ca89b37d074a18c43fcecdcff2b4cd88d51f4b502b8444b40db4ba6184bea70f6cb6dca5025b57e65f21884b6800e662ad6519ef24fa1887aec6897b95fba06080b6c91e105b39a97d54a00fcee0bcedfdf826b656026a891a05de4f8a7787befdf8e995a547de1d69cacebf187c4aa522ca31954f7e2d7437aa6f782375117d6ca2b9079cfb9bbf09db33d0b8940caa44ed5d9abf0ff861a4cb88f972a63ab61e5fe39b036da92b540c0cc69ab0768bb09da16bdee18314aea6afb92cd0fa29334ebaf6de7f9a314d7ae0434200ba56457c6456e6360e665985e076cd6041c50eed3af1cef864ae0a9d01f7edd3947dcd06d58dd17b7da23b57d729d5afe512fdea56ba5e5a4e9dab6c84ffcac0c4adf1ee3bce81c3637c707fa66e9e2da935f464c081d033de3e9b4e6049975b361784e2957fb8fd7e29f6be8d50aaff7ae3c429a3fdabe8de6a7ef70b9b5a3bd6fddc7ef6c9bf904519a7564af53c83ef0c5935d0a8b2c4b0f7809caf4da3abb85a86b72957e61167353047b7954fca98e043b4caef5b0e5227abc5cf6a37332dea04cdef252e6ce9194378910999c782819c014f9757633221a744961c9723e37c47ef91dfe95e0f6f1c35b8d670f4c550d76683df4c6c1fefda8b39e2a83e0803cf80e92bfd1e488825f39c8db179d63c5c70747298f478da0423496a6bd8fa1abf74a4934ea368ddb5d10aa8d9f5fcb9b3b7cdefbf290cbe379030f249437ad6de4d6c07cc70e9b0e708d91efe9a6b41cee3c8d9a3d5e0045aa8acd094d35034701582208de7be3400326767824c1d659622d848726904a53dabdeba1521835ef0be32b7dc21b3269712b7fcb2a39ca1878ffbfe13d86484e875263dba0a1cb41b94860c2cf788beac4afe240c4aab2501636c3ba34df7c656b8932f96262d46455d93ffd96395f0fe25315555e793bea0dddbff705816567df3886fea56a57079c2c795a9c1fc5c27858420942ee2d16531853727c76b7929eaf4d142bb99f81b190bd34d69e0479a49f35d57b9bb74a68898861788cd426359d45521ce242b19ba1b238281661da58d2ccc10a69f086a930fb7f0f7cebcd9c29795695071ad476523acd1423dbb64e7496dd3436cbe2589443a8756b2372bc74c2b2fb8e0b0ce233abf0fb24c399a4b2f6a30e6a86f21ab174128f295b8c1022a554b16b9ea7c6bb0b9b3f00b300d14c5a46a0a347139576891122acf6e832c0272bd77419e8fc35e8db17744d4f49ee3b46b53301118ec26663ffb36140d1c84958f4252300796d325391167ee84e4194e1f1119e16ff95b4fe8b7de14e7f9c09b813ce5702d97979b9fb571bdbcb8e8b4f3d9530eb65a6b8a5a5ab97ce8c6d337cc5c7969989e896b589efc9bb0e170449bebabedace5f856d19f918c1d59a43a9085a3b03295adc6e2f09210cb04636e1ca44fb03c59516296b4a31d523ba9b3fff422e6f7fc72f9060056eaf29299189a3ea15913cb347018e13218369ec9e19bdb572c4f1ea53148cfeed83ac854fd9505e54d2142a5d3b3889c406ce3a59b433af157e3d63e55e481c04b99cbbaf44b37c07da23a5b7fd2c0be42c04e171ee7d4e112cea56f25020bdba6676c4b010d28c91072589d0263918baf8d916f7897cb97b0269b1cb44dee3f3646748406d1acb7e852efdf458e3dc6a58a53ae3e6fa2601a9fa2a127619bde75279ff6734f2dde6cf02995bb63f43a5a22e2f692cf008d7ea33c568881d31965b7e6fadf7277718acd04ca3ca9405553545401166ac921e14b30d5d1ca77808fb15eaefa223434448e1e952e1ef957000443645dc4c224c982f3fefb248310da92e66c4de2d2d598187d33aab0717980c5f763dbc43426cc622f9e81e9f938cc5239fc21ab47500da4d794ccca161242220f2d86cbb920fef73c762865299631dd89bfb631d2335bfae39e3f5db34eaa0e21611454cce517e2c5d72cb2107c132a09abea625493069c02dfe68bb433076db3877ab9fdd98743bd079cb4a", &(0x7f0000001180)=""/94, 0x1}, 0x28) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000620920144f88cd8bf8fa050030cea0e283d9b22703305b8fe23074bc015a41200581e5ef57c5000000000000000bcbb61c10b1f4451c"], 0x1}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001200)='/selinux/enforce\x00', 0x101801, 0x0) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x17) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000100)={0x2, 0x5, 0x3, 0xe9, 0xb3d, 0x3ff}) ptrace$cont(0x9, r2, 0x0, 0x0) 15:25:19 executing program 2: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7f7, 0x1, &(0x7f0000000140)=[{&(0x7f0000000180)="eb7fc86d4f66732e66617400020341000500077008f8", 0x16, 0x9}], 0x8000, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000000480)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@dev}}, &(0x7f00000005c0)=0xe8) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x8, 0x4, &(0x7f0000000380)=[{&(0x7f00000001c0)="fad97c7a74b81d5b60707304885b5676dc7a5327aadbc7c40a06b85a7a746d8e26c24c2f0eb18513decbe488caa6d260e5c1bffad3add991b4d57b9fe4fc5255765656fb93eaa71a440c6119996ec830b9cf245d178e625b20c8a1ee4b3249ea5560606d7cc942586197fc874e9adbf05c69fc33b4c31fdddcac6df224618725ae7b5f6ea74157e30b4de9a8cb24ca3cb4134c47a82c17cfcc6752a63ab9e4624ff0c79eef660217743493811740a45c43bc59c347", 0xb5, 0x1}, {&(0x7f0000000280)="60e0b32fbf0a1e82b210674c5d0482a0767e592fbb765552a1a4a1291ff225115904f27d4939328ef25ce49178a90c8cf3738e337dc2647985189239a08c903fe7bef071d5d09a24b30f884c2ef053a1e421028a0743080c8706fabcd2ba7c65aa2bcc89d6c5c7ffbbd6c54f6df9bd0fb05cee38d2952820046edbb6fc4404fba9e7eb0bf3505aacef78d83ae7efb4f7f5f212c73106782f6d2dea0daa", 0x9d, 0x2}, {&(0x7f0000000100)="ad72c8f8928147e6e4051778c413704181cbb18a3ec00abc2471447d58e5287759a352fd8d99a94df30b35583841bba7a7", 0x31, 0x17}, {&(0x7f0000000340)="e2e9f5bbe5757ed349d77cbae23a879f1f", 0x11, 0x8}], 0x20000, &(0x7f0000000600)={[{@disable_sparse_no='disable_sparse=no'}, {@uid={'uid', 0x3d, r0}}, {@fmask={'fmask', 0x3d, 0x8}}, {@errors_remount='errors=remount-ro'}, {@umask={'umask', 0x3d, 0x5}}, {@disable_sparse_yes='disable_sparse=yes'}], [{@fsmagic={'fsmagic', 0x3d, 0x7}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@fsmagic={'fsmagic', 0x3d, 0xc4a9}}, {@euid_eq={'euid', 0x3d, r1}}]}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x10000, 0x0) 15:25:19 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x4000, 0x0) ioctl$SIOCX25SDTEFACILITIES(r1, 0x89eb, &(0x7f0000000080)={0x4, 0x5, 0x20, 0x8, 0x3, 0x26, 0x23, "38f05e421ca8fe6604786f79f17d14e82f1a6490", "6c562f60fc8ee766375a0b6621815dd10093eb45"}) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dcbc4a453bc28dae0f70") r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) 15:25:19 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x400) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:25:19 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x481) 15:25:19 executing program 1: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) recvmsg(r1, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1}, 0x10022) 15:25:19 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0272ae97660cecb8151e628f3f4561e685cebadcd3c5f8eb8bebeea867fe26677fcf6f0f79a51887678d5af6ee4283afa532130f051de3956ede71af508833dff850161852354864166b6fa1d222c7710ca5d6bb8168"], 0x56) close(r0) 15:25:20 executing program 2: r0 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0xfffffffffffffffd, 0x101040) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000000)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2, 0x56}) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000200)={0x0, @rand_addr, @multicast1}, &(0x7f0000000240)=0xc) sendmsg$can_raw(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x1d, r1}, 0x10, &(0x7f0000000340)={&(0x7f00000002c0)=@canfd={{0x0, 0x3, 0x1, 0xffffffff}, 0x3d, 0x1, 0x0, 0x0, "514cc0a348595ba70ca0ad81ece88a884a7e1e241880a427fdac019a72d35a4651ec9d5f92ed31a29604cefabf3cc3d4e88809f90e242a450e39199e25aa672b"}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) 15:25:20 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) setsockopt$inet_udp_int(r1, 0x11, 0x6f, &(0x7f00000000c0)=0x2, 0x4) write$vhci(r0, &(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x13d) close(r0) [ 643.376400] kvm [15057]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 15:25:20 executing program 2: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x7ff, 0x3ad, &(0x7f0000000040)=[{&(0x7f0000000140)="eb7fc86d4f66732e66617400020341000500077008f8", 0xffffffffffffff8b}], 0x8000, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={0x0, 0xfffffffffffffffa}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000180)={r1, 0x985d, 0x2}, 0x8) setsockopt$inet_dccp_buf(r0, 0x21, 