0000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='cmdline\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0) r2 = getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x3, 0x7, 0x8, 0x6, 0x0, 0x9, 0x20, 0x2, 0xfffffffffffffff7, 0x401, 0xfffffffffffffffa, 0xfff, 0x10000, 0x1, 0x4, 0x1, 0x400, 0x5, 0x0, 0x7fff, 0x2, 0x0, 0x7f, 0x7, 0x40, 0x7fffffff, 0xffffffff, 0x6, 0x6, 0x9, 0x40, 0x1, 0xff, 0x1, 0x7fffffff, 0x2000000020000, 0x0, 0xfffffffffffffffd, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x10, 0x5, 0x9, 0x7, 0x6e, 0x9, 0xfffffffffffffff7}, r2, 0x2, r1, 0x3) [ 602.322588] Unknown ioctl -1067953333 [ 602.331724] IPVS: set_ctl: invalid protocol: 4352 0.0.0.0:20002 03:38:51 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x3f000000, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 602.382689] IPVS: set_ctl: invalid protocol: 4352 0.0.0.0:20002 03:38:51 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0xf00000000000000) [ 602.558163] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:38:51 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x900, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 602.609949] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:38:51 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x27d, 0x0, 0x0) 03:38:52 executing program 3: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x20002, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000040)={0x8, 0x8000, 0x883, 0x9, 0x4, 0x2}) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000002c0), 0x13f, 0x3}}, 0x20) gettid() 03:38:52 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x2000, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 602.775449] IPVS: set_ctl: invalid protocol: 2304 0.0.0.0:20002 03:38:52 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffedb, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='cmdline\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="47578aec0eda7b3d1e91c0d6792afafc1424363c50309a19aef132648c5849879773d766b3fdedca914a4c622944c793a90ccf70539e15396c97a1ada753ce8665ffbefa4800304f92aa98ac0980f16273aa812553dc33924e73e97e9aef917d", 0x60) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f00000002c0)={{0xffffffffffffffff, 0x3, 0x80, 0x1, 0x974b}, 0x7ff, 0x6, 'id0\x00', 'timer1\x00', 0x0, 0x8, 0x1, 0x3, 0x7}) fanotify_init(0x4, 0x3) 03:38:52 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x40, 0x0) read$eventfd(r0, &(0x7f0000000040), 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='cmdline\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0) 03:38:52 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x80ffff) [ 602.895858] IPVS: set_ctl: invalid protocol: 8192 0.0.0.0:20002 [ 602.908624] Unknown ioctl -1067953333 03:38:52 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x7400000000000000, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 602.938832] IPVS: set_ctl: invalid protocol: 8192 0.0.0.0:20002 03:38:52 executing program 3: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x20002, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000040)={0x8, 0x8000, 0x883, 0x9, 0x4, 0x2}) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000002c0), 0x13f, 0x3}}, 0x20) gettid() 03:38:52 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x24c, 0x0, 0x0) 03:38:52 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x6800000000000000, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 603.089565] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 603.170998] Unknown ioctl -1067953333 03:38:52 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x8000a0) 03:38:52 executing program 3: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x20002, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000040)={0x8, 0x8000, 0x883, 0x9, 0x4, 0x2}) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000002c0), 0x13f, 0x3}}, 0x20) gettid() 03:38:52 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x74000000, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 603.258836] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 603.297481] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:38:52 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='cmdline\x00') ioctl(r0, 0x3, &(0x7f00000001c0)="7e0d3238d8b58bdd51dc852a9521d266381d5830aeee131eb5fed5b5e73ab42a4d595b5c8d04dd67e0ee7d603106dfca897cd5ab898059eaaa07aedbffe508ccb87d1207f03f5ef56910190604ebc7bd348b32ca5dd534bddf4eac06a889d6250069b40bd8e087b2179c2e803eb649a78ac20f81cb6153d3a12a60ac18100d58a768bba3bf296b2ce6f9d9dd53c527f6ddaeb626b5f7f78074fb8e93d4330c") ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f00000002c0)=0x8) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000000c0)=0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x3, 0x7, 0x401, 0x6, 0x0, 0x4, 0x0, 0x4, 0x9, 0x0, 0xff5, 0xd74, 0x10000, 0x10001, 0x3, 0x2, 0xffffffff, 0x80000000, 0xfc3f, 0xfffffffffffffff9, 0x1, 0x1, 0xfffffffffffffffa, 0x0, 0x8000, 0x89, 0x100, 0x6, 0x7, 0x1, 0x6, 0x5, 0x0, 0x8, 0x2, 0x8, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000000), 0x5}, 0x224, 0x4, 0x9, 0x6, 0x6, 0x1, 0x7}, r2, 0x2, r1, 0x9) preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0) 03:38:52 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x71, 0x0, 0x0) [ 603.386744] Unknown ioctl -1067953333 03:38:52 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x9, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 603.434487] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 603.456288] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:38:52 executing program 5: socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0xb7, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000001340)='/dev/admmidi#\x00', 0x5, 0x80000) bind$vsock_dgram(r0, &(0x7f0000001380)={0x28, 0x0, 0x0, @reserved}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffe38, &(0x7f0000000000)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='cmdline\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0) sendmsg$nfc_llcp(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x27, 0x1, 0x0, 0x4, 0x100, 0x5, "fc3faf3a0828d8715d8a7c606bc19a9e3ef06ce8829fa4204a9ebfa963ca37121e8a0afa9688859d9e22924269f571c16d20112ade45d3663d9b5d9b9b99cc", 0x25}, 0x60, &(0x7f00000000c0)=[{&(0x7f00000001c0)="61fe6d5804628264f6ef7df6878c75f5ed6efb9789576bb8952ba7773284b271c96a8783afb0345aa9c8d442f3b011500a2b727d27f282344f62e4090501777567981ec17206bdecda8aedcd34cd3ac9d0ff269bc34855e8ed8a5c94cb9910fa3c9b69", 0x63}, {&(0x7f00000002c0)="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", 0x1000}], 0x2, &(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0xf8, 0x10}, 0x40000) 03:38:52 executing program 3: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x20002, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000040)={0x8, 0x8000, 0x883, 0x9, 0x4, 0x2}) socket$netlink(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000002c0), 0x13f, 0x3}}, 0x20) gettid() 03:38:52 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0xf000000) 03:38:52 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x20e, 0x0, 0x0) 03:38:53 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x7, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 603.642189] IPVS: set_ctl: invalid protocol: 9 0.0.0.0:20002 [ 603.674242] IPVS: set_ctl: invalid protocol: 9 0.0.0.0:20002 [ 603.682051] Unknown ioctl -1067953333 03:38:53 executing program 5: socket$netlink(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000002580)=[{&(0x7f0000000000)=""/115, 0x73}], 0x100000a1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='cmdline\x00') preadv(r0, &(0x7f0000000480), 0xffffffffffffca9, 0x0) 03:38:53 executing program 3: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x20002, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000040)={0x8, 0x8000, 0x883, 0x9, 0x4, 0x2}) socket$netlink(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000002c0), 0x13f, 0x3}}, 0x20) gettid() 03:38:53 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x84, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 603.823551] IPVS: set_ctl: invalid protocol: 7 0.0.0.0:20002 [ 603.855480] IPVS: set_ctl: invalid protocol: 7 0.0.0.0:20002 03:38:53 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x37d, 0x0, 0x0) [ 603.947306] Unknown ioctl -1067953333 03:38:53 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='cmdline\x00') preadv(r2, &(0x7f0000000480), 0x10000000000002a1, 0x0) connect$can_bcm(r2, &(0x7f00000001c0)={0x1d, r1}, 0x10) r3 = msgget(0x1, 0x0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000340), &(0x7f0000000380)=0x4) r4 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f00000002c0)={0x5, 0x70, 0x1ff, 0x9, 0x3, 0xaf, 0x0, 0x9, 0x40800, 0xd, 0x100000001, 0xc3d, 0x7, 0x1, 0xffffffffffff86a0, 0x47, 0x7, 0x3fc0, 0x81, 0x800, 0x3, 0x80000000, 0x6, 0x46, 0x101, 0x5, 0x40, 0x7294, 0xfe2, 0x5, 0x10000, 0x6, 0x5, 0x5, 0x4, 0xfff, 0x9, 0xb2, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000200), 0xe}, 0x10000, 0x643b000000000, 0x4, 0x2, 0xff, 0x2820, 0x3}, r4, 0xa, 0xffffffffffffff9c, 0xa) msgrcv(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f5322c7fa1ce1da39d7f08a6ad9bb6b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007f00000000"], 0xc2, 0x0, 0x1000) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000240)={@rand_addr=0x100, @loopback, r1}, 0xc) 03:38:53 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0xa, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:38:53 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0xf) 03:38:53 executing program 5: socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='cmdline\x00') ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000002c0)={{0x8, 0x5, 0xbd, 0x2, 'syz1\x00', 0x5}, 0x1, [0x4, 0x4, 0x2, 0x3ff, 0xea2d, 0x2, 0x7f, 0x8, 0x1, 0x80, 0x10001, 0x2, 0x3394306, 0x4, 0x800, 0x3, 0xdd38, 0x1, 0x2, 0x2, 0x0, 0x2, 0xb626, 0x0, 0x7, 0x5, 0x86e, 0x7, 0x131, 0x7fff, 0x4, 0x2, 0x7, 0x7, 0x81, 0x401, 0x3, 0x2, 0xbd8, 0x7c16, 0x84, 0x3, 0x1f, 0x2000000000, 0x100, 0x3, 0x0, 0x1, 0x1ff, 0x7, 0x5d, 0x6, 0x1000, 0x1, 0x74, 0xcb9b, 0x7, 0x7, 0xc7, 0x80000001, 0x10001, 0x3ae, 0xfffffffffffffff8, 0x6, 0x0, 0xfffffffffffffff9, 0x7, 0x8000, 0x77c, 0x1, 0x1, 0x0, 0xffffffffffff7fff, 0x124078e7, 0x1ff, 0x81, 0x400, 0x6, 0x7, 0x7, 0x4, 0x7, 0x5, 0x1, 0x3f, 0x8, 0x7, 0x138, 0x8, 0x9, 0x9, 0x906, 0x1ff, 0x2, 0x9, 0x1000, 0x0, 0xffffffff, 0xfe, 0x3, 0x0, 0x7, 0x8, 0x0, 0x7, 0xfffffffffffffff9, 0x76, 0x40, 0x7d7, 0x7ff, 0x3bf, 0x7f, 0x0, 0x800, 0x8, 0x1, 0x101, 0xfffffffffffffff8, 0x7165, 0x1, 0x1ff, 0x0, 0xc8e, 0x30, 0x0, 0x8, 0x400, 0x40], {0x77359400}}) preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 03:38:53 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x7000000, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 604.025606] IPVS: set_ctl: invalid protocol: 10 0.0.0.0:20002 03:38:53 executing program 3: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x20002, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000040)={0x8, 0x8000, 0x883, 0x9, 0x4, 0x2}) socket$netlink(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000002c0), 0x13f, 0x3}}, 0x20) gettid() 03:38:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='cmdline\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0) write$binfmt_aout(r0, &(0x7f00000002c0)={{0xcc, 0x5, 0x7fffffff, 0x20b, 0x103, 0xe2, 0xb, 0x80}, "18d6bde45d4a332440ea38d7ad15", [[], [], [], [], [], [], []]}, 0x72e) fchdir(r1) [ 604.198562] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 604.230910] Unknown ioctl -1067953333 [ 604.241374] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:38:53 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x6c00, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:38:53 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x100000000000000) 03:38:53 executing program 3: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x20002, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000040)={0x8, 