0x800c0, &(0x7f0000000200)="c666cd0d3bffb388508207d74674b7f85c56e24ff856c9b8efdca57d53a89bf77824677e8711460a3739fb90bf35e81363590b040d786d24a9e4498bda0a4e5ab97603bf0e37f3915ea7abd177f6b269ccf2f903fc21093f36a23a74ca4db1cbf5803ada15f656727d9645fbbac5e0df6e0ab3212c2579cb02970c6555665bbd91d04ee65000c65d8d5e16f1d5c941a062886a5be5af50a9ba09f3e3475b05fa83ce444c2efdc27400564999a9b34aaaac0feedc69752c2ceeff2e187ad02d8d04a2f51036385f93c58d9e83a1134c", 0xcf) 15:25:20 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) r1 = socket(0x1f, 0x80000, 0x7758) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='gid_map\x00') readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1) readv(r2, &(0x7f0000000580), 0x3c1) connect$bt_rfcomm(r1, &(0x7f0000000080)={0x1f, {0x1000, 0x9, 0x80000000, 0x4, 0x480, 0x1}, 0xffffffffffffffff}, 0xa) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:25:20 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) getsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f00000000c0)=0x7c, &(0x7f0000000100)=0x4) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000080)=@HCI_EVENT_PKT={0x4, "5abff98fc863339f096811ca80b1c2c4fc5a0c13ed7af783167c51297ef634071b5859"}, 0x114) close(r1) [ 645.750125] net_ratelimit: 16 callbacks suppressed [ 645.750130] protocol 88fb is buggy, dev hsr_slave_0 [ 645.760318] protocol 88fb is buggy, dev hsr_slave_1 [ 646.070182] protocol 88fb is buggy, dev hsr_slave_0 [ 646.075272] protocol 88fb is buggy, dev hsr_slave_1 [ 646.150153] protocol 88fb is buggy, dev hsr_slave_0 [ 646.155269] protocol 88fb is buggy, dev hsr_slave_1 15:25:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000014c0)="11dca5055e0bcfec7be070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000620920144f88cd8bf8fa050030cea0e283d9b22703305b8fe23074bc015a41200581e5ef57c5000000000000000bcbb61c10b1f4451c"], 0x1}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() ptrace$pokeuser(0x6, r1, 0x5, 0x4) fstat(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getegid() r6 = getgid() getresgid(&(0x7f0000000100), &(0x7f0000000280), &(0x7f00000002c0)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0xc) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000500)='/dev/ubi_ctrl\x00', 0x119200, 0x0) r12 = openat$vfio(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vfio/vfio\x00', 0x600, 0x0) sendmmsg$unix(r11, &(0x7f0000006a40)=[{&(0x7f0000000540)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000840)=[{&(0x7f00000005c0)="9516d04783c40f7a20b4694c4f096b0eb9385912880bd71147c3b20aae3321c5fd4fc515753c3800de2d9eec9b520828ffcd1a89c18ad25b935543890830e2f69c2882871992fe946a07aecae25968f15b725a9ba0e1e3ec8acbe7d0d496ce5a19e32374021f5e4bb82cdc1b9467a211eac92f22dc8f18416012d622d07c9e1ebf5fbff45cc359cc0170637adbbd", 0x8e}, {&(0x7f0000000680)="052e52", 0x3}, {&(0x7f0000001500)="9f23535155566e50db64af4fbbe4a15bac3d45303dbf8de6f38370a961d9d24b42bb326be64c550f9ae0e011e12943b419ee8711935dde4a5d6310152684f201344c9bede1b340fca2a5384f332d903d6f25ce3e08e0185c68a4ae15dc9f10ac83395c5f46d16775557a4f8b9acf43c930b7937ef1093842b837b3c038526c5e9741a94d88f05179e655d7fbb4b5d644e2838353839031a59fd3af8eaefa0a9b1800784300cf25f7ccefe13838118525a42e3a7aa74a04a7e413d74f2aef1baab7e8cd671413adce586a85a884831cb7a65a5f343ea4774786f0ef69ad64d1f0e2bb3e0350f68f0deda4a0510eed1f8b622573dc4ac284ac007f4d9133535da19b572c8fa32e5719ab54255a439476e13866014f7c671e78448b114ee8c896f56aafbede34c1ad41ef746d6a439fe549bd36c7f1a3379cc3f02c77ca0a18ee82f2dccea428815cb0e6cb88fd28fae0e5deab697ab093b10b37b690a42444dc1c23f592d3c6fbd1f0385d27c48dbaa75bdb67120cc37bb2d5102521df9af55255159c4a71d9b12661bcaddbfc7c167713df7281314ddb8631cf309d9018c59768248f22ee4c7f07bbee071526351ffed18f547f820859d926b53d871146212e4e15ab4722af71b6923dfbe31ed3eeff95ca6b5219b61d7fbb8791c398308f5b2efe690d6ae372c63d44d5b604deea9dd1cf0f592b9fa2feb80cbbbf291398bf7b1eb869fde57aa47b492802d5abc652f10ca305f671fd9748741eafc1fb2478636c034ed1241335799228ae86510726e1ad968cd9739c64bf2cb9a48f46d3b727aad00ce9c11fd5bb8250ec6b27cd71bb83623f497fe695a3b3ebfadae8a48a800831fdbed01fe48c70e7054c89c59f885a6826cf9353e1c574a907899d6005ea170ed3f859188b4db6f1370208dda96b439daedecfb7fc84c5ccc302816f17ac5f7a6063e48dd828d7087fd1bda902078ef2cd2bcf65dc705f9c1cf1c646cc810aecb3c5536fcf2ea105c921e08aeb5f06a82a382be7b46ecaf1bb1b713f4d97d673b8db0a079765105f8c774e06d43db181bd90fa14176511f36464ffe885b6d247535afbc59acba8eef3f83b98bd63a959321147e922898e20782dc5c77009dad90a1a0a1fcbf0b2fac6334418db1ebdcc388d769b5bbb6982915ceb22f8089cec9adcd003a95263cc0ab27c665e1a4c1dad57ab46ccd53acfe220be846f0d12b0f2e377d7ff40f8d9463d6f5f86c2e70a817a25ef9829178236ed141fbb093818465b914195d13ae1134b2883a9c320deff7630f5dc7b7a2dbc411bf7609b471242d75f2b68e24f4ecaecfd6254f558c9f511f6969910df68ada41599c626fc20c69326a15514ce8760aaac6da1a7e81df976410644e054c2e4631632e001fb501a03ea5249701ca5ed3832e9522c0958a506b790396795aeefa53de56ff8cdd470091002d0066c271a9a83fdba140a51c95bb3d4ec50082fff3a196ae7d20ef07be182fe7c5f84713f4b1bc45c3b752df3c03889da53817693f6c3a046d988cb361cff3dd8a0911f876f4688f3c717f6183a7ecebbb50d23f61d4a3be17dd2b61b92d150c115fe3da58de611767cb118a664e00f1f745fa79a4161e8c2f3c536dca58d5b682a51c60887f53b0069a0c4f2baf7f500c18adf71591ee0ab53932dc8c19506b15fcc6699e30f8db2e4fe875bc2bdf5ce1cce4a28b29087e25d275587c630db2209f7e4b5366ab522208f23ef5ae70867c9bdd510fe0ab257b8b5bb15528fcc53fad18cc5ed41c09e249eaa2fe9bbe7d60e3ddfa86ea74a96b2a76abc899490b911701580ad4f40edfdeb9b003f6eed7230a28919e0e04f7fc401bd161dca83038d55d150e0c504c9ed7b3929a7c9376d46503f8db18a695b33af2e08fec8cfeeebb20eeee1fd97ddf85b465b313117a2e993f6848658cb3fc50f6a5013ff199a63a3011b32b6089f8ad604c7637bf4da4f35766a6a54561a5156bc33b183acffd26e25dbdf593d0680bffec35240e917d1ace322f4a9ed439d563aa1c2bda047648e9491edc07dfaf7714184730761dcec2fae8658687e9bc594f16ad399bc36c6f5148798121649ca67a9d0adb5c8043a8c2dd2ca5526bf5a39d57e809b7cd9a1abd0203882b4757897b53246486c48cd288dcee0e4a25ce536e1818e1424ca255c07cba5d0fb40ee7b9c7bb2202da098791dba95461566e91eb12f26e0c40141b70333c54e82f767e1fa3457230f6358503a356713a505c53e953d14f913a88aec3e78bf9add95658c5434c08f0236849aa2b42bc66d90aacdcb4f6b33011d0f11ad90088412e04916d9c604e8eb69a293a33c349c9ddbae7b52e64a62f7545fc075c1862eb192907e4a7d6b3a5eff8149011c9e7fa0178f4bf51ac3901989a9f13352687d9cb55b936e751f917855558785b2dc29a1faccad8dd356c4c877da29d43c6c69defb4cdd3b554be3b830956e9056e980d5090f00434e5e091df3550095b5c70556905f1f2b9075769c3e63801c2a3f192d0809a55f77c74cf9cb1433c171dd6e97865a6d92a33e84e340987085ba5b2cb35868440363ab8e4237987d2f54244b6836f50d0d0c162f478ebf16c8023e77a63bad23f74cc424760a35e415277727b1c9a46f6d7ef8fbcf22e56994ad1f0a31903dcf48dec9504813a69a1a4f036bb36a7b45cd0bbe58a632c0992a8e705703d7e1072df69187eb79be74e4840138668b56e7a4faaf81d03ea59f4d264cef89e541be8748453b2949b29037e219355d9973d5a7264cdb32031d9f75baab33bc62c5c6e38274392bdcf957a3b768e4c82cd1d075f14f4a9f18ac51933e90c3832f510810ecd9f7e28b9fba496fb0278755c80ec3968f4720efa03822895eb549f4e69ac0ee4d16be01cdf81209eabd1325794a29d37e2928e5fac2ba19d95c095c1b4cd8663cfbbaaa36adf81ecc72767dbf1114b01874927cc3c54ff9aa4b0ac370cb8b8ea89308e93990370184f3ed1ed263563e95306c4432c2b2f60c1983970085f0fc931cc6f57eec35397e1a4a1f0bda4afbfef6f0e18dc454b09619d29d892c75f3ec825ae7e9c4ccefdcf34f6bb8db3c851aa0ea44c9f9aa4b97a73e2bc9ec24b9f3c3295a2ae3170dc12a85ef7296f347d74871aee4544462a986c607663e25135a4df94214cb307d3fbd1405799e8ce86a60a2ce709d93d75305bf76a724b7bf53479efed82113196d425613ae9c857c2737f764d4a1d7e7ef503e17a1be298626a9d0cae1d48b8a06fb6aa487550fe080c66c148952aaef338cb7e0d3071e7f9747a0030fcffe2782b857553a56a12349f52c4f18c604e29ea27c857d035f73b93668e87d597a16ff00db69e29c5b010544d16c6a55bb771ab2fbf6c331da1e8a8ffc8077f3349064a39fde0492282f80765d5e6504a791663272b3640e3df68a412e885ebd1879fbff50c7ab97388b2333101afeb1c60b66822efd8fb02800a990aa1f28df2121