0x8000, 0x883, 0x9, 0x4, 0x2}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000002c0), 0x13f, 0x3}}, 0x20) gettid() 03:38:53 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x37b, 0x0, 0x0) [ 604.380775] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=523 sclass=netlink_route_socket pig=30658 comm=syz-executor5 [ 604.408266] IPVS: set_ctl: invalid protocol: 27648 0.0.0.0:20002 03:38:53 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x6000000, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 604.468498] IPVS: set_ctl: invalid protocol: 27648 0.0.0.0:20002 [ 604.531091] Unknown ioctl -1067953333 [ 604.598771] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 604.610781] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=523 sclass=netlink_route_socket pig=30658 comm=syz-executor5 03:38:54 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='cmdline\x00') preadv(r0, &(0x7f0000000480), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f00000002c0)={0x8, 0x120, 0xfa00, {0x1, {0x7fffffff, 0x1, "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", 0xd5, 0x5, 0x1f, 0x8, 0x2, 0x0, 0x6}, r1}}, 0x128) 03:38:54 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x6018230000000000) 03:38:54 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x2000000, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:38:54 executing program 5: socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 03:38:54 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xe8, 0x0, 0x0) 03:38:54 executing program 3: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x20002, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000040)={0x8, 0x8000, 0x883, 0x9, 0x4, 0x2}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000002c0), 0x13f, 0x3}}, 0x20) gettid() [ 604.925204] Unknown ioctl -1067953333 [ 604.931688] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:38:54 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x200000000000000, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 604.975137] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:38:54 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x8000a0ffffffff) 03:38:54 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='cmdline\x00') ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000000)) preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0) [ 605.108524] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:38:54 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x900000000000000, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:38:54 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x194, 0x0, 0x0) [ 605.160376] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:38:54 executing program 3: openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x20002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000002c0), 0x13f, 0x3}}, 0x20) gettid() 03:38:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000000000)=""/116, &(0x7f0000000080)=0x74) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='cmdline\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0) [ 605.325616] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:38:54 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x5000000, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 605.374762] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:38:54 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0xffffffffa0010000) 03:38:54 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x4c000000, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 605.539663] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 605.574578] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:38:55 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000002c0), 0x13f, 0x3}}, 0x20) gettid() 03:38:55 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x2bb, 0x0, 0x0) 03:38:55 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1, 0x0, 0x0, 0x2}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x70, 0x121100) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000200)=0x80000000, 0x4) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='cmdline\x00') syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x8000, 0x200000) syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x49d, 0x80) preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0) pipe2(&(0x7f0000000040), 0x84000) 03:38:55 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x20000000, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 605.767491] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:38:55 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x3fffffffffffe79, 0x0, &(0x7f0000000180)) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='cmdline\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x12, 0x11, 0x9, "bf7930875f7cadc02b4d2ac9d9ff31352e9bdca8f050fc8991b9c4b7f7a0a12c7d98681b60061b055a0bdadd89d82dbe3d8c47265c89ab43392cbce848b567b8", "581a26b8ad2caf17d4eb6cc95de039af8e48a3fd54de72005fe0dc88b42529d444fba4e87a9476be73450ae5057e4c8cabb73b40774af8f637dc66fe2219689a", "9dd9206a0000009bd19631331006fbc90d7333b88b0774c6d5c057f617f100de", [0xc55c, 0x2]}) 03:38:55 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x2) [ 605.928770] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:38:55 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x11000000, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:38:55 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000002c0), 0x13f, 0x3}}, 0x20) gettid() [ 605.984081] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:38:55 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x300000000000000) 03:38:55 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x34a, 0x0, 0x0) [ 606.099702] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:38:55 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x3, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 606.151624] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:38:55 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000002c0), 0x13f, 0x3}}, 0x20) gettid() 03:38:55 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x4, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 606.215263] IPVS: set_ctl: invalid protocol: 3 0.0.0.0:20002 03:38:55 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x867, 0x2000) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x5) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='cmdline\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0) 03:38:55 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x33, 0x0, 0x0) 03:38:55 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x6, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 606.339406] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20002 [ 606.368149] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20002 03:38:56 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x74, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:38:56 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x80ffff00000000) 03:38:56 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x26a, 0x0, 0x0) 03:38:56 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000002c0), 0x13f, 0x3}}, 0x20) gettid() 03:38:56 executing program 1: r0 = syz_open_dev$admmidi(0xffffffffffffffff, 0x6, 0x48102) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x4}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='cmdline\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0) 03:38:56 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendfile(r0, r0, &(0x7f0000000040), 0x2) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000000)={r0, 0x0, 0x40, 0x6, 0xfffffffffffffffd}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='cmdline\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0) [ 606.905837] IPVS: set_ctl: invalid protocol: 116 0.0.0.0:20002 03:38:56 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0xff00000000000000, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:38:56 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000002c0), 0x13f, 0x3}}, 0x20) gettid() [ 606.947109] IPVS: set_ctl: invalid protocol: 116 0.0.0.0:20002 03:38:56 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x1a0ffffffff) 03:38:56 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x355, 0x0, 0x0) 03:38:56 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0xff000000, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 607.130389] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:38:56 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = msgget$private(0x0, 0x28) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/40) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) accept$nfc_llcp(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) recvmmsg(r3, &(0x7f0000003500), 0x1, 0x0, &(0x7f0000000180)={r1, r2+30000000}) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='cmdline\x00') preadv(r4, &(0x7f0000000480), 0x10000000000002a1, 0x0) 03:38:56 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000002c0), 0x13f, 0x3}}, 0x20) gettid() [ 607.283836] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:38:56 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x84000000, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:38:56 executing program 5: socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = socket(0xf, 0xf, 0x8000) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000080)={0x0, 0x2}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000001c0)={r1, 0x6}, 0x8) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='cmdline\x00') write$UHID_INPUT2(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="0c6805d26000aa3473d1408cb3298421a2bd3ffe0788b3b9e96a16bd290c8d0da4f594152e5c4148f804c8e796846d017aa68de5"], 0x34) preadv(r2, &(0x7f0000000480), 0x10000000000002a1, 0x0) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0x5, 0x10000, 0x1f, 0x3, 0x401, 0x8001}, 0x8}, 0xa) [ 607.336871] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:38:56 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x8400, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 607.403446] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:38:56 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000002c0), 0x13f, 0x3}}, 0x20) gettid() 03:38:56 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x2000000) 03:38:56 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x1a, 0x0, 0x0) [ 607.476552] IPVS: set_ctl: invalid protocol: 33792 0.0.0.0:20002 03:38:56 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xffb6, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x2700, 0x0) r1 = memfd_create(&(0x7f00000000c0)='proc\'\x00', 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000001c0)=r1) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x5, 0x80000001, 0x4, 0x40, 0x2, 0x9, 0xe31, 0x7, 0x0}, &(0x7f0000000280)=0x20) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000002c0)={r2, 0x100, 0x9}, &(0x7f0000000300)=0x8) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000200)=0x100, 0x4) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000340)) r4 = syz_open_procfs(r3, &(0x7f0000000080)='net/mcfilter6\x00') preadv(r4, &(0x7f0000000480), 0x1000000000000337, 0x0) 03:38:56 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x3f00, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 607.552712] IPVS: set_ctl: invalid protocol: 33792 0.0.0.0:20002 03:38:56 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000002c0), 0x13f, 0x3}}, 0x20) gettid() 03:38:57 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x7a, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 607.713965] IPVS: set_ctl: invalid protocol: 16128 0.0.0.0:20002 03:38:57 executing program 5: socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='cmdline\x00') preadv(r0, &(0x7f0000000000), 0x182, 0x0) 03:38:57 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x67, 0x0, 0x0) 03:38:57 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x7000000) 03:38:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000340)='/dev/vcs#\x00', 0x200, 0x800) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000380)={0x57, 0x2, 'client0\x00', 0x4, "ea7452109a221aa5", "e1eb17f5f4f50be5f66d22d80de33b6de795f165012b81204859e7482fa08951", 0x3, 0x7}) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$TIOCGWINSZ(r2, 0x5413, &(0x7f0000000300)) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x101002, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000240), &(0x7f00000002c0)=0xc) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='cmdline\x00') preadv(r4, &(0x7f0000000480), 0x10000000000002a1, 0x0) setsockopt$inet_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f00000001c0), 0x4) ioctl$EVIOCGUNIQ(r4, 0x80404508, &(0x7f0000000000)=""/248) 03:38:57 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x4800000000000000, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 607.879767] IPVS: set_ctl: invalid protocol: 122 0.0.0.0:20002 [ 607.905335] IPVS: set_ctl: invalid protocol: 122 0.0.0.0:20002 03:38:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000002c0), 0x13f, 0x3}}, 0x20) gettid() [ 608.039423] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:38:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000002c0), 0x13f, 0x3}}, 0x20) gettid() [ 608.087960] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:38:57 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x4c00000000000000, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 608.318472] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:38:57 executing program 1: openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='cmdline\x00') getsockopt$netlink(r0, 0x10e, 0x9, &(0x7f00000002c0)=""/4096, &(0x7f0000000040)=0x1000) preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 03:38:57 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xdd, 0x0, 0x0) 03:38:57 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x3f000000) 03:38:57 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x1000000, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:38:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000002c0), 0x13f, 0x3}}, 0x20) gettid() 03:38:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x1, 0x0, &(0x7f0000000180)) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000000)=@generic={0x0, 0xeb6f, 0x1}) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='cmdline\x00') setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000080)=0x2, 0x4) r3 = getpgid(0xffffffffffffffff) ptrace$setopts(0x4206, r3, 0x5, 0x20) write$P9_RREAD(r2, &(0x7f00000000c0)={0x48, 0x75, 0x2, {0x3d, "cedd4ff16a0b057cedfcf40c1eccc4e907292a72b6d9734335f3c0fee362429047a762dbd28009a81cc2731912bfaf07b84d0407fd913d4837fcc0d83d"}}, 0x48) preadv(r2, &(0x7f0000000480), 0x10000000000002a1, 0x0) syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x1f, 0x100) 03:38:57 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x3000000, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 608.554535] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 608.585408] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:38:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000002c0), 0x13f, 0x3}}, 0x20) gettid() 03:38:58 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x4800, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 608.686902] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:38:58 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x4c00, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:38:58 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x7) [ 608.753442] IPVS: set_ctl: invalid protocol: 18432 0.0.0.0:20002 [ 608.782036] IPVS: set_ctl: invalid protocol: 18432 0.0.0.0:20002 03:38:58 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x373, 0x0, 0x0) [ 608.904495] IPVS: set_ctl: invalid protocol: 19456 0.0.0.0:20002 03:38:58 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='cmdline\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r0, 0x40045731, &(0x7f0000000000)=0x3) 03:38:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500), 0x0, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000002c0), 0x13f, 0x3}}, 0x20) gettid() 03:38:58 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x4c, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:38:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500), 0x0, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000002c0), 0x13f, 0x3}}, 0x20) gettid() 03:38:58 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x200000000000000) [ 609.068704] IPVS: set_ctl: invalid protocol: 76 0.0.0.0:20002 [ 609.106849] IPVS: set_ctl: invalid protocol: 76 0.0.0.0:20002 03:38:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) io_setup(0x3, &(0x7f0000000080)=0x0) io_getevents(r1, 0xde, 0x2, &(0x7f00000000c0)=[{}, {}], &(0x7f00000001c0)={0x0, 0x1c9c380}) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)=0x0) r3 = syz_open_procfs(r2, &(0x7f0000000280)='cmdline\x00') preadv(r3, &(0x7f0000000480), 0x10000000000002a1, 0x0) 03:38:58 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x6300, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:38:58 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x25b, 0x0, 0x0) 03:38:58 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x3f00000000000000) 03:38:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500), 0x0, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000002c0), 0x13f, 0x3}}, 0x20) gettid() 03:38:58 executing program 1: socketpair(0xe, 0x0, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x414040, 0x0) recvmmsg(r1, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000002580)}}], 0x1, 0x0, &(0x7f0000000180)) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='cmdline\x00') preadv(r2, &(0x7f0000000480), 0x10000000000002a1, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f0000000080)={&(0x7f0000000000)=@nl, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)="5500000018007f7000fe01b2a4a280930a60020000a84302910000003900140023000c00020000000d000500fe0b42000000c78b80082314e9030b9d566885b16732009b84e7b1df136ef75afb0000000000000000", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f0000000240)=0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x400000, 0x0) connect$netlink(r0, &(0x7f00000000c0)=@proc={0x10, 0x0, 0x25dfdbff, 0x20000}, 0xc) 03:38:58 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x2000000000000000, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 609.468969] IPVS: set_ctl: invalid protocol: 25344 0.0.0.0:20002 03:38:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000002580)}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000002c0), 0x13f, 0x3}}, 0x20) gettid() [ 609.561400] netlink: 'syz-executor1': attribute type 20 has an invalid length. 03:38:58 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x300) [ 609.668632] netlink: 'syz-executor1': attribute type 20 has an invalid length. [ 609.676340] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:38:59 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x6, 0x0, 0x0) [ 609.709814] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:38:59 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x20000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x111}}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='cmdline\x00') preadv(r1, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/250, 0xfa}, {&(0x7f00000000c0)=""/46, 0x2e}, {&(0x7f00000001c0)=""/130, 0x82}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/78, 0x4e}], 0x5, 0x0) 03:38:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000002580)}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000002c0), 0x13f, 0x3}}, 0x20) gettid() 03:38:59 executing program 5: socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='cmdline\x00') preadv(r0, &(0x7f0000000000), 0xffffffffffffe3c, 0x0) 03:38:59 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x500000000000000, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:38:59 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0xf00) 03:38:59 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x366, 0x0, 0x0) 03:38:59 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='cmdline\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="fe60763c49e812f93b2b0a76cd764e0c5779f290336e3ccd4461a1735587d8cbb8691306d4bb03a3716a6f1c9e58f13b236cdce932ab4f30a0cbe75352768fb4a9e64e8bce1b065e125809a9d5939394bd7e8e7ee8c4f6c71e375491c5e3d22a854a093faec5b9a5715b238976ae19c58d2a08f1a2f5e468f817bfe6506fc5dc603c8a6520baa222db7efddf9f8ffd89eb747103594c489fa37ed14b8c10f706de4d98bd831821c44a6572891d01834c60f38d889172678109f32bfd8f48f7f858528bf0fe4fe257985f3ba85bea0e753981cccc2aaa82a06c830e9d1f154c", 0xdf}], 0x1, &(0x7f00000002c0)=[{0xf8, 0x103, 0x7, "35990a2406fac3086d229f4f84aa7f8080629669c57788c1ae5dbc2a85e3d69149173d1b1d70035e5d507639bec29a64d50d6c4514ae76ad5e97af271a878a1e2953ddac18a42743069a187f685f39c2b31467acedca3028d0af379c93c70aec50a4f16ab8d251329da0a69470ffd3584df8758e245d6b2380a2582769e2ac0ddaa3fd825d41b0e7b07aac2c47ff2b68e1ed1ffb10d24e00775bedbeee27161a7012d34d2ad808848a23da6861562b568c9650ea4f9f2b0d1ee526d2ce508a0c275305d8a3bb55297b4802decfa8deadd95cd9bc9a88826895f0f0e84a99207d36ca86"}, {0x58, 0x84, 0xffffffff, "fe253c6f9e82d03961900aa0fb113f56f916aad392abd27de8642f0232874ab1218a25b50d8f5d430d1396c5c7523b09c23b3a189a7b7c26dd0fc4f183ebe19b92dd"}, {0xc8, 0x105, 0x8, "2b88a4d10ed8ebb005927fe4bd5c3176c825278041268cd3c2309da6a38e5500011dd869891d4910b4cbd53fcbdf65c0006aef8bc64db309fa52d06818488d7b86b3a0cf9b0a4925c44681e59e4ffb57efdf266bcb832062617cc83ac755b6bb6c7e509eb26e48063ade5a1f7daf383223aa1e5fb90f696ce7a287f711279352a529397bba5fd42c2029e5a8cd2ea9f5e2dbedf006a51bd10b262f5eedc495d74002a7502acb672388769f4ac491730a8ad459e16158"}, {0x60, 0x0, 0x3bdc, "d1433fddc4cc6c276e45ab64ea56e99ab4bd2745a3bbca988a2015a5e74824f6d2b023aaa826385af051d196a5082d495b2f34c0cb820f92d4cfb2ce0d14d4da8340d73b39800039ded2588aa961ad29"}, {0x70, 0x100, 0x2a, "f788f5033d626f255c25dde7379869acfc77a051a183e80a9eaca71e914dc88d8ec37c2bf0d3615897cb47156f416b77a6def2bf71636affdf5792095a305c4bae920716f9adf5e9ad733f0d946d610a5b51d4ebe6afd77421"}, {0xd0, 0x110, 0xe8, "3ee569a65f0d5e515b5a4843c533f93a99384e12adcca2af4e4213f1af4c4e0945d09d147fbfcf8d83710ed4750f846d49a77b92ac554283867299c508cff849c280f87bc91aa1f3ba3ab28e206b6cef40a6fc99cc7414b6bbc69a52ca491028b8eb3fca4f99a8946e54e04990eee926f39eb05dfd0782e3d3e272b9668695f177e27cac6b8b51ccdc9fb6417f0a3b0a991d816513aad703d0733f63622ba472ec7f0a6bc7499d71242306ad88f9ba7c4eef84f94a11326c447aa67d42c13f"}, {0x38, 0x110, 0x5, "9ab72ad7517f46680c8b653fee898fec67fcffea2ed16696917f3b55b0e4ea11ed188c"}, {0x80, 0x117, 0x1, "a4ddb438fcb70b5c6eac5570cd2185d62843259805b56680525a4a05321cb059602fb974a2d6bf4be79a093442983871132394ec920e499e2b74741054be76e13b98c84bc6c590e18ed50bfb16c399e6349ca30321d1f82b7916a87c8f62e8b0bd29eacb6246e0c695a66bfa06d1c6"}, {0xc0, 0x100, 0x9, "25fe19be905a9b5abfd8f25b187520d1f091771d691881857e212e9873e6c4f15aeed2d93b847a111bb376e535fed306e88bdbdc5d5f2adf16fe72151fa34db9143f27aaa6500e831336fb4439ac95d11eb04ffe132fa2714a8c5d964c3c224bee884ebbe006efc7c5d9f76a6af8e4655321eb4d63a1786e89c9ca395589948f7f90a7e59bb1607636903037718316b77af59006602fa79956db761de5f82fabae10303e7a6bcd2cf4b990ed"}], 0x530, 0x800}, 0x10) 03:38:59 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x700000000000000, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:38:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000002580)}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000002c0), 0x13f, 0x3}}, 0x20) gettid() [ 609.993550] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 610.029194] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:38:59 executing program 5: socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='cmdline\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000000)=0x400) [ 