724971e29b376b1db5c3e50fc3bf913618f2bac2bebb74bc97205b1848fea447ce5df1414d334ae46c007fb9db3e59a1d54394f50da6951d6f56da614354219510ba90165e4c1e67412385439d26486009f72897d235e4cbb75081a9f40c84f11d4ce9b1ed48e4756259aced6a568f37bec25d306a6bd88319aca3656b2c0a12d4fcb889b048f86eca375f4d55a20e8fea06e8a95e4b437b1a2b80cb0a6136b40926f845934199efbada2508219fe2d9cb48f4c204a28aa917c3459e647d5fa6342dd87541ed055847b375f743320d0dec6d00ba2adcf9642a3b20930c5e237403dcaf32c478bf556b1cbef24eadb6c2c505c2c0933725e01e2b1d4aab35b24bff53a10060e6eebe3116d4dde2dbd62e3af6e071678c34fe397bb964fcf8f90f516311c69c09b773b38801e9dd9dae3b61a0fb7a6ec2273666c6e8697da82d369425af4dd1492cafbe5a9aa45aee9fb83c4fe55a028206112a6b7db027b534098a8ee69a2dc57dbc1329fe65fe386f2e77e3544ff0125c3fc25b9bc0b89ad4cef4d3c8d7cff65342e4bb7a1303ff045e18947360ad68084bb56835386f68bc7bd2401a9646e3c76ab21190556de2482604483d9903bdc8c0988ba406ddac2ae8d436ec7c1713820b6f84d8cef10f6c9232ec0dab7c606d9ca0e8b684c642598fc544c33a11cc004259568b385a1040c11680622d3624eb788bd3043b4bc9c4b5c3a06fa55cef382b25f098879f66accdfefa4a65323a04794d2d964cd1166b3bd1dad5e50490bbb57597da1f68a3895f41c41675d4d9ff41b4e11160a6f517aa3ab168a611a64e4a6a77e1e61b44b494b8c2223ffefa49d6406879c3837c0f1201ad3180926e9fbbd50f7a4170b8eb4cfb4550a556a28214dc6f424764a27f3d8b6924a1823bf6c83f421477ff123baa1289c9d67e6414c399be1dbe6724941518a9aad1adcbcf496f3bacd35eb7c9c572fad8eccc2aaf7fba34bb8461f1d36672eefa2ae2e8322a1945780f5d6ce3e9ab326656e7ef979bb712ea44fbfb22408feb75bef475ce37d4ff360c27d4d14495aeee218554471b6eda22959a91c549e80ec5f66ecf13a653b1db25db2da290fdb8627447e79850ef6b8ffd05fe0ce1fad6708c5237934c2cc324d97ede2457a9d19500c2fdf4e6f0962be67d8b178d3bf1f6daee942f6a5d72d35f0e5db8dcb0fd71fcdd37876c7687c18c1bce8fb3e85ac28225edb97aec15465c9e5aaa4a08e21f990cc66cd9378e73763969c83cb00d0bedae0d15359dde581fe413dee0de86e49264aa715d8f28ab921f2d48d0cfc1d69a1faa14d21d346278ac06ddd164fd04ad54b4ddf9b5ececd38893c05354599506b249e7c2a8b999b9bcd0204a49c63eea3d3e28f485b50531a9323bd8bc7309354d3b327c573225ed43ff5a3bd5024c2326fcc084a00937a574e450a485b04434054dbffa2dfe308f77e3b7ca9125a7c9b33690ac31f8b8b9d2061677c7ea347a87caf307d5c739800c71913fcd0881ecedc0d43334e347eb1bd86dea9c6c0ca6ccc2404d3c7bcf86f7bd4d2d0d9d1e2cfeda0dbb3d61ad1e29d2137b7d1fa2ceeb1663ad5d0e0f61f3c89b8dad33bff5bc296606a88262177309957c24dec72329c87be27111aedc1ac3c80a00c683e0c6ae4ec916ae3eff14fbbd1892462df639b3f4dbd4700ec7d7d3c20192f201d4956980553b97f7e6f4bc18df7f967e961cf370b3082f2d5c8c74e0bc99a4feeba9355ec332ea00fe5c3c0eabb46e68c126330667379a2c0543e5dc4d618649879a61fecb3a75f08c12d81472e47fd3faeff6462fc04ddc965c3daac29e5d9c115fb4cc792ee88292814a492ab88b508ab2e561a9f1aa071525b6efc1a92d401c691f65aa1abf0b357c2fb2202b42c77562bcf8a8336bef6fc0ed1c03988a8e91fb14ddae285f116917bc06353bd3938dfc1280606c1987894bcc621134df93eab683675218ec0b145f00a996641ec0122d4f7593cacd5ce1f597603f4db9de8a211eae6c789cf82b68325104fbf7a07174f618ac3ce90e4c5ccdd86d1504420a2ec11f6a6396fd2a956686aa5b557426c14ee46d6b81f395419e0721c29e308b5d88cda7427ca667c654b190c9a491acf8be6afba18a09e5113a1dec329800cd6b97919590e32d4b328bb5ac0f37216932af331bff9ded9d93efa97970e82d27afcdeffb1cad20652a1d91fe1c34644f5a46777433c8a13e63a29593f1f7768dc9dadae65ef7dbb148608eac35b3638e589c9bbddc3fac4f34d66a88227866ee72", 0x1000}, {&(0x7f00000006c0)="b26a1064531091a1b4ddbf93dfba0f0aac58ef894dcf87985be39d46c48cbfb25825d2598f62432afb68591bb4a98b3c19526d1786f140769ee50badd30183aa7712b878b96381fcac5a60ab4c616cebe74722efe9b65f5fa11a249f4c81b1560dea08381f6f49558db8d22d21916e7d7872f7f1f230f434de1b4a314f28558cefce99669ed71a2b0089c25a54d86b3eb8f058c12b8f5eb2", 0x98}, {&(0x7f0000002500)="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", 0x1000}, {&(0x7f0000000780)="acfce59cc7df7078cf7adb76f433b82435b73d96e725d5dc9502957add4a2b269afe17ed899aaa1f1952096987fd563cb67134031bd5e586240797cef2485cf433bcd8861b28527bf27403ddde05ce2da002fcd7b5ad36f97e2ed75322416b744909eab46dbc2eb78ef970c4e9735950663873048a0c768af2147c4e1d6761e8d02824e0d5046619ee41a20cae17492f9f66afca5be2c8c04a016071359f6d43a8277a7e84f0de79d8ae1e371653bff3e80c4654fcf3a04a39", 0xb9}], 0x6, &(0x7f0000000900)=[@cred={{0x1c, 0x1, 0x2, {r1, r9, r10}}}, @cred={{0x1c, 0x1, 0x2, {r1, r9, r7}}}, @rights={{0x38, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0, r0, r0]}}, @rights={{0x2c, 0x1, 0x1, [r0, r12, r0, r0, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r1, r9, r4}}}, @rights={{0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r1, r3, r4}}}, @rights={{0x38, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r1, r2, r7}}}], 0x170, 0x10}, {&(0x7f0000000a80)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f00000010c0)=[{&(0x7f0000000b00)="8393cbff80efddcadedf67d9d9132eb6b16b422a32446a0aa12c6f1a0e1ac341d0138be108255e39d5acdd14db0f81dd2a236f775454a67a15130bb2188190742ce4e8cc112ef52184abbfb573db1bb7d92b2906cbc8a64e632258875fddb07db992b75a6a04d3d5b8de8395fba733ec53de0bef08ff0af9492a5ab2b3e4acf8af6b0d650f1fb109f0d307d5d9f494d87b1c2f0150be36cea3f96f41303448f6b5fe16819c40e71b88591c50f28826d450dede2139214987add9b7ae9e75ba19f4d7d9f544b8c257f466a583095bc8edc7ac690a21b353b06a45e64d11d84573855ec72a5d8a563e", 0xe8}, {&(0x7f0000000c00)="ab128c5baef2e16d8d24131b696c3e4ce4176ad0b3350fbd07f51f308278654fd5f342ff6e87e943955b62b79e15e03fd90f7981715fd8e5c0ae2323e3e34f4ba63061d9b62adc59dfdefcc5a97239a3cbab4cc892aa2bb4fdc426d3f3d54d63f3bf038c65da430cc22b8bacd9980e6555eebbfecfc7fa9529934329e9cd553134a6916c59b5330aa8d54033a1dffbbeed", 0x91}, {&(0x7f0000000cc0)="8087043fa2793e75e7352ab47af6ae38ddb771c6188241720d6399559d8262439156643606c8b98573766c8a34c4e5d908b93d47d6490d36be32734acd1fc96e4aecd7074e39e0e74c83f3eeb8fddd782841bd201837d6d91b82544a665ebea12ddf3216026b12c14a8a3199d06be1f4467119716d6758f9", 0x78}, {&(0x7f0000000d40)="641c7bab26c8581000b9f1259cee894ce978423c2becb4a5394d77d12222241e91a5cfb268aadcba5549b2124ecead0fcfd7b30eb5d74ed5c8b3e8358c2204ca7964a98fee82b0b3776085bc75ef790933a63a77b2b02bd14bcfc72db0f89f9e928ea9ffeb0ff9a5438db109558bb9ffe73f691c72af3a0a25c86efd4eca153c70404e6ad33d6c401512ce3479084ebd109afc6b8ea2a3f67b93f620b98bfa41ddccfb872365c19f3ed7477763f6b9224fc8799e191cbd806a01ce6f07e896cff4ea117463929b7198b1da1ce3ee9db509467552b6c228f7c60f4d43d931", 0xde}, {&(0x7f0000000e40)="a19da9d627944e232f38e8e0c9ef8929245af2971d490e3367c0a1e16544fa72c904b4d8a944879b0eae4f7482b76e2e56a4a18077a737323adb3aad49c741fb88edfd561fc48d9a7e063a281788c9a29a00989f2f5746c476fd05c2b914945de1b0f9813b361600253e3f74841c96768cf0053de1631e409b73a026e22dc5ed4a100b2be8c0e8d840eff7b0295def7485d1a96e72f93d3a9ef068a76a6bf9d8f7b8eb8dd188", 0xa6}, {&(0x7f0000000f00)="eb91e1311a60e3a1a12820fd19c520f40f93deec42f189bce6c4fd38cd58f440baca138ed95e349dcf88edfda8ce616a63f351fb051f773d84776de11753aafd45f858d43ec7039b7b7ece18c6a61a6ef20ebec3ea5ba2f3f7edd33dc6689a404ec32b0f5c2a589d50d5878d995a67a571aaf643634426ac869d84ee818014fc20461558d2cf2e37afddbc91e78c5de41ce40da6f5023c4e2013ec6c4eae856b1ac287303db6f9f865652597dde4a6d155df56ab6bd3300158a2c57e616d482f89bf504deaad64c8c3a43ff255a784687e379cc5", 0xd4}, {&(0x7f0000001000)="f13717cd96f163d832c10f8faf2e173e2f873cf7df8df93650111119d548ee9444373a534a2d4f87ecb13f37547a3bd08c056ec2dca750d3b30a78b4e6fb93c58c3090aad1b09026a5b1858357f57698c3339874290a1828bb6e6bc2b32c6becde9cbb98e7a3eb5b1373b87e0afbed5ee159f726a8eb3c1b18fb93c36e10ae0852054ebb3a59dcb9e8a36c170c80faf69f5f858f773342fc9160074f265139f65324743b482dd732ae1dd4a1b065b30d9f4b", 0xb2}], 0x7, &(0x7f0000001140)=[@rights={{0x34, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0, r0]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {r1, r2, r6}}}, @rights={{0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0]}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r1, r2, r6}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0xf8, 