610.127604] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:38:59 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0xffffffffa0008000) [ 610.176445] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:38:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000002c0), 0x13f, 0x3}}, 0x20) gettid() 03:38:59 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0xa00, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:38:59 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x35c, 0x0, 0x0) 03:38:59 executing program 5: socket$netlink(0x10, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x40000, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='cmdline\x00') ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000040)={0x0, 0x7, 0x1}) preadv(r1, &(0x7f0000000040), 0x0, 0x0) [ 610.393928] IPVS: set_ctl: invalid protocol: 2560 0.0.0.0:20002 03:38:59 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='cmdline\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f00000001c0)=0xc) perf_event_open(&(0x7f0000000040)={0x7, 0x70, 0x7fffffff, 0x9, 0x0, 0x800, 0x0, 0x4, 0x8, 0x4, 0x0, 0x7fffffff, 0x7fff, 0xec90, 0x0, 0x1, 0xfd98, 0x401, 0x0, 0x400, 0x40, 0xffffffffffffffe1, 0x4, 0x551e, 0xfffffffffffffffe, 0x7, 0xe1, 0x9, 0x7, 0x7fffffff, 0x80, 0x1020000000, 0x3, 0x100000000, 0x80000001, 0x4, 0x3, 0x7ff, 0x0, 0x32c7, 0x4, @perf_bp={&(0x7f0000000000), 0xc}, 0xeb499b9cbeda04a0, 0x8, 0x800, 0x7, 0x20000000, 0x100, 0x100000000}, r1, 0x9, r0, 0xa) 03:38:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000002c0), 0x13f, 0x3}}, 0x20) gettid() [ 610.464988] IPVS: set_ctl: invalid protocol: 2560 0.0.0.0:20002 03:38:59 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x3) 03:38:59 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x6800, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:38:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000002c0), 0x13f, 0x3}}, 0x20) gettid() 03:39:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='cmdline\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000000)="f6b68e7d152c82ea51801cbe70d624c60759a5be4475f19a7c76c646d219433fdc181fdfca91f3cf43f8fd087733b559d5cdbb78b208e82f03e2360ee2647a391f873284074b0918ecb386296aa5c1a8547f5ce4bcf5e848583aba583eb728ca1640be179eb125e46b296a79a74d3df708fa8cf73bfc1534582022a5733e41346aedb5c54031f1f854cb2eb14ec81fe1b56cb62c1abfe782f563d94c365bc89c373714706028769a3521a2cc90c61cdc92087eb9d4dceff852ac4047c6a5bb73d882cf0e71c115164cc622aaf4406a27be0c11166b1d598595490a731a7abf97c062edb4514e795ecf239c135065b5879786f5e805efcc5ca3650bc9e416e674") [ 610.720344] IPVS: set_ctl: invalid protocol: 26624 0.0.0.0:20002 03:39:00 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x242, 0x0, 0x0) 03:39:00 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x2, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 610.814083] IPVS: set_ctl: invalid protocol: 26624 0.0.0.0:20002 03:39:00 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x81, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r1 = fcntl$getown(r0, 0x9) r2 = syz_open_procfs(r1, &(0x7f0000000040)='net/ip_mr_cache\x00') preadv(r2, &(0x7f00000005c0)=[{&(0x7f0000000680)=""/214, 0xd6}, {&(0x7f0000001340)=""/4096, 0x1000}], 0x2, 0x0) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getegid() ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000780)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000580)={0x0, 0x80000, r2}) recvfrom(r2, &(0x7f0000009ac0)=""/172, 0xac, 0x10140, 0x0, 0x0) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000600)='/proc/self/net/pfkey\x00', 0x400000, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000640)={r5, r6, 0xfffffffffffffffd}) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @remote}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@multicast2}}, &(0x7f0000000380)=0xe8) mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x808000, &(0x7f0000009b80)=ANY=[@ANYBLOB="81573d510a1e32dc889a019d300bf361b9ea96fa3a1cc14e08064246ba8726", @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000070000,user_id=', @ANYRESDEC=r3, @ANYBLOB=',group_id=', @ANYRESDEC=r4, @ANYBLOB=',blksize=0x0000000000000e00,allow_other,blksize=0x0000000000000000,allow_other,allow_mther,max_read=0x0000000000000001,permit_directio,smackfsfloor=,defcontext=user_u,euid>', @ANYRESDEC=r8, @ANYBLOB=',pcr=00000000000000000044,subj_user=,obj_role=systemcgroup]@(%,seclabel,\x00']) recvmmsg(r7, &(0x7f00000098c0)=[{{&(0x7f00000007c0)=@vsock, 0x80, &(0x7f0000000900)=[{&(0x7f0000000540)=""/22, 0x16}, {&(0x7f0000000840)=""/170, 0xaa}], 0x2, &(0x7f0000000940)=""/130, 0x82, 0x4}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000a00)=""/51, 0x33}, {&(0x7f0000000a40)=""/216, 0xd8}, {&(0x7f0000003540)=""/4096, 0x1000}, {&(0x7f0000000b40)=""/163, 0xa3}], 0x4, &(0x7f0000000c40)=""/236, 0xec, 0x10000}, 0x80}, {{&(0x7f0000000d40)=@ax25, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000dc0)=""/85, 0x55}, {&(0x7f0000004540)=""/4096, 0x1000}, {&(0x7f0000000e40)=""/183, 0xb7}, {&(0x7f0000000f00)=""/13, 0xd}, {&(0x7f0000000f40)=""/138, 0x8a}, {&(0x7f0000001000)=""/165, 0xa5}, {&(0x7f00000010c0)=""/202, 0xca}], 0x7, 0x0, 0x0, 0x3ff}, 0xfffffffffffffffe}, {{&(0x7f0000001240)=@hci, 0x80, &(0x7f0000002800)=[{&(0x7f0000002340)=""/162, 0xa2}, {&(0x7f0000002400)=""/228, 0xe4}, {&(0x7f00000025c0)=""/151, 0x97}, {&(0x7f0000002680)=""/134, 0x86}, {&(0x7f0000002500)=""/102, 0x66}, {&(0x7f0000002740)=""/52, 0x34}, {&(0x7f0000002780)=""/106, 0x6a}], 0x7, &(0x7f0000002880)=""/100, 0x64, 0x67f5b87c}, 0x7ff}, {{&(0x7f0000002900)=@ax25, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002980)=""/31, 0x1f}, {&(0x7f00000029c0)=""/103, 0x67}], 0x2, &(0x7f0000002a80)=""/143, 0x8f, 0xfff}, 0x8}, {{&(0x7f0000002b40)=@alg, 0x80, &(0x7f0000002d00)=[{&(0x7f0000002bc0)=""/11, 0xb}, {&(0x7f0000002c00)=""/146, 0x92}, {&(0x7f0000002cc0)=""/34, 0x22}, {&(0x7f0000005540)=""/4096, 0x1000}], 0x4, &(0x7f0000006540)=""/4096, 0x1000, 0x6b}, 0x1}, {{&(0x7f0000002d40)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000003280)=[{&(0x7f0000002dc0)=""/119, 0x77}, {&(0x7f0000002e40)=""/201, 0xc9}, {&(0x7f0000002f40)=""/37, 0x25}, {&(0x7f0000002f80)=""/110, 0x6e}, {&(0x7f0000003000)}, {&(0x7f0000003040)=""/127, 0x7f}, {&(0x7f00000030c0)=""/162, 0xa2}, {&(0x7f0000003180)=""/230, 0xe6}], 0x8, &(0x7f0000007540)=""/4096, 0x1000, 0x6a}, 0x4}, {{&(0x7f0000003300)=@l2, 0x80, &(0x7f0000009840)=[{&(0x7f0000003380)=""/233, 0xe9}, {&(0x7f0000008540)=""/208, 0xd0}, {&(0x7f0000008640)=""/235, 0xeb}, {&(0x7f0000008740)=""/253, 0xfd}, {&(0x7f0000003480)=""/40, 0x28}, {&(0x7f0000008840)=""/4096, 0x1000}], 0x6, 0x0, 0x0, 0x401}, 0x1}], 0x8, 0x40, &(0x7f00000034c0)={0x0, 0x1c9c380}) 03:39:00 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0xa0010000) [ 611.006118] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20002 03:39:00 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x5, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x13f, 0x3}}, 0x20) gettid() [ 611.049047] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20002 03:39:00 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='cmdline\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) write$P9_RSETATTR(r0, &(0x7f0000000000)={0x7, 0x1b, 0x1}, 0x7) 03:39:00 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x192, 0x0, 0x0) [ 611.168632] IPVS: set_ctl: invalid protocol: 5 0.0.0.0:20002 03:39:00 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x3f00000000000000, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 611.221902] IPVS: set_ctl: invalid protocol: 5 0.0.0.0:20002 03:39:00 executing program 5: socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='cmdline\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0xf288) 03:39:00 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x1000000) [ 611.383889] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:39:00 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x600000000000000, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 611.427660] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:39:00 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xd2, 0x0, 0x0) 03:39:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() 03:39:00 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x0, 0xb2, 0xe4, &(0x7f0000000040)="302228cf5b9f8f4e963b2485b89b049472d7858af8ab9d2436bdf8cda1950148137c602ea0461f04cd54dbf677c0ce0e03bf9820779df9436bb546b05faac0f63c58f00fdf53785feaff670414a62929b184b417110449530cae977f7e0b6c76cda7a05885c4611bacf2dd74cd53a41fee7996c824ec75e23723998474b98e05a55515bc0f76d5ac8d7e3f466b61670613228e73cb4b662a25cf2829d2007e2b2b13378183117b93e9302ed15294bb561fa2", &(0x7f00000002c0)=""/228, 0x400}, 0x28) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='cmdline\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@dev={0xfe, 0x80, [], 0x21}, @in6=@mcast2, 0x4e24, 0xffffffff, 0x4e22, 0x6, 0x2, 0x20, 0x80, 0xff, 0x0, r2}, {0x0, 0xfffffffffffff6b8, 0xff, 0xe39, 0xcd, 0x4, 0xfffffffffffffffc, 0xffffffffffff7fff}, {0x51aea1ac, 0x4a2, 0x2, 0x4}, 0x1ff, 0x6e6bbf, 0x3, 0x0, 0x1, 0x3}, {{@in=@local, 0x4d5, 0x2b}, 0x2, @in6=@mcast1, 0x0, 0x2, 0x0, 0x3, 0x7, 0x1f, 0x5}}, 0xe8) [ 611.603632] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 611.630947] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:39:01 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x7a000000, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:01 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x60182300) 03:39:01 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x7a00, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 611.781849] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:39:01 executing program 5: socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='cmdline\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x501480, 0x0) 03:39:01 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}, 0x8000000000000}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='cmdline\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/88, 0xfffffffffffffdf7}], 0x1, 0x0) ioctl(r0, 0x2, &(0x7f0000000000)="9c4749a4b5123c88fc60a0fe5c") 03:39:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() 03:39:01 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000100)="d47226ea8761919acf5fec69251a725ed4e5b5bd4206076da3d200bdc22b624489514335ac1c196d01c4e3b484b3bab4b52094d2a5f63c13a346d6d9d7ebba7db096491c") ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 611.942480] IPVS: set_ctl: invalid protocol: 31232 0.0.0.0:20002 03:39:01 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x2f7, 0x0, 0x0) 03:39:01 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x500, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 611.987217] IPVS: set_ctl: invalid protocol: 31232 0.0.0.0:20002 [ 612.142534] *** Guest State *** 03:39:01 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='cmdline\x00') syz_open_dev$amidi(&(0x7f0000000200)='/dev/amidi#\x00', 0x0, 0x840) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f00000001c0)) preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={0x0, 0xc4f3, 0x81, 0x3f, 0x484c, 0x400}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080)={r1, 0x1}, &(0x7f00000000c0)=0x8) 03:39:01 executing program 5: socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000000)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='cmdline\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) [ 612.171797] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 612.195824] IPVS: set_ctl: invalid protocol: 1280 0.0.0.0:20002 03:39:01 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x48, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:01 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x16c, 0x0, 0x0) [ 612.223349] IPVS: set_ctl: invalid protocol: 1280 0.0.0.0:20002 [ 612.236346] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 03:39:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)}}, 0x20) gettid() [ 612.312815] CR3 = 0x0000000000000000 [ 612.333439] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 612.357142] IPVS: set_ctl: invalid protocol: 72 0.0.0.0:20002 [ 612.364713] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 03:39:01 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x7a00000000000000, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 612.387281] IPVS: set_ctl: invalid protocol: 72 0.0.0.0:20002 [ 612.396441] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 03:39:01 executing program 5: socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000080)=&(0x7f0000000040)) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='cmdline\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0) [ 612.431156] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 612.453316] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 612.490520] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 612.499052] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 612.535482] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 612.543979] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 612.568271] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 03:39:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)}}, 0x20) gettid() 03:39:01 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0xa000000, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 612.640452] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 612.726547] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 612.753623] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 612.771934] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 612.791221] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 612.808058] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 612.826366] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 612.837919] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 612.845731] Interruptibility = 00000000 ActivityState = 00000000 [ 612.852786] *** Host State *** [ 612.856188] RIP = 0xffffffff81212b2e RSP = 0xffff88017f107350 [ 612.862776] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 612.869817] FSBase=00007f901f655700 GSBase=ffff8801dae00000 TRBase=fffffe0000034000 [ 612.878064] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 612.884084] CR0=0000000080050033 CR3=00000001c0b7d000 CR4=00000000001426f0 [ 612.891210] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff87c013a0 [ 612.897948] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 612.904005] *** Control State *** [ 612.907443] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 612.914222] EntryControls=0000d1ff ExitControls=002fefff [ 612.919745] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 03:39:02 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) statfs(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)=""/167) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$DRM_IOCTL_CONTROL(r1, 0x40086414, &(0x7f0000000080)={0x3, 0xf7}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:39:02 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x38f, 0x0, 0x0) 03:39:02 executing program 5: socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='cmdline\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000000)={0x30, 0x5, 0x0, {0x0, 0x1, 0x101, 0x3}}, 0x30) 03:39:02 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='cmdline\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0xb8, &(0x7f0000000000)=[@in={0x2, 0x4e22, @rand_addr=0xe8a2}, @in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x20}}, @in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x4e21, 0x7ff, @remote, 0xffffffff}, @in6={0xa, 0x4e24, 0x100, @remote, 0x400}, @in={0x2, 0x4e22, @rand_addr=0x8d}, @in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e21}]}, &(0x7f00000001c0)=0x10) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000002c0)={r1, @in6={{0xa, 0x4e24, 0x0, @local, 0x80000000}}}, 0x84) preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 03:39:02 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x6c, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:02 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)}}, 0x20) gettid() [ 612.926728] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 612.933525] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 612.940205] reason=80000021 qualification=0000000000000000 [ 612.946533] IDTVectoring: info=00000000 errcode=00000000 [ 612.952054] TSC Offset = 0xfffffeb5bf9a31c5 [ 612.956379] TPR Threshold = 0x00 [ 612.959797] EPT pointer = 0x000000018008301e 03:39:02 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x63, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 613.015121] IPVS: set_ctl: invalid protocol: 108 0.0.0.0:20002 [ 613.105050] *** Guest State *** [ 613.124944] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 613.157286] IPVS: set_ctl: invalid protocol: 99 0.0.0.0:20002 [ 613.183245] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 613.201015] IPVS: set_ctl: invalid protocol: 99 0.0.0.0:20002 03:39:02 executing program 3: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x20002, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000040)={0x8, 0x8000, 0x883, 0x9, 0x4, 0x2}) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000200)=0xc) r2 = syz_open_procfs(r1, &(0x7f0000000280)='statm\x00') preadv(r2, &(0x7f0000000480), 0x10000000000002a1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000002c0), 0x13f, 0x3}}, 0x20) gettid() 03:39:02 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x300000000000000, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 613.265386] CR3 = 0x0000000000000000 03:39:02 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x25a, 0x0, 0x0) [ 613.288560] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 613.327844] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 03:39:02 executing program 1: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0xe07) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='cmdline\x00') ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000000)=r1) preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0) sendto$inet6(r1, &(0x7f0000000040)="2b378bdc8b73cdfb971503a59be9fd79b40458a8572e991ee733b0a60edf4d9bfde94dd0809f1a733176c19a332d03eee16f19d68513ace579ad9f641e3e4a521c8071f4fda7ed50d08ddf371c49", 0x4e, 0x80, &(0x7f00000000c0)={0xa, 0x4e20, 0xc3df, @dev={0xfe, 0x80, [], 0x17}, 0x8}, 0x1c) 03:39:02 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x1100000000000000, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 613.378150] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 613.388820] Unknown ioctl -1067953333 [ 613.389204] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 613.408977] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 613.418029] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 613.460669] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 613.490314] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 613.543675] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 613.566640] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 613.593361] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 613.597021] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 613.634882] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 613.676682] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 613.718949] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 613.747752] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 613.762167] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 613.777093] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 613.785945] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 613.794481] Interruptibility = 00000000 ActivityState = 00000000 [ 613.801010] *** Host State *** [ 613.804263] RIP = 0xffffffff81212b2e RSP = 0xffff880186727350 [ 613.810359] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 613.816857] FSBase=00007f901f655700 GSBase=ffff8801daf00000 TRBase=fffffe0000034000 [ 613.824723] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 613.830692] CR0=0000000080050033 CR3=0000000188088000 CR4=00000000001426e0 [ 613.837784] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff87c013a0 [ 613.844475] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 613.850592] *** Control State *** [ 613.854061] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 613.854071] EntryControls=0000d1ff ExitControls=002fefff [ 613.854087] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 613.854103] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 613.880277] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 613.886861] reason=80000021 qualification=0000000000000000 [ 613.893224] IDTVectoring: info=00000000 errcode=00000000 [ 613.898752] TSC Offset = 0xfffffeb53a39fb60 [ 613.903075] TPR Threshold = 0x00 [ 613.906443] EPT pointer = 0x000000017e68201e 03:39:03 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 03:39:03 executing program 5: openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000000)={0x0, @speck128, 0x3, "6e3918a588573754"}) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='cmdline\x00') syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0) 03:39:03 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x3af, 0x0, 0x0) 03:39:03 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x8400000000000000, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:03 executing program 3: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x20002, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000040)={0x8, 0x8000, 0x883, 0x9, 0x4, 0x2}) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000200)=0xc) r2 = syz_open_procfs(r1, &(0x7f0000000280)='statm\x00') preadv(r2, &(0x7f0000000480), 0x10000000000002a1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000002c0), 0x13f, 0x3}}, 0x20) gettid() 03:39:03 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='cmdline\x00') ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000000)=0x2) preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0) 03:39:03 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x68000000, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 614.001277] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 614.051187] Unknown ioctl -1067953333 [ 614.099098] *** Guest State *** [ 614.115341] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 03:39:03 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x24a, 0x0, 0x0) [ 614.149783] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 614.150832] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 614.190911] CR3 = 0x0000000000000000 03:39:03 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x63000000, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 614.214250] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 614.224060] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 614.249332] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 614.277498] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 03:39:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='cmdline\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0xb8, &(0x7f0000000000)=[@in={0x2, 0x4e22, @rand_addr=0xe8a2}, @in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x20}}, @in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x4e21, 0x7ff, @remote, 0xffffffff}, @in6={0xa, 0x4e24, 0x100, @remote, 0x400}, @in={0x2, 0x4e22, @rand_addr=0x8d}, @in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e21}]}, &(0x7f00000001c0)=0x10) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000002c0)={r1, @in6={{0xa, 0x4e24, 0x0, @local, 0x80000000}}}, 0x84) preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) [ 614.324419] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 03:39:03 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x7400, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 