0x8000}, {&(0x7f0000001240)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000012c0)=[{&(0x7f0000003500)="a9cf5e813512e25917b21f9420a2a1f0be880a2e9225dd8a4c7b1a23ea03d4e417cce7c9aec7b61107aadcc4ddcef34faa7a264bd50079d0c87c815959fe09b7dc645dbe5dcf2783b65c7395288486d6c6dc1272e4168f4195a26ed0a6cfddf09217b980d29519e9c7dbc4fc6c732c6135bf7a2b37fe1dee3046c0c3bd06fff23f9e74149c7cff550c96db034f286781a86c29c926144da68589b1790c8b5b417d2878de418fa192f64fe6c3f66476932747392c3610d7d5d316c599b05670e0f8697e24dc23538fb876f49f970deb230592527538a012facd1be1e59475cfece237a155cb18d9214f4442c1e3fa4da0df25c578ffa07711f3498f4460512f6358cc5f046372c823eda9d58796c85c1347e5c63e0e2e48326a29ccf4dd0f37e528f8dc555be1acc93b8bb36f9e25d460e9858fc470fe9b691b805fc3c0719380803a24f8fc66271f814dffd84fd096cdeb75d986c876f7e3f2211e27c2937165728174f915d072a2b54e2079cb932dbf4a893d616c0fb131e55a9e320d1b7b7e67837bb58514b805919c5dcc43b8fc9e51c52eeb48de7890b514e50155891fbba61ca772f7fd47fcc4592a62dec098fb8c1de3ba4c2d1284fe1f7e92ebbd1db63f3ab8922fb64e10d6d3ea6ff5af9f2181cf3f9389f1e1263fac69f2ad7b6582c5411f0d5b39b4f1b503c5271a286c5ae0d2f7b0e261eee2f3ba69d7083f71b71c7b7349f2ef57a9c9e503e378f22986f6105ad3d387107c915b032c78c0688840254082aa36a784bda4516e93c898ccc1ff6287e54da731bbaf83ff58754155e66f2f88b71974ac5c997d304032914911eeab33e8ee93c06659b4b0f632903f9c49f60e98abcf0f9511b63fc963842fed7daf061ff25abe1dcf720b7d9f77448c3252ec292220b8dcc11f7c01016b25f88dcf50b5fee4808212f6b7cb4d6fd902ae848cbb70622fed29aa0d86db60e697b88f8c88863fdc9e3329d131bcb12b13459db5506517da60c21ceb05171f5376b965ef914ca47e569796a775f4a1dfbff5e3db108846eebd1ab0b91b15fc0deeef0b4621a9e0397a667cd1b2766aea8359b0394084f3e532d97e603b7ed399fe56a8a95acac42ac08e7fb33ae8d221f0753537f72617c8f285fb9a3a63e36d1b939b7922bd3175a09f8ae5e362b57b0462552ea0bf6ef676fd7066f9a515217aace82e292e2a68f5ebdddd827095e91670f30ea5b112806a3ce04b785246d8246388053de1de3a386206944e0149ac27c9d20ae7cbbc9649d13e1030520061ca1bf6c3eac48b3b393b85dfed9581eb5f1d86ccb7dc1e66ce81eb4587611b5a4edc354d02b35354510c506ca1f840d3670bb2a45cfb28f42bbfacf5645f7cfbb450a609c40197fc34fff42906819686d6f16eea044952361bb463da607293f3a4eee12cba8919fc02a31c05433bd0a32a9662024469a5a493a5c85b924b72f7076614fd675208f204b06c691d593512d3b6e8d75fa8da9bfeaafd7462d90954f13008be28d84d56745c78a9169fe5a9af3ba0f7b3d7afe67866c6a40e4fbc954efc13378f8ea161b0dfd579a66b5c329ceef6da1e80d8f44ef9cf55d0abf78cf97144c696b52da3dc6e68580be1db86fe65e6323ce4669cdf8ad0995de7ce0aac8a50b8588efc7746cdd0978671a7e6d1f9a4addd5f70e8d5b66bc5127ede92d90b506eba4a9d84bf8332e27818a1b8a445eacef8d2c2e966084b1ad025272e501711d197b7b946c49dca2994dca4082e073ccf2be5ba74be547bf62b72a68e14a64224e9e9c9d449116c2e28cf4b96a2297a9d9c1db90725acb0a2e1a321675bba22ea88834544d7bd76fa184376853ca41c64637e2c69b4209b71813dacaccc38a67924042730329452736904b8c849d50c19476fc70b71251694be13add499bb81c1a09311294cf438791b793a3feeff3553bb8373d43b2e3f11f879045b88449750a5e3ab9982cdac093da2cde7012ea83bedad7e1f29d709a3bcef4ff61999de08f06d59073b6a70b3fc1263d26d01b8f077c6857275b633ca3c9c932293b928cddc08c766d3b294ee36a867f403cc1af61fcdcb08c0a0ceab34bef1c51c2c4b27afd70dfb4b6c9c991b1ad24ff72322f89c534d021703aefa7b953e6e2424cb2794b720f3b04334698bac5d06ac9b73f901084f98563557f490442a9a72d7767d50f0710a137619529a227689720e5e7fe6b178710383b2db5a943f2bd5e3aee165fb7b6168a949a2f217c4839d3b23aac2773a42e5966eb2e5fdf75db72b01c6a3616bc9ae8d2b59d08eb6d86bfbbdc52a4637a4cf1550cac48d7041a603fd9da6c4757885a7985d6b2e8cd712701cf7f87f7fa94480410fe347f6be180aedd1143b03f37ba2801f42a198fe31b99091e09f53d26d020e7f03b8a7b1cf8038487f192836524b30da3599ce30108994464eb5fc155fa30864992d3461654793b0ac4c70a87629f8d98c1044ef2a025f870c1573ed861b06f981ea247eda48db7a8799cb93cfe79a346c237b0f68c8d2a887059ff6a91c0946e76a3f3612fd092d449f8d0f1b8917cf0c31fdcfe05da56f4f13d9d8125e90ea78c250c7a184dff6369ff73d0fcead47b8fe9c6d3212b3dac61f7039b6e49f751499a6d82adf5f0d938c4c845451c597823194998631c99ee35c6891765f2f0dfdf2f512928ee64649708b0f624510680d3b12ade5c267611bd22d2a9821191a9a18da5810b8ea41fb20b0b23e96f4ab149b0f409324233440db46741891363f33f07631bab37b3124f1c9a0c7a57b2af83df896b005d3f4cbf3ee6465925c28533af45675a8d93929f94e7ee20cad4606671535900e82805e2a6c9a807fcdb4c8db065e89090b50f4661daf57f6cf020be4bd917f923853410c0c414a03b2d7d000450fc89095afb04e6b73a83d0a3fef4f5f42032df329fb10a74dafea344c8dfef719fc2b8455465d0f2445aff8ac044b1248eac37d7c4983a20e41bdc929dcf66dc092fe3a4791e712207dea4d2b2172a052749dd96115e324a2b9ab4555dbadcb0671fdae1a8e55667b078fb1ca2f747b6820f00dccf8c2e28e9214206afc4c66e89094a4cd5c973496d3e2c30c315e9c77933363acb836629548ad49d9a80cf9c76c95eac696aca4f40243eb07cde9c8e12d7878a6785c9698b6176f40b7687e9e99ada279b8416b730cfdefc856df1206c7919fd2b8a8a392ff241c908dfd252d3f7de096bb621de73c019f0f5661da38171a9bebef48388ab16675d3bbb3968c11b8dab76d69425f8c7adee8709f3056985dd6e364ad63cb17b1a1a46d23b1c58a96dd9f766bb81d77a8c4c05cd2ee211b5bb2906bb94a95404ba8799628c9ec90c63d0416151772f6dbf2354d5805d58965a6c14d31ddbc3c8731359560a9b24f7dcb1e00a2f3402cd17b5287d87dab64176cfe2e672e79d9977a2a8d803b1cec00e6436beffff15d405cd96998b999fa446e6aeccdd0ea7b7357d8a6d737c657f341f73904bbb7e60e44cc0b3ca580f83533ce23fe3d1b543250e8f9c3fb5a6f13bec217036bf8ddc67f7c7bca156461010ebd4ce66b039426178ae0303822bfb1d39bf2685ae129f3cf302c9d3eb95163b2217201d636797340d2ffcc9394eb934bc0dcb8e8ff2f2d906e10b44a4691e5aca6ab5bcea7f1e9a3312265f6a5fe7197ffddb22c46d7c4f7a80b825941d30c173ccae205389d445c8d9c6330772b27aca7f68868a18b104eb45e53ba497ec91a7e1123566175a9b3c3359267ce661e14570fb8a586f947c72085f4a3ade043a7c62ea7f0a22a601d08507ef279d7e86cb35b3d8c7328d2437e759fc925e0697d30c70dfe40af266a38cfd6594b97348c0051ffed4ed4c89e794b462aab63305456db5ea774632c64207ad743177da74fc124897a44aa05fc805c752c1c4b7ddfb784f992fe0dfe317bc8e2b2a6f805ce6b55817d3fe6583249e97ca8cc56235e8bd255fea38e73cd783c2664aa4f3c2a48cd16f6d979647a0dbbc8adc00c643ac31c73509f169e6e47d68f52e4f4335f65e716cfdaa5e1b1f911346cbe379e434fa880452b6af35584a631b099beb3a3d29ee7ca42393c54b3ee769b4891c6129bef2f121a0801e30967f4e0cc01598188e85482e3dc5391236266e8ff2b3c0278057383bc379beb344436b92d43bee31d32e6c5684bef207adb3ea00dd58979d86da6d2cdbed14cdaa73f8c59ec1d6e9346df7ff51ca15bb790d5ace2b03ef5d9322fbb2ad606fe33daf4f97a292f4e54f9ce9ed345de7febf8f782a72eeaa57d29520354dc25308a019792191c32c04ba684ebef3f69d79a14827badea6770bb38266bf8b23d31d9212142ffbf971a978f8d0ce5b1d340d8b4e2a65ce0820b4d470a324a0bca4c73d1b7221dd3cb2751c7886b2e65961bea12ecf4b4e503f1ac4b531a6400bd6c912a4a572b6f0a3935b802626f1e3a248221e4eb02fc71d515d4751e43b6790e547f810a87dcdd87ef54d82f4248986ff4bdb23b71b1aeff2ce4b6fb74cc7f85b389590ce771c33ce02b31b95b812e44f6b79e778d3a5afaad00381f62aca87cbcdd0cb6cb3581307060d5485edd0c85aa2d62880b23069c7fb79c40f59ecf64914af8a31201c5950592d7b5b5719d2683277da1d9bdd1f57dfcea71c93363e7cf69eb7059909b9d01bbb5c62b2620a4a62acabd728299638859a4c49a16aaa1a7716ece12e27768c2ba267440c151b67c1f4bcda63014eef5f53602701115f3baaff8f923032f4430d7c24fdc50074ba9e9fdd46e9ab382ab4b5986792d9711e3ccc492edb9b36f462dc89200bc3306560ed216ad4ece960c8bb7a6f0e2ebb261a8858f3a3f26b9a22ccb4e98a73087ca1c2d4117ec16a1a362a57745e0b6e0468410962fa51113e742b391a1567d7897e8f5174485b412e461715c244fd7b3ea2867373641de2d9895ca7a599e015b6a3379554792471d209f73f05060c116ed9f0d2e8a64a48e84d43a801c492ff3c7f733f7cf4f043e9b791594ed515cd16bb9e1abe598a1ef2764c152bcb854ddc20e09f945e309730aa88d8385fc72fa4be5b624aa90f12da967d89ae13b7261327c1e507f50d8509af176514a46bf84917019c5f7d57f69e7c3940a474e9000ecb132a0280ea9ad6d83da162b0281924c417b16f0a05bfe292f3649c6e20532266647727d542a6fa86c98c1453eed0c277750d2d6456965259a989c57c322c467434fe26fbd4a7301ad5e165962f4a459813f4a15e21468682cced3dddcfca0f23278c47c3297bd5f3a5c17915ec20fa3e13f21874ebfeacbe7c3e07b5e7359d4ce136934a716f3020db30e30d2ad55dbec3d013125193771f8ceb538e9cfb6d49fda7fdf3864d0723bd0ae4c9ccfe37d21041a68928be569cc3271161c95538909306ee540924ef0608324ff643411bacec5d52ec71479d4e0f0ec6192821d28ad6ec148b12c71e446a8ce38b1a003ac2b20305244e6dde272a72cc2e86d42ac0e12f383c8cbfc65d2355e3daa35606ad7218c30c3acaa682349063d4ba627bc17ffed998a04e457cef4d05f7084aca394345a54f4bcec2acee1d98296f56a2c7245f702ea335e5b5c9c08ae6db7dc73603d72e69f017b4bc3fd3b6661ae9d8d5655aee5c865c0b3c1b3470074eedf6cb7c5657e30a2deea27cd5dd3c565181d75f7ed7055e5cb75828db4c36711d4025a5d4ea85a60b820cd5b4cb5615a7772082e55ee47c6bd9a166f1496eec9153ae4350924f04c4c1326cc7104ca1566cb723848a0", 