614.382331] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 614.397168] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 614.455301] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 614.474498] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 614.494948] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 03:39:03 executing program 1: socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(0xffffffffffffff9c, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) setsockopt$inet_mreqn(r0, 0x0, 0x400025, &(0x7f0000000100)={@loopback, @local, r1}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x768, 0x711142) ioctl$KVM_SMI(r2, 0xaeb7) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000000100)}}], 0x1, 0x0, &(0x7f0000000340)) ioctl$VT_ACTIVATE(r2, 0x5606, 0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='cmdline\x00') preadv(r3, &(0x7f0000000480), 0x10000000000002a1, 0x0) [ 614.503470] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 614.512799] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 614.522958] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 614.531115] IPVS: set_ctl: invalid protocol: 29696 0.0.0.0:20002 [ 614.539543] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 614.548093] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 614.556342] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 614.564278] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 614.572339] IPVS: set_ctl: invalid protocol: 29696 0.0.0.0:20002 [ 614.600485] Interruptibility = 00000000 ActivityState = 00000000 [ 614.632536] *** Host State *** [ 614.652403] RIP = 0xffffffff81212b2e RSP = 0xffff880187f57350 [ 614.705912] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 614.733173] FSBase=00007f901f655700 GSBase=ffff8801daf00000 TRBase=fffffe0000003000 [ 614.750614] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 614.756620] CR0=0000000080050033 CR3=00000001c2428000 CR4=00000000001426e0 [ 614.764045] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff87c013a0 [ 614.770909] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 614.777066] *** Control State *** [ 614.781378] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 614.788232] EntryControls=0000d1ff ExitControls=002fefff [ 614.793794] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 03:39:04 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000080)={r0}) recvmsg(r1, &(0x7f0000000300)={&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000240)=""/185, 0xb9}], 0x1, &(0x7f00000003c0)=""/191, 0xbf, 0x401}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 03:39:04 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f00000001c0)=0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='cmdline\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0) bind$nfc_llcp(r1, &(0x7f0000000000)={0x27, 0x0, 0x2, 0x0, 0xfffffffffffffff9, 0x2e, "dbc5e32834c17e89fd13c04137115941c671364b0abb6403459be4f6a68fc404c4a756ebb52e6d20db09aa5a815ddd2afe64effcf7386fb2388dc2527661dd", 0x19}, 0x60) 03:39:04 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x29e, 0x0, 0x0) 03:39:04 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x700, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='cmdline\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0xb8, &(0x7f0000000000)=[@in={0x2, 0x4e22, @rand_addr=0xe8a2}, @in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x20}}, @in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x4e21, 0x7ff, @remote, 0xffffffff}, @in6={0xa, 0x4e24, 0x100, @remote, 0x400}, @in={0x2, 0x4e22, @rand_addr=0x8d}, @in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e21}]}, &(0x7f00000001c0)=0x10) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000002c0)={r1, @in6={{0xa, 0x4e24, 0x0, @local, 0x80000000}}}, 0x84) preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 03:39:04 executing program 1: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x2, 0x10001}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={r1, 0x7}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='cmdline\x00') setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f00000000c0)=0x100000, 0x4) preadv(r2, &(0x7f0000000480), 0x10000000000002a1, 0x0) [ 614.801037] VMEntry: intr_info=8000001e errcode=00000000 ilen=00000000 [ 614.807775] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 614.814383] reason=80000021 qualification=0000000000000000 [ 614.821094] IDTVectoring: info=00000000 errcode=00000000 [ 614.826552] TSC Offset = 0xfffffeb4b1ea4c10 [ 614.830932] TPR Threshold = 0x00 [ 614.834309] EPT pointer = 0x0000000187f0601e 03:39:04 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x400000000000000, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 614.920827] IPVS: set_ctl: invalid protocol: 1792 0.0.0.0:20002 [ 615.039650] *** Guest State *** [ 615.053140] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 615.078435] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 03:39:04 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x9000000, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 615.104948] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 615.154164] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 03:39:04 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x6c000000, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:04 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x5f, 0x0, 0x0) [ 615.228435] CR3 = 0x0000000000000000 [ 615.247836] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 615.264922] RSP = 0x0000000000000000 RIP = 0x0000000000000000 03:39:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='cmdline\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0xb8, &(0x7f0000000000)=[@in={0x2, 0x4e22, @rand_addr=0xe8a2}, @in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x20}}, @in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x4e21, 0x7ff, @remote, 0xffffffff}, @in6={0xa, 0x4e24, 0x100, @remote, 0x400}, @in={0x2, 0x4e22, @rand_addr=0x8d}, @in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e21}]}, &(0x7f00000001c0)=0x10) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000002c0)={r1, @in6={{0xa, 0x4e24, 0x0, @local, 0x80000000}}}, 0x84) preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 03:39:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) getgroups(0x6, &(0x7f00000001c0)=[r1, r1, r1, r1, r1, r1]) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x4a00, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)=0x0) perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7fd, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, r3, 0xffffffffffffffff, r2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='cmdline\x00') preadv(r4, &(0x7f0000000480), 0x10000000000002a1, 0x0) [ 615.330359] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 615.354917] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 615.384992] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 615.398452] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 615.420509] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 615.420980] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 615.464521] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 615.503853] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 615.532755] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 615.580011] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 615.597778] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 615.605788] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 615.616512] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 615.625838] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 615.635720] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 615.642677] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 615.650691] Interruptibility = 00000000 ActivityState = 00000000 [ 615.656943] *** Host State *** [ 615.661107] RIP = 0xffffffff81212b2e RSP = 0xffff880184b27350 [ 615.667093] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 615.673615] FSBase=00007f901f655700 GSBase=ffff8801dae00000 TRBase=fffffe0000034000 [ 615.681488] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 615.687378] CR0=0000000080050033 CR3=00000001c0cdf000 CR4=00000000001426f0 [ 615.694461] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff87c013a0 [ 615.701198] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 615.707264] *** Control State *** [ 615.710825] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 615.717505] EntryControls=0000d1ff ExitControls=002fefff [ 615.723094] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 615.730056] VMEntry: intr_info=8000001e errcode=00000000 ilen=00000000 [ 615.736728] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 615.743401] reason=80000021 qualification=0000000000000000 [ 615.749802] IDTVectoring: info=00000000 errcode=00000000 [ 615.755295] TSC Offset = 0xfffffeb431623030 [ 615.759754] TPR Threshold = 0x00 [ 615.763169] EPT pointer = 0x00000001ba8d101e [ 615.807984] *** Guest State *** [ 615.811324] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 615.820349] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 615.829251] CR3 = 0x0000000000000000 [ 615.829262] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 615.829276] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 615.829295] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 615.839079] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 615.860046] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 615.868147] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 615.876191] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 615.884232] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 615.892277] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 615.900362] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 615.908418] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 615.916401] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 615.924557] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 615.932585] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 615.939078] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 615.946512] Interruptibility = 00000000 ActivityState = 00000000 [ 615.952826] *** Host State *** [ 615.956052] RIP = 0xffffffff81212b2e RSP = 0xffff880188d07350 [ 615.962081] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 615.968560] FSBase=00007f901f633700 GSBase=ffff8801daf00000 TRBase=fffffe0000034000 [ 615.976356] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 615.982283] CR0=0000000080050033 CR3=00000001c0cdf000 CR4=00000000001426e0 [ 615.989355] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff87c013a0 [ 615.996033] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 616.002124] *** Control State *** [ 616.005587] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 616.012288] EntryControls=0000d1ff ExitControls=002fefff [ 616.017788] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 616.024704] VMEntry: intr_info=8000001e errcode=00000000 ilen=00000000 [ 616.031415] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 616.038068] reason=80000021 qualification=0000000000000000 [ 616.044420] IDTVectoring: info=00000000 errcode=00000000 [ 616.049940] TSC Offset = 0xfffffeb431623030 [ 616.054263] TPR Threshold = 0x00 03:39:05 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000840)='/dev/input/mice\x00', 0x0, 0x2000) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x80045700, &(0x7f0000000880)) recvmmsg(0xffffffffffffffff, &(0x7f00000007c0)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x186, 0x0, &(0x7f0000000180)) r2 = add_key$keyring(&(0x7f00000008c0)='keyring\x00', &(0x7f0000000900)={'syz', 0x1}, 0x0, 0x0, 0x0) r3 = add_key$keyring(&(0x7f00000009c0)='keyring\x00', &(0x7f0000000a00)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$search(0xa, r2, &(0x7f0000000940)='dns_resolver\x00', &(0x7f0000000980)={'syz', 0x1}, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='cpuset\x00') preadv(r4, &(0x7f0000000480), 0x10000000000002a1, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0x7042, @mcast1, 0xff}}, 0x80, 0xfff, 0x4, 0x0, 0xffffffffffffffc1}, &(0x7f0000000280)=0x98) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000740)={r5, 0x200, 0xa3}, &(0x7f0000000780)=0x8) modify_ldt$read_default(0x2, &(0x7f0000000080)=""/79, 0x4f) write$uinput_user_dev(r4, &(0x7f00000002c0)={'syz0\x00', {0x40, 0x3, 0x6}, 0x20, [0x20, 0x800, 0xfffffffffffffff8, 0x3f45ac3a, 0x0, 0x4, 0x6, 0x0, 0x10000, 0x80000001, 0x0, 0x1, 0x0, 0xfffffffffffffffc, 0x800, 0x4, 0x1, 0xac5c, 0x4, 0x10d3, 0x9, 0x3, 0x7, 0x8, 0xfffffffffffffffb, 0xa981, 0xd794, 0x4, 0x7ff, 0xffff, 0x81, 0x3ff, 0xffff, 0x3, 0x6, 0x2, 0x3983b056, 0x7fffffff, 0x80, 0x74, 0x2, 0x5, 0x9f, 0x9, 0x0, 0x100, 0x6, 0xd866, 0x0, 0x80000000, 0xffffffff80000000, 0x2d, 0x1, 0x3, 0x1, 0xffff, 0x3, 0x7, 0x100000001, 0x52a3, 0x6, 0x2, 0xfffffffffffffffc, 0x6], [0x2000000000000, 0x8, 0x9, 0x200, 0x0, 0x42, 0xf03, 0xfffffffffffffffe, 0x10100, 0x100000001, 0x1, 0x7, 0x800, 0x1, 0xfdff, 0x9, 0x6414, 0x1, 0x2, 0x0, 0x33f6, 0x8, 0x8001, 0x7, 0x9, 0x2, 0x49c, 0xc3, 0x61eb, 0x80, 0xa30, 0xffffffff00000000, 0x80000000, 0x61d6, 0x6, 0x8, 0x4, 0x7a40, 0x2, 0xca, 0x1, 0x1, 0x8, 0xb220, 0x4, 0x0, 0xffff, 0xfffffffd, 0x97ca, 0x200, 0x2, 0xfffffffffffffffd, 0x74f0d0e9, 0x5, 0xc4, 0x9, 0x20, 0x6, 0x7ff, 0x1f, 0xffff, 0x5, 0x14, 0xffffffffffff0000], [0x4, 0x6, 0x8, 0x100, 0x5, 0x2, 0x1ff, 0x3, 0x1, 0xa0, 0x5, 0x90d0, 0x3, 0xffff, 0x2, 0x100, 0x100000000, 0x4, 0x80000000, 0xffc0000000000000, 0x6, 0x3ff, 0x1, 0x200, 0x7, 0xfffffffeffffffff, 0x7, 0x2, 0xffffffffffffffc4, 0x3, 0x3f, 0x0, 0x6, 0x7, 0x100000001, 0x4, 0x4, 0x154, 0xea9, 0x0, 0x5, 0x8000000000000, 0x4, 0x5, 0x0, 0x6, 0xc, 0x400, 0x3, 0x9, 0x0, 0x9, 0x101, 0x8, 0x5, 0x5, 0x100000001, 0x400, 0x8, 0x0, 0x0, 0x5, 0x100, 0x38c], [0xfffffffffffffff9, 0x80000000, 0x3, 0x6, 0x5700, 0x3, 0x4800000000, 0xf5, 0x6, 0x5, 0x9, 0x9, 0x6, 0x0, 0x6, 0x80000000, 0x8, 0x9, 0xf8bd, 0x6f, 0x80, 0x9, 0x401, 0x1c, 0xffffffff, 0x2, 0x8, 0x1, 0x9, 0x8, 0x0, 0xa3, 0x1, 0x7, 0xdab9, 0x6, 0xfffffffffffffffc, 0xbe99, 0xbda, 0x8, 0x4, 0x0, 0x10000, 0xfffffc0000000000, 0x1, 0x2, 0x7fff, 0x6, 0x5, 0x2, 0x20, 0x0, 0x0, 0x5, 0x6, 0x100000000, 0x9, 0xfffffffffffffff7, 0x5, 0x8, 0xfffffffffffffbff, 0x2, 0x7, 0x7fffffff]}, 0x45c) ioctl$sock_inet_SIOCGIFADDR(r4, 0x8915, &(0x7f0000000000)={'bridge_slave_0\x00', {0x2, 0x4e20, @multicast2}}) openat$tun(0xffffffffffffff9c, &(0x7f0000000800)='/dev/net/tun\x00', 0x8000, 0x0) 03:39:05 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0xfffffffffffffffe, 0x0) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000040)) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000040)) rt_sigtimedwait(&(0x7f0000000000)={0x401}, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x989680}, 0x8) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) r3 = syz_open_procfs(r2, &(0x7f0000000080)='cmdline\x00') preadv(r3, &(0x7f0000000480), 0x10000000000002a1, 0x0) 03:39:05 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x68, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:05 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x9d, 0x0, 0x0) 03:39:05 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000180)=0x0) kcmp(r3, r4, 0x7, r0, r0) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) r6 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x3, 0x4200) ioctl$UI_SET_MSCBIT(r6, 0x40045568, 0x3c) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) write$FUSE_INTERRUPT(r6, &(0x7f0000000100)={0x10, 0x0, 0x2}, 0x10) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0xae80, 0x0) 03:39:05 executing program 3: openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000000)={0x0, @speck128, 0x3, "6e3918a588573754"}) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='cmdline\x00') syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0) [ 616.057616] EPT pointer = 0x00000001ba8d101e 03:39:05 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x6c00000000000000, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 616.125298] IPVS: set_ctl: invalid protocol: 104 0.0.0.0:20002 [ 616.142086] IPVS: set_ctl: invalid protocol: 104 0.0.0.0:20002 03:39:05 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x7, 0x0, 0x0) 03:39:05 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x100000000000000, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 616.322806] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:39:05 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='cmdline\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 03:39:05 executing program 3: socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) r1 = syz_open_procfs(r0, &(0x7f00000002c0)="6f6f6d5f61646a005e3baa8770bdf554881cada7b26dc15d72cd4a6201d9c688487cbd33883d67b39f00ee40323c3cdc2690f5b8fe4b4d36df2e5fb92f2d97e4d591167917efa9454058def6e69a100800809709b4ba50619fecf356b67570295eb4fedb60378870d37ece80ec8092d9f03615c88f05998fdaac0c19dee0") utimensat(r1, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={{}, {0x77359400}}, 0x100) preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0) [ 616.472716] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:39:05 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ftruncate(r0, 0xfffffffffffff0f0) r1 = socket$inet6_sctp(0xa, 0x2, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x4, 0x8001, 0x40, 0xfffffffffffffffc, 0x0}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={r2, @in={{0x2, 0x4e24}}, 0x4, 0x3, 0x80000001, 0x7, 0x8}, 0x98) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x20000, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000001440)=ANY=[@ANYRES32=r2, @ANYBLOB="8e0000004e3392d8925cd15648663ba0c6bd125eb8cdb55b45d4cd90f351e4d3a613f57915526cb8e2beaa38316b847ed5cc7d37979030591f6c2ae55de11e4f559a669b7c9ab9a176039c8189a73d40d7c17d0d1d5e009442e02f5c0400b4ca0493ac000000000000f257fba2c078c09faacf10ece3fa8b05c8e51e8a3b8108fd5d34afdb6b0bcec05d9e672d3beb9092258bb000cc64"], &(0x7f0000001400)=0x96) read$FUSE(r3, &(0x7f00000002c0), 0x1000) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='cmdline\x00') ioctl$RNDGETENTCNT(r4, 0x80045200, &(0x7f00000000c0)) preadv(r4, &(0x7f0000000480), 0x10000000000002a1, 0x0) [ 616.518524] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:39:05 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x1000007, &(0x7f0000000080)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x10000000000000, 0x0, 0x0, 0x700], 0x0, 0x1a200}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:39:05 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x141002, 0x0) recvmmsg(r1, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) syz_mount_image$nfs(&(0x7f00000004c0)='nfs\x00', &(0x7f0000000500)='./file0\x00', 0x1, 0x3, &(0x7f0000000700)=[{&(0x7f0000000540)="62bdec065338754432eec7994cbca02f76b8cf0847fbe3ff2729d96a98e24ba6a359df94f8b2ae22aa4e5855463926ea8019be0d8adb256705810f6f20087babb29fe162fabcc61cb54d80bc8ff529911c248032e30ca4f454f0d4effd0a4f21f9435bca4101ef9b45b4fcf6ee5d29372bf886ed86e2c277c2abfa7d37cebe80413e8d40d5d7", 0x86, 0x400}, {&(0x7f0000000600)="b8c53667c9e4d5140e7b991b0ce9c2c2382d236d8cfc63898c5bb7a6b5d5a1ba54af527a52ffc9db016c668917236726b0a5", 0x32, 0x7c0000000000}, {&(0x7f0000000640)="b5b79b33d6379fb1d2a35fa3341615cd8cfe14e8248f60b9e651d3f085eac1092da072e20f3665bbc8a0f6552d57f936038b5a607f2b852069fd7960e23efcd496272d62c089f4c5cd31cbe840d7068be5649f2f4b5a972c99360dc1a5d40229ab55986996b55630eec9fbc28b479b3e2c7355199cda89fd5dfc1d2da50c6e65aed1101765684740e9b79fb1b6ac8d062bc9c7a035c177aead460596a10afdad65e885dc685968aadb", 0xa9, 0x7fff}], 0x1080800, &(0x7f0000000780)='user$') r2 = syz_open_procfs(0x0, &(0x7f0000000280)='cmdline\x00') preadv(r0, &(0x7f0000000580), 0x0, 0x0) fstat(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000240)=0x0, &(0x7f0000000340), &(0x7f0000000380)) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x100000, &(0x7f00000003c0)={[{@index_off='index=off'}, {@index_on='index=on'}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@metacopy_off='metacopy=off'}], [{@obj_role={'obj_role', 0x3d, "6c6ffd6e6f6465762e2d"}}, {@uid_lt={'uid<', r3}}, {@fsmagic={'fsmagic'}}, {@euid_lt={'euid<', r4}}, {@subj_user={'subj_user', 0x3d, 'user$'}}, {@fowner_lt={'fowner<', r5}}, {@appraise='appraise'}]}) 03:39:05 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0xffffff7f00000000, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:05 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x14d, 0x0, 0x0) 03:39:06 executing program 3: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x20002, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000040)={0x8, 0x8000, 0x883, 0x9, 0x4, 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000200)=0xc) r3 = syz_open_procfs(r2, &(0x7f0000000280)='statm\x00') preadv(r3, &(0x7f0000000480), 0x10000000000002a1, 0x0) ioctl$sock_proto_private(r1, 0x99ec, &(0x7f00000001c0)='s') write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000002c0), 0x13f, 0x3}}, 0x20) gettid() 03:39:06 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x4000000, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 616.755575] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 616.794939] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 616.877415] Unknown ioctl -1067953333 03:39:06 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='cmdline\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000), &(0x7f0000000040)=0x10) 03:39:06 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000540)=ANY=[@ANYRESDEC=r2, @ANYBLOB="883a25ca8b5be35c629e3686328f5546dcd3b1e8c9f13629fc5881e822a1f17657c526712605a1f24ea96bcf969713014ba99ff9569f04487c3c5843b2666842dfad1e5a7d609d51e706594f069e43aaab4788da0327717943ff202419c168def25f102a2d2b1e5b03a3fcf965503eb8ed25d03ca311c34a0f4137e335639f96c0c8d4461180b85358cf635d5eb0c809f2bf5c0ee366d389756a28868e323c2fc6bd83e468fc95293ef00e9b7124", @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRESHEX=r3, @ANYRES64=r0, @ANYRES64=r0, @ANYBLOB="8176668a30d5f7cae6ef0e2748ad7ceafe593de6a97bb56ca7ba6558bc3e49d17435aa801e1ff0a1465cfc54669708d5a4bc", @ANYRES32=r1], @ANYRESDEC=r2], &(0x7f0000000380)=0x4) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0xae80, 0x0) 03:39:06 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x8, 0x200) connect$pppoe(r1, &(0x7f00000000c0)={0x18, 0x0, {0x2, @broadcast, 'bridge_slave_1\x00'}}, 0x1e) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffff9c}) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000080)={r2}) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='cmdline\x00') preadv(r3, &(0x7f0000000780)=[{&(0x7f00000002c0)=""/161, 0xa1}, {&(0x7f0000000200)=""/57, 0x39}, {&(0x7f0000000380)=""/74, 0x4a}, {&(0x7f0000000400)=""/138, 0x8a}, {&(0x7f00000004c0)=""/205, 0xcd}, {&(0x7f00000005c0)=""/150, 0x96}, {&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000700)=""/101, 0x65}], 0x8, 0x0) [ 616.911917] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:39:06 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x300, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 616.988339] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 617.097276] IPVS: set_ctl: invalid protocol: 768 0.0.0.0:20002 [ 617.110275] *** Guest State *** [ 617.128303] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 617.141728] IPVS: set_ctl: invalid protocol: 768 0.0.0.0:20002 03:39:06 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0xa00000000000000, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:06 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xbb, 0x0, 0x0) 03:39:06 executing program 5: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x218c00, 0x0) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='cmdline\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0) [ 617.187842] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 