0x1000}], 0x1, 0x0, 0x0, 0x10}, {&(0x7f0000001300)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000001480)=[{&(0x7f0000001380)="00c09f4434230d6875e4341948d0414c22a86fbc36dbf926ec40b1451ec6c51767a468fbdf23ef7f57828156f806947e1fbad9fb8ebaf78b24b8f3602724f1179188f86f74d0676f3a37b652f6a6ce02b046f10d723ca97d8bb7ad4b3068d50cd1d2b728c1e5b3ab2d4557dda01f2c1f411b86da46383dcd81541b22f066e4563f6ea38ea50065818f4c6efe25da283de7f3fbde096d464e40c68ef0ea0a792906a61446b42942baa89f4a4b82e9139bc1d18d906e48ce32d9bb0a650e1fe578e52b", 0xc2}, {&(0x7f0000004500)="3ccd0bf3ce62667ee3b4afaa06b3f8b253433702b02ee968ea4cf0928fbc48b3a9b13cbcadab86703d5dd0c6d9b8470b93c0975f08715809bba4b63347a44e8f5a750ec5b7703798c90baf6f569b8c8235", 0x51}, {&(0x7f0000004580)="ac552de8fe092a1cd97c0e97b5bb328abdb3ec15cd1261e64a2189fffa8b820b3cec4e89691cb0137243e22cfc9f381d73a853e44b23564ca342c7344afe2f83b40c9743e3086084cd6e9f7b33845aaafc9cf3f4fea086acd47ee249f238f7920b28c985cde2148d84c895ed39bb06997db9ed574ea48e8c9fd87bb03131292d39b5", 0x82}], 0x3, &(0x7f0000004640)=[@cred={{0x1c, 0x1, 0x2, {r8, r3, r5}}}], 0x20, 0x4000000}, {&(0x7f0000004680)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000006900)=[{&(0x7f0000004700)}, {&(0x7f0000004740)="b8663816670216cd522fc29ed855c4226c0c6e192563ba4a155d48930a4e60380c9dc263f09cb0ebc1de72fb730d1928e1de9a98d354cd112235dff72e3ff803157c2b7ef4e6be7f0cc7", 0x4a}, {&(0x7f00000047c0)="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", 0xfe}, {&(0x7f00000048c0)="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", 0x1000}, {&(0x7f00000058c0)="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", 0x1000}, {&(0x7f00000068c0)="8ebaff7acc51eb10b798d66535d1c1a7", 0x10}], 0x6, &(0x7f0000006980)=[@rights={{0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r1, r3, r7}}}, @rights={{0x20, 0x1, 0x1, [r0, r0, r0, r0]}}, @rights={{0x20, 0x1, 0x1, [r0, r0, r0, r0]}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0xa8, 0x44014}], 0x5, 0x20000800) r13 = getegid() getgroups(0x3, &(0x7f0000000380)=[0xffffffffffffffff, 0x0, 0xee01]) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)=0x0) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000480)={{}, {0x1, 0x3}, [{0x2, 0x4, r2}], {0x4, 0x1}, [{0x8, 0x0, r4}, {0x8, 0x5, r5}, {0x8, 0x2, r6}, {0x8, 0x0, r7}, {0x8, 0x4, r10}, {0x8, 0x4, r13}, {0x8, 0x2, r14}, {0x8, 0x4, r15}], {0x10, 0x4}, {0x20, 0x1}}, 0x6c, 0x1) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 15:25:22 executing program 1: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) r1 = socket(0x1f, 0x80000, 0x7758) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='gid_map\x00') readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1) readv(r2, &(0x7f0000000580), 0x3c1) connect$bt_rfcomm(r1, &(0x7f0000000080)={0x1f, {0x1000, 0x9, 0x80000000, 0x4, 0x480, 0x1}, 0xffffffffffffffff}, 0xa) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:25:22 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, "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"}, 0xffffffffffffff07) close(r0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) 15:25:22 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="044dfe5d175a8d0b8cf014931b664a6faf8db74b931fb4c3db8329d228eb3eb0b3c41a1383a5f3ff2220a1a673f07b951fbbc6d9903d953aaf0578cce6c8aab6da2f7ab65205b0a5cda70f2418809798f55447e70b0d4c32ab6879b09206c13fe432a5eee466c8333593a69dc7d7905777c38d937359bf9533bfdb2cc1f17e35a885e6bb5e58ff1d72bef43eccde18a2f284514b94a88d8da6b82fb3ec64e87abbe427791aa299b5bac4590c7aa6396fd27633373b5c5938415321a1f0e3141bff3a5e3e532b4e362b6ceb25acf0270b177a33f216df738e"], 0xd8) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r1 = openat$cgroup_ro(r0, &(0x7f0000000240)='rdma.current\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000280)=""/83, &(0x7f0000000300)=0x53) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x5, 0x7, 0x3, "b2bbaa2524e1784e310a184eec795ca5c60449d5842013fe6806ea778cb79d85", 0x35315241}) io_setup(0x8, &(0x7f0000000180)=0x0) io_getevents(r2, 0x101, 0x0, &(0x7f00000001c0), &(0x7f0000000200)) close(r0) 15:25:22 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f00000001c0)) ioctl$KVM_DEASSIGN_PCI_DEVICE(r0, 0x4040ae72, &(0x7f0000000100)={0x4, 0x8, 0xfffffffffffffff8, 0x4, 0x3}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0x4a, 0xaaaa8f9, &(0x7f0000000040)=[{&(0x7f0000000080)="eb7fc86d4f66732e66617400020341000500077008f8", 0xffffffffffffff50}], 0x8000, 0x0) 15:25:22 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x40000, 0x0) bind$netrom(r4, &(0x7f0000000140)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}, [@default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) 15:25:23 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000200)=@HCI_ACLDATA_PKT={0x2, "1cc853cc93a1f2ae398515b8a318cd3999c3bb55ecca5fcfe80fe71512f79a41f5d96e"}, 0xfffffffffffffedc) close(r0) [ 646.407725] kvm [15111]: vcpu1, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 15:25:23 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0xb, 0x1, {0xc, @pix_mp={0x6, 0x80, 0x0, 0x8, 0x0, [{0x7, 0x1}, {0x1, 0x9}, {0x7fff}, {0x8001, 0x4}, {0x5, 0x3}, {0x0, 0x2000000}, {0x3, 0x40}, {0x0, 0x6}], 0x10001, 0x6, 0x1, 0x2, 0x4}}}) close(r0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xb8, r1, 0x811, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x64, 0x1, [@TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'ib', 0x3a, 'veth0_to_bridge\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ipddp0\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5b4d}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffffffffffff}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x26a8}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4048010}, 0x2004c041) rt_sigaction(0x36, &(0x7f0000000180)={&(0x7f0000000000)="0fba236cc461fe12cec4a1291613f7ea66420f3adfc1ee66420fe3c7c4a21d3d394487fcf0fe4b0ec481fb2d36", {0x1}, 0x10000000, &(0x7f0000000040)="66460f383b8c2a0d00000046710ac483654201e3daae42f634f646d0fff5c4e1285ed22e3636f3652e26f045819d4218d1e2e492e6f5f3ddcec42189d8e0"}, &(0x7f00000002c0)={&(0x7f0000000240)="c4e28db6bec8000000c4825197a5b2e010668f099897151e000000c4a2c9967300f01042063666450f65a6ec0000006436660ffbb5fdffff7fc4e15d603ddf38000065f2410f38f149e7c442c9403470", {}, 0x0, &(0x7f00000001c0)="c4c169762bf3f00fc12dfbffff7f0faea855be372a660f383044ee003e0f84aec37cd5c483f97c4d030ef246a72ef7b500008020780cd2d1"}, 0x8, &(0x7f0000000300)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000000), 0x4) recvmmsg(r2, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) sendto$inet6(r2, &(0x7f00000001c0)="b4", 0x1, 0x0, 0x0, 0x0) ioctl$PPPIOCSCOMPRESS(r0, 0x4010744d) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) 15:25:23 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f00000000c0)={{0x5, 0x1}, 'port0\x00', 0x60, 0x400, 0x2b, 0x100000000, 0xfffffffffffffe00, 0xfffffffffffffffc, 0x0, 0x0, 0x7, 0x814}) close(r0) 15:25:23 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) 15:25:23 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10000) r1 = syz_open_dev$mouse(&(0x7f0000000280)='/dev/input/mouse#\x00', 0x5, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@setlink={0x78, 0x13, 0x330, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x4000, 0x120}, [@IFLA_NUM_RX_QUEUES={0x8}, @IFLA_LINKINFO={0x48, 0x12, @ip6ip6={{0xc, 0x1, 'ip6tnl\x00'}, {0x38, 0x2, [@tunl6_policy, @tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x9}, @IFLA_IPTUN_ENCAP_LIMIT={0x8, 0x6, 0x6}, @IFLA_IPTUN_ENCAP_LIMIT={0x8, 0x6, 0x4bd}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @remote}], @IFLA_IPTUN_PROTO={0x8}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x9}]}, 0x78}, 0x1, 0x0, 0x0, 0x4048080}, 0x4008890) close(r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) mq_notify(r2, &(0x7f0000000240)={0x0, 0x11, 0x0, @thr={&(0x7f0000000080)="045b0792b3dad3edef732c86ea90bf2ae16646d0162281a0bf1d3993c81bf34b52073a038e2d299edce8e78535b1f500f8b06e18d0eda3b4821641847e24f5543e77871b0514dd5180338e1942eab85658159654a783e2b27de81eb5ef04c327f6d6b418e7f6661105b07acefba4f17b63d53ab61443d7f300e575a16110de6187ee7f07313afb9455f4c72fd605a3e4010818fb005780516f4c7ded23ffeb8376f6755ba4f696d9c8d8e8a92c14fb72765792d52bb2db348234a2a7f781c3a82fbcb7ba5c7dbf5fc672737e2e3fed4fcedf4ad1753b76a1ba69ff0024b36e1f75c9e5678c228598d0e4d5", &(0x7f0000000180)="18c2d3af59561a10893b3297f9f94f7c4419743922c8b42aacf8cc6df6ec49236dcce059a3ee9ec027069858eddc19f051ff0f140b34b57ceab5d553c4d65b9fac4bc21594cd76e7edbfd29cc31447262f2ba97e97297729edc126400a7f515d3d9746c2c8d2afaea26bf838624206a6d333113c3d106e491d986c41412a2f963e43fa6d09ec53434f9f5358d11cbfdeb90d7a9d3378093f920d1e6cd19a4d5137"}}) [ 646.550118] protocol 88fb is buggy, dev hsr_slave_1 15:25:23 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x400, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in=@multicast1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f0000000280)=0x87) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f00000002c0)={@dev={0xfe, 0x80, [], 0x10}, r2}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0x9, '\x00', 0x6}) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) [ 646.587692] kvm [15138]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 [ 646.880138] protocol 88fb is buggy, dev hsr_slave_0 [ 646.885283] protocol 88fb is buggy, dev hsr_slave_1 [ 647.110174] protocol 88fb is buggy, dev hsr_slave_0 15:25:25 executing program 0: creat(&(0x7f0000000180)='./file0\x00', 0xa0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000014c0)="11dca5055e0bcfec7be070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000620920144f8883d9b22703305b32cd2cc7628fe23074bc015a41ff0581e5ef57c5000000000000000bcbb61c10b1f4451c"], 0x1}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm_plock\x00', 0x4004, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f00000001c0)=ANY=[@ANYBLOB="5f01000000d2fcbb616e93240003e74c8805b5709f97681fc3c02358ea3b1dabba3f7966ef34956ca4893117454d858802de5811ad8fb0027f3232b5ffc4d39232854233b2faf4aef269038f2625d5b293dbb2ef71119ec35e3d551e0c50a59ea0ba87f48e1ed30d308d08925cfbf03b768627ae08a8eacd5537bb3cbf4db2ca28fb8b9f0524c5741d07e7f9"], &(0x7f0000000100)=0x6) ptrace$cont(0x9, r1, 0x0, 0x0) 15:25:25 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x4000, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x2, 0x40, 0x10001}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000140)={r2, 0x2, 0x6, 0x829b, 0x1ff, 0x5}, 0x14) close(r0) 15:25:25 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, &(0x7f0000000180)) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000080)=""/44) syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x800, 0x40000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r4) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) 15:25:25 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x0) 15:25:25 executing program 1: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x400, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in=@multicast1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f0000000280)=0x87) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f00000002c0)={@dev={0xfe, 0x80, [], 0x10}, r2}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0x9, '\x00', 0x6}) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:25:25 executing program 2: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x186, &(0x7f0000000040), 0x8000, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) sendto$netrom(r0, &(0x7f0000000100)="e21744d1e1e364197fb1163a10fd660b1a5a73f44aac8abc03d525cef8c744556b24ed1db47990617b38114fc2858fa029200f70b23381e30ba6f6934cc854abbe6a515eb65189f37e079209a1a8f28220b91a5e1a78be426698bfe20d2c0f7563c7d9049bfe3c974f0a7cb6d2c8613e1cb6fbec8f90eb33533de7e25ebefec3563b63a3c900a55125c2b0140e52f1f710c9f47a01756f52b935ac6b457de8bfe16afca4123a5cb05b036d9d6133bd0c9d00", 0xb2, 0x40084, &(0x7f0000000040)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x29) 15:25:26 executing program 2: open$dir(&(0x7f0000000380)='./file0\x00', 0x4000, 0x80) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/capi/capi20\x00', 0xc02, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x8007ff, 0x4, &(0x7f0000000300)=[{&(0x7f0000000100)="8f317e89fc0d7f1e02e2c6bf993784845a5dde615fe2de06f328110e04548acb5551702a43b4ff977719b51d55a20fa792d8a527a4421e0fa82318224095d0ea7d595556b1e3d76d2275329c5420143c971b32a69d1b00abe25ef6b0f6f228030f8e6159a3d067201c95af25b1e5d35306fd30abc08d477573d0131b0619481db0ed33307355efe593a28555186370cccac4197c733756f51891ad196eb805874f8d4c1360afc8babb34c9661990a9e48fed34c5516874d6775fea753aabc17503d305d12886322bc9233f038c0e0c69deb344539a32b197fd874f27f15fbda8f9d3a842ce5b09b1f716ddbd6e789bb7e30053f54b8627", 0xf7, 0x1}, {&(0x7f0000000480)="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", 0x1000, 0xa67f}, {&(0x7f0000000000)="fb", 0x1, 0x5}, {&(0x7f0000000200)="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", 0xfe}], 0x1000, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file1\x00', 0x0, 0x8}, 0x10) 15:25:26 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x1, 0x0) ioctl$RTC_WKALM_RD(r1, 0x80287010, &(0x7f00000000c0)) 15:25:26 executing program 1: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:25:26 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x3) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) fchdir(r0) 15:25:26 executing program 2: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb7fc86d4f66732e66617400020341000500077008f8", 0xffffffffffffff25}], 0x8000, 0x0) 15:25:26 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x400000) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x4, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @remote}], 0x10) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) [ 649.439110] kvm [15160]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 [ 651.040130] net_ratelimit: 19 callbacks suppressed [ 651.040135] protocol 88fb is buggy, dev hsr_slave_0 [ 651.050374] protocol 88fb is buggy, dev hsr_slave_1 [ 651.270230] protocol 88fb is buggy, dev hsr_slave_0 [ 651.275617] protocol 88fb is buggy, dev hsr_slave_1 [ 651.990214] protocol 88fb is buggy, dev hsr_slave_0 [ 651.995338] protocol 88fb is buggy, dev hsr_slave_1 15:25:29 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x5, 0x80000) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000080)={0x7, 0x6fd, 0x40, 0x7}) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000140)={{0xa, 0x4e24, 0xfe00000000000000, @local, 0xa480}, {0xa, 0x4e23, 0x6, @mcast1, 0x8}, 0x3, [0x1, 0x100000001, 0x1, 0x34, 0x63b, 0x4, 0x4, 0x128]}, 0x5c) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc00000fd, 0x0, 0x4000000c], [0xc1]}) 15:25:29 executing program 1: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x4000, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x2, 0x40, 0x10001}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000140)={r2, 0x2, 0x6, 0x829b, 0x1ff, 0x5}, 0x14) close(r0) 15:25:29 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x301000) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x4000, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x6a, 0x3, [0x8, 0x1879, 0x5]}, &(0x7f0000000100)=0xe) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={r2, 0x3ff}, &(0x7f0000000180)=0x8) 15:25:29 executing program 3: openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x200) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x8001, 0x40) fcntl$addseals(r0, 0x409, 0x7) bind$bt_l2cap(r1, &(0x7f0000000180)={0x1f, 0x3ff, {0x7, 0x0, 0x200, 0x10000, 0xffff, 0x5}, 0x7}, 0xe) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x400, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x7530}, 0x10) keyctl$session_to_parent(0x12) ioctl$CAPI_REGISTER(r2, 0x400c4301, &(0x7f0000000100)={0x1, 0x31e7da57, 0x4}) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x0) 15:25:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000014c0)="11dca5055e0bcfec7be070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000620920144f88cd8bf8fa050030cea0e283d9b22703305b8fe23074bc015a41200581e5ef57c5000000000000000bcbb61c10b1f4451c"], 0x1}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000100)='./file0\x00', 0x61) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x10000, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000080)={@my=0x1}) ptrace$cont(0x9, r1, 0x0, 0x0) 15:25:29 executing program 2: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x80840, 0x0) r1 = getpgrp(0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000100)=r1) syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x250, &(0x7f0000000040)=[{&(0x7f0000000080)="eb7fc86d4f66732e66617400020341000500077008f8", 0x16}], 0x8000, 0x0) [ 652.310182] protocol 88fb is buggy, dev hsr_slave_0 [ 652.315287] protocol 88fb is buggy, dev hsr_slave_1 15:25:29 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) close(r0) 15:25:29 executing program 1: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) creat(&(0x7f0000000080)='./file0\x00', 0x10) [ 652.390113] protocol 88fb is buggy, dev hsr_slave_0 [ 652.395384] protocol 88fb is buggy, dev hsr_slave_1 15:25:29 executing program 2: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7ff, 0xaaaaaaaaaaaab00, &(0x7f0000000100)=[{&(0x7f0000000000)="eb7fc86d4f66732e66617400020341000500077008f8", 0x16}], 0x8000, 0x0) 15:25:29 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0xfffffffffffff095, 0x501a83) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f00000000c0)={0xfffffffffffffff8, 0x4, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffd01, 0x8, 0x4, 0x7, 0x7, 0x0, 0xfffffffffffff2fc, 0x3, 0x100000001, 0x0, 0xffffffffffffffff, 0x4}) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 15:25:29 executing program 1: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:25:29 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xa6e7, 0x40000) ioctl$VIDIOC_G_FREQUENCY(r1, 0xc02c5638, &(0x7f0000000080)={0x3ff, 0x5, 0x9}) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) 15:25:29 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/raw\x00') accept4$bt_l2cap(r1, &(0x7f00000000c0), &(0x7f0000000100)=0xe, 0x80000) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:25:29 executing program 1: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:25:29 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') close(r0) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x80000, 0x30) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000300)={0x80000000, 0x1, 0x3, {0xb, @sdr={0x30324c4a, 0x3}}}) r2 = getpid() perf_event_open(&(0x7f0000000100)={0x7, 0x70, 0x16ac, 0x1, 0x3e0000000000000, 0x7ff, 0x0, 0x7, 0x80004, 0x3, 0x3, 0x1f, 0xd58, 0x5, 0x4, 0x400, 0x6, 0x4, 0x9, 0x0, 0x942, 0x70280000, 0x400, 0x1f, 0x5, 0x7fff, 0x0, 0x100, 0x4, 0x9, 0x0, 0x5, 0x8000, 0x4, 0x4, 0x0, 0xc8e, 0x7, 0x0, 0x100, 0x2, @perf_config_ext={0x100000001, 0x9}, 0x800, 0x4, 0x8, 0x1, 0xffffffffffffffbb, 0x7a, 0x29b}, r2, 0x2, r1, 0x1) [ 652.552756] kvm [15244]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 15:25:29 executing program 1: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x2001, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000000c0)={0x7, 0x4d, 0x1}, 0x7) close(r0) close(r0) 15:25:32 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 15:25:32 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) write$selinux_user(r0, &(0x7f0000000080)={'system_u:object_r:audit_spool_t:s0', 0x20, 'system_u\x00'}, 0x2c) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000040)={0x0, 0x3, 0x23}) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0xc0000100, 0x0, 0x4000000c], [0xc1]}) 15:25:32 executing program 2: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x7, &(0x7f0000001540)=[{&(0x7f0000000100)="85d689a87005ce70097c9ba2690f4d588a095261a541c8df59596796307baec93b3fc38debc22d4e237069f3540f62532c25f13f6cdd44cd5898de887354605a15dd94a2e20185379dc761cb5cb5edb6a629eacea310252117d68fa3d1d1bc1276a426d2aeb0fa36e6146c720a86f91d3f2e9b42603db902779743397305e4bffa4a50fb805fcb772983d948b312dcbdf69ebdbbd2e32813d34f", 0x9a, 0x6}, {&(0x7f0000000000)="2d13b1af6bd7c77ac648f6e6b5a3dbab8a15c3d06993c31aa5f87aac71723031e93b513c5b4307289aebe1", 0x2b, 0x4}, {&(0x7f00000001c0)="b3ef95dd0af95f1ef74e8e70428daa26b09b603dfa0ae27d0c6fdbf8b96a80624091256181adb55a9218d443e676121d6bb43b54094dd2736ead9ee5dc0529b6830c8bf98bbe6127c9399bc89dfb298d0c26d7d88fd5cb1693bba0cac0e25e3d47f73bc1e746d9e9b5189a8d1c0c0c72fde7797cd63b3740bd798d7ad167fb9f9f671f84494cdfc73798fae6187126d52802ed43bc7d556f69fa79217b91963083f8f4a1f8e9d163fab85584263cb0fe8f4b200359530d23fa6fdcf3e06d3ef8cc96438ee529b74ec5249fb23821db0c9b3b975f7f4ed8ec7ce3c0642c5d4bde13d6f2", 0xe3, 0xffffffffffffffe0}, {&(0x7f00000002c0)="d2598ac2d570abafc6f6fd492c30", 0xe, 0x9}, {&(0x7f0000001600)="6cc697a19ae76a23f5223dedaa6ea1d849e6cfa80482ddf3207c98f69012143142b95fa744c837d12afae0503dad57d5e9e62cae090322f6b236c6ab753f593c2685413799b12c171e53d587693bda9d5761ef444378854249c5bddd8a1ff996a2952d462742d4378fe8feb6445d68e182bb5c25a832b24ead98cd67f0d79fb15639b1d4027dd89d8227ffa7f1a310a536908dc6e8823046e5537021c3887a69cbcc9d15e5eca0e5a9435dba54231b452643c56952c5b70a1aa8b04b2df06a6c90ed5bf13196974fd03609bd01e0dace1c7b2bad8a82aa", 0xd7, 0x3}, {&(0x7f0000000480)="b0ab60b97756de7bbd4ea0d2dad1831e8dc4d029c958c3ef90f60983003c6e9cea008e7223470a2f704e10f095bc48b24c1aa3e4ef1a7ae39a7d00b319dbaa664084005cba1fb7cd81db2ca7a8c60942c17f08093325f03aaeec7506a66a65017dc169ad00d1a684af9368e368b0e7c67cb47f2daddb237a2c95e22e1b7b6a1c2a707b615b4f623bc614b38c5268033aba59d39c9f10c333b1af3048537f1884ef8e430368127f3b4a86", 0xaa, 0x80}, {&(0x7f0000000540)="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", 0x1000, 0xffffffffffffdf2d}], 0x8000, 0x0) 15:25:32 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0xffffffffffffff90) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/checkreqprot\x00', 0x0, 0x0) r2 = getuid() r3 = syz_genetlink_get_family_id$team(&(0x7f0000000340)='team\x00') getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000480)=0xe8) getsockname$packet(r1, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000005c0)=0x14) getsockname$packet(r1, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000007c0)=0x14) getpeername$packet(r1, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000840)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000880)={{{@in=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@local}}, &(0x7f0000000980)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000009c0)={{{@in6=@initdev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@loopback}}, &(0x7f0000000ac0)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000010c0)={{{@in6=@ipv4, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000011c0)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000012c0)={{{@in6=@initdev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@ipv4={[], [], @remote}}}, &(0x7f00000013c0)=0xe8) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f00000015c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001400)={0x174, r3, 0x503, 0x70bd26, 0x25dfdbfd, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r5}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0xffffffff}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r7}, {0x40, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r9}, {0x40, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r11}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x7fffffff}}}]}}]}, 0x174}}, 0x40804) r12 = getegid() write$FUSE_CREATE_OPEN(r1, &(0x7f0000000280)={0xa0, 0xfffffffffffffff5, 0x6, {{0x1, 0x0, 0x9, 0x12, 0x401, 0x2, {0x3, 0x4, 0x3, 0x3200000000000, 0x3ff, 0xfff, 0x2, 0x8000, 0x8, 0x100000000, 0x9, r2, r12, 0x3c07, 0x8d36}}}}, 0xa0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x209, 0x5, 0x12, 0x0}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000140)={r13, @in={{0x2, 0x4e23, @loopback}}, 0x6, 0x80000000, 0x80000000, 0xda57, 0x3}, &(0x7f0000000200)=0x98) close(r0) 15:25:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11cce09755c0a80bcfec7be070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000620920144f88cd8bf8fa050030cea0e283d9b22703305b8fe23074bc015a41200581e5ef57c5000000000000000bcbb61c10b1f4451c27da0de0facdaa01ae1c2a7cab26d236a095c742dd49007ee2d36895b51e2d4a7cab990d8a6d05f31e39b84e8847bf462bf4fb081dbbb066ff67cc31b31b97639ab9f258454ab1525a7bf3c076fd44a57260d85bcfdc720787c0587008084a154df002a1b823fa6e58b79d514e8802870be7d110e5e10f6a3d6b07ea4276a3be6244e319355ba0e100efa4f302aa4fdfc37a6957fee065e7adf8de57985e12e84a6b88f3f23ac10b9f6bd21fe197b143cda19e17c2a39b368f25df998c"], 0x1}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$cont(0x18, r1, 0x0, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000080)='security.ima\x00', &(0x7f0000000100)=@md5={0x1, "c1b446102a66041cd9d387fcdff3a214"}, 0x11, 0x3) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) write(r0, &(0x7f0000000180)="31506ff7316de173a9162d0752ca4dabda048ec9e72f94a2920026a4845c2fdd17a238d3236db8fb33991cfa7660b41ba316f238bb67e0ce2b36793fda5ff886c9039447566abb592a47fadb9a378c51c122dce4703e48313f6b24fa964848c15bc2b2b60833b7a76b254166ad48dccb2fa3fc0441a850fc13d1", 0x7a) 15:25:32 executing program 1: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x2001, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000000c0)={0x7, 0x4d, 0x1}, 0x7) close(r0) close(r0) 15:25:32 executing program 2: setxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='security.selinux\x00', &(0x7f0000000140)='system_u:object_r:auditd_etc_t:s0\x00', 0x22, 0x1) syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb7fc86d4f66732e66617400020341000500077008f8", 0x16}], 0x8000, 0x0) 15:25:32 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) pipe2(&(0x7f0000000140), 0x80800) syz_open_dev$usb(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x1, 0x40480) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000240)='memory.events\x00', 0x0, 0x0) getpeername$tipc(r2, &(0x7f00000000c0)=@id, &(0x7f0000000100)=0x10) 15:25:32 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000)=0x7ff, &(0x7f0000000040)=0x4) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0x8000000) [ 655.470502] kvm [15279]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x4000000c data 0x0 [ 655.475215] refcount_t: increment on 0; use-after-free. [ 655.544968] ------------[ cut here ]------------ [ 655.549779] WARNING: CPU: 0 PID: 15284 at lib/refcount.c:153 refcount_inc.cold+0x18/0x1f [ 655.558016] Kernel panic - not syncing: panic_on_warn set ... [ 655.558016] [ 655.565436] CPU: 0 PID: 15284 Comm: syz-executor.4 Not tainted 4.14.125 #19 [ 655.572545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 655.581939] Call Trace: [ 655.584539] dump_stack+0x138/0x19c [ 655.588190] panic+0x1f2/0x426 [ 655.591389] ? add_taint.cold+0x16/0x16 [ 655.595375] ? refcount_inc.cold+0x18/0x1f [ 655.599620] ? __warn.cold+0x14/0x36 [ 655.601871] kobject: 'kvm' (ffff8880a6e7b3d0): kobject_uevent_env [ 655.603338] ? refcount_inc.cold+0x18/0x1f [ 655.603349] __warn.cold+0x2f/0x36 [ 655.603360] ? ist_end_non_atomic+0x10/0x10 [ 655.603371] ? refcount_inc.cold+0x18/0x1f [ 655.603387] report_bug+0x216/0x254 [ 655.609766] kobject: 'kvm' (ffff8880a6e7b3d0): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 655.613861] do_error_trap+0x1bb/0x310 [ 655.613873] ? math_error+0x360/0x360 [ 655.613884] ? vprintk_emit+0x21c/0x600 [ 655.613892] ? vprintk_emit+0x171/0x600 [ 655.613906] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 655.613921] do_invalid_op+0x1b/0x20 [ 655.613931] invalid_op+0x1b/0x40 [ 655.613943] RIP: 0010:refcount_inc.cold+0x18/0x1f [ 655.613952] RSP: 0018:ffff88808fa3f9c0 EFLAGS: 00010286 [ 655.631710] kobject: 'kvm' (ffff8880a6e7b3d0): kobject_uevent_env [ 655.638845] RAX: 000000000000002b RBX: ffffffff86fa8520 RCX: 0000000000000000 [ 655.638851] RDX: 0000000000040000 RSI: ffffffff814afe15 RDI: ffffed1011f47f2e [ 655.638856] RBP: ffff88808fa3f9c8 R08: 000000000000002b R09: ffff888064e2e8c8 [ 655.638861] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880a7ccb538 [ 655.638866] R13: 0000000000000000 R14: ffff8880a7ccb500 R15: ffff888090380b20 [ 655.638892] ? vprintk_func+0x65/0x159 [ 655.638909] kobject_get+0x5b/0x70 [ 655.644156] kobject: 'kvm' (ffff8880a6e7b3d0): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 655.646599] kobject_add_internal.part.0+0xfc/0x340 [ 655.646613] ? kfree_const+0x40/0x50 [ 655.646625] kobject_add+0x11f/0x180 [ 655.646636] ? kset_create_and_add+0x180/0x180 [ 655.754055] ? get_device_parent.isra.0+0x34e/0x560 [ 655.759084] ? kmem_cache_alloc_trace+0x623/0x790 [ 655.764019] ? lock_downgrade+0x6e0/0x6e0 [ 655.768179] get_device_parent.isra.0+0x415/0x560 [ 655.773025] device_add+0x2d3/0x1490 [ 655.776734] ? device_initialize+0x430/0x430 [ 655.781138] ? device_private_init+0x190/0x190 [ 655.785730] hci_register_dev+0x2d9/0x810 [ 655.789892] ? hci_init_sysfs+0x7c/0xa0 [ 655.793885] __vhci_create_device+0x2a6/0x560 [ 655.798378] vhci_write+0x2a1/0x437 [ 655.802005] __vfs_write+0x4a7/0x6b0 [ 655.805720] ? kernel_read+0x120/0x120 [ 655.809618] ? rw_verify_area+0xea/0x2b0 [ 655.814115] vfs_write+0x198/0x500 [ 655.817655] SyS_write+0xfd/0x230 [ 655.821768] ? SyS_read+0x230/0x230 [ 655.825395] ? do_syscall_64+0x53/0x640 [ 655.829384] ? SyS_read+0x230/0x230 [ 655.833033] do_syscall_64+0x1e8/0x640 [ 655.836916] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 655.841774] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 655.846965] RIP: 0033:0x4592c9 [ 655.850170] RSP: 002b:00007f99bd51ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 655.857888] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000004592c9 [ 655.865179] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000003 [ 655.872473] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 655.879752] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f99bd51f6d4 [ 655.887036] R13: 00000000004c9394 R14: 00000000004e03e8 R15: 00000000ffffffff [ 655.895843] Kernel Offset: disabled [ 655.899607] Rebooting in 86400 seconds..