617.225654] CR3 = 0x0000000000000000 03:39:06 executing program 3: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x20002, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000040)={0x8, 0x8000, 0x883, 0x9, 0x4, 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000200)=0xc) r3 = syz_open_procfs(r2, &(0x7f0000000280)='statm\x00') preadv(r3, &(0x7f0000000480), 0x10000000000002a1, 0x0) ioctl$sock_proto_private(r1, 0x99ec, &(0x7f00000001c0)='s') write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000002c0), 0x13f, 0x3}}, 0x20) gettid() [ 617.246722] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 617.261149] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 617.286797] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 03:39:06 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0xffffff7f, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 617.304539] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 617.334382] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 03:39:06 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='cmdline\x00') read(r0, &(0x7f00000001c0)=""/189, 0x1cf) preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0) syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x4, 0x100) [ 617.373373] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 617.402333] Unknown ioctl -1067953333 [ 617.409938] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 03:39:06 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x48000000, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 617.438536] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 03:39:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x8, 0x200) connect$pppoe(r1, &(0x7f00000000c0)={0x18, 0x0, {0x2, @broadcast, 'bridge_slave_1\x00'}}, 0x1e) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffff9c}) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000080)={r2}) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='cmdline\x00') preadv(r3, &(0x7f0000000780)=[{&(0x7f00000002c0)=""/161, 0xa1}, {&(0x7f0000000200)=""/57, 0x39}, {&(0x7f0000000380)=""/74, 0x4a}, {&(0x7f0000000400)=""/138, 0x8a}, {&(0x7f00000004c0)=""/205, 0xcd}, {&(0x7f00000005c0)=""/150, 0x96}, {&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000700)=""/101, 0x65}], 0x8, 0x0) [ 617.480031] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 617.535920] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 617.571436] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 03:39:06 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x2ea, 0x0, 0x0) [ 617.581265] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 617.618394] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 617.635249] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 617.684899] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 617.725710] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 617.768553] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 617.780932] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 617.791474] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 617.799475] Interruptibility = 00000000 ActivityState = 00000000 [ 617.840241] *** Host State *** [ 617.843990] RIP = 0xffffffff81212b2e RSP = 0xffff880186727350 [ 617.850132] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 617.856589] FSBase=00007f901f655700 GSBase=ffff8801dae00000 TRBase=fffffe0000003000 [ 617.864624] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 617.871096] CR0=0000000080050033 CR3=00000001b5ff7000 CR4=00000000001426f0 [ 617.878190] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87c013a0 [ 617.885356] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 617.891599] *** Control State *** [ 617.895075] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 617.901839] EntryControls=0000d1ff ExitControls=002fefff [ 617.907308] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 617.914364] VMEntry: intr_info=800000fe errcode=00000000 ilen=00000000 [ 617.921145] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 617.927843] reason=80000021 qualification=0000000000000000 [ 617.934321] IDTVectoring: info=00000000 errcode=00000000 [ 617.939866] TSC Offset = 0xfffffeb315e2c885 [ 617.939877] TPR Threshold = 0x00 [ 617.947919] EPT pointer = 0x0000000180f7601e [ 617.988092] *** Guest State *** [ 617.991568] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 618.001242] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 618.011234] CR3 = 0x0000000000000000 [ 618.015017] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 618.021069] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 618.027076] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 618.033837] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 618.041889] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 618.050132] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 618.058290] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 618.066255] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 618.074364] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 618.082388] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 618.090407] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 618.098483] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 618.106474] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 618.114506] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 618.120984] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 618.128486] Interruptibility = 00000000 ActivityState = 00000000 [ 618.134741] *** Host State *** [ 618.137986] RIP = 0xffffffff81212b2e RSP = 0xffff880187f57350 [ 618.143968] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 618.150429] FSBase=00007f901f612700 GSBase=ffff8801daf00000 TRBase=fffffe0000034000 [ 618.158269] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 618.164145] CR0=0000000080050033 CR3=00000001b5ff7000 CR4=00000000001426e0 [ 618.171221] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff87c013a0 [ 618.177999] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 618.184056] *** Control State *** [ 618.187498] PinBased=0000003f CPUBased=b5a06dfe SecondaryExec=000000c3 [ 618.194250] EntryControls=0000d1ff ExitControls=002fefff [ 618.199823] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 618.206786] VMEntry: intr_info=800000fe errcode=00000000 ilen=00000000 [ 618.213523] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 618.220191] reason=80000021 qualification=0000000000000000 [ 618.226545] IDTVectoring: info=00000000 errcode=00000000 [ 618.232075] TSC Offset = 0xfffffeb315e2c885 03:39:07 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000240)=ANY=[@ANYRES16=r2, @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB="8bb971b56693643606a7ea4ada3f529f6605907e8857e848ba07b9a8b38cd669fa1523f8b7482f798f61ce3b9f90d3948ae5b449f8d1a10202dcab41efefd5ff38494fdfdd188b1f806399b3825b82480cdb935e960443f081a0e987078f53177030f5449fb03dda6a32517be82acab400", @ANYPTR64=&(0x7f0000000080)=ANY=[@ANYPTR64, @ANYRES32=r0, @ANYRES16=r1], @ANYRES16=r0, @ANYRESOCT=0x0], @ANYRESHEX=r2], &(0x7f0000000380)=0x3) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 03:39:07 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0xff00, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:07 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ftruncate(r0, 0xfffffffffffff0f0) r1 = socket$inet6_sctp(0xa, 0x2, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x4, 0x8001, 0x40, 0xfffffffffffffffc, 0x0}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={r2, @in={{0x2, 0x4e24}}, 0x4, 0x3, 0x80000001, 0x7, 0x8}, 0x98) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x20000, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000001440)=ANY=[@ANYRES32=r2, @ANYBLOB="8e0000004e3392d8925cd15648663ba0c6bd125eb8cdb55b45d4cd90f351e4d3a613f57915526cb8e2beaa38316b847ed5cc7d37979030591f6c2ae55de11e4f559a669b7c9ab9a176039c8189a73d40d7c17d0d1d5e009442e02f5c0400b4ca0493ac000000000000f257fba2c078c09faacf10ece3fa8b05c8e51e8a3b8108fd5d34afdb6b0bcec05d9e672d3beb9092258bb000cc64"], &(0x7f0000001400)=0x96) read$FUSE(r3, &(0x7f00000002c0), 0x1000) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='cmdline\x00') ioctl$RNDGETENTCNT(r4, 0x80045200, &(0x7f00000000c0)) preadv(r4, &(0x7f0000000480), 0x10000000000002a1, 0x0) 03:39:07 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x2000, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000440)=@assoc_value={0x0}, &(0x7f0000000480)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000004c0)=@assoc_value={r1}, &(0x7f0000000240)=0x8) io_setup(0x80, &(0x7f00000003c0)=0x0) io_destroy(r2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e21, @loopback}}, [0x5, 0x4, 0x9, 0x6, 0x8000, 0x200, 0x8001, 0x7, 0xffffffffffffffff, 0x0, 0x6, 0xffff, 0x3f, 0x2c5380c2, 0x80000001]}, &(0x7f0000000040)=0x100) ioctl$KVM_REINJECT_CONTROL(r0, 0xae71, &(0x7f00000001c0)) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000080)={r3, 0xfe}, &(0x7f00000000c0)=0x8) socket$netlink(0x10, 0x3, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='cmdline\x00') preadv(r4, &(0x7f0000000480), 0x10000000000002a1, 0x0) 03:39:07 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='cmdline\x00') ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f0000000000)={{0x8, 0x8, 0x5, 0x13c3, 0x800, 0x4}, 0x1, 0x8, 0x2, 0x3, 0x6, "ab8afeea0f854f46488da0f6f976ae4d2fd8b57f4bff8fb72d3493161324ca41b28a46e6f4401479b338d4461b9a7c57441c3d2a06760c11794aa5c525cc5c12bfc2c71a422630a1a7662f0e5873d4516f9a785ffbd29f7e46dac3ccf83e5905c9bea990462dbf7a759590b18e293547ed615d8aa2c10803fb7ec7bf801037dd"}) fsetxattr$security_smack_transmute(r0, &(0x7f00000000c0)='security.SMACK64TRANSMUTE\x00', &(0x7f00000001c0)='TRUE', 0x4, 0x2) preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0) 03:39:07 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x1ac, 0x0, 0x0) [ 618.236435] TPR Threshold = 0x00 [ 618.239883] EPT pointer = 0x0000000180f7601e 03:39:07 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 618.299515] IPVS: set_ctl: invalid protocol: 65280 0.0.0.0:20002 [ 618.313916] IPVS: set_ctl: invalid protocol: 65280 0.0.0.0:20002 [ 618.419678] *** Guest State *** 03:39:07 executing program 5: socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='cmdline\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0) [ 618.443897] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 618.467289] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:39:07 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x5a, 0x0, 0x0) 03:39:07 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ftruncate(r0, 0xfffffffffffff0f0) r1 = socket$inet6_sctp(0xa, 0x2, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x4, 0x8001, 0x40, 0xfffffffffffffffc, 0x0}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={r2, @in={{0x2, 0x4e24}}, 0x4, 0x3, 0x80000001, 0x7, 0x8}, 0x98) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x20000, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000001440)=ANY=[@ANYRES32=r2, @ANYBLOB="8e0000004e3392d8925cd15648663ba0c6bd125eb8cdb55b45d4cd90f351e4d3a613f57915526cb8e2beaa38316b847ed5cc7d37979030591f6c2ae55de11e4f559a669b7c9ab9a176039c8189a73d40d7c17d0d1d5e009442e02f5c0400b4ca0493ac000000000000f257fba2c078c09faacf10ece3fa8b05c8e51e8a3b8108fd5d34afdb6b0bcec05d9e672d3beb9092258bb000cc64"], &(0x7f0000001400)=0x96) read$FUSE(r3, &(0x7f00000002c0), 0x1000) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='cmdline\x00') ioctl$RNDGETENTCNT(r4, 0x80045200, &(0x7f00000000c0)) preadv(r4, &(0x7f0000000480), 0x10000000000002a1, 0x0) 03:39:07 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 618.510462] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 618.533581] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 618.595224] CR3 = 0x0000000000000000 [ 618.618214] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 618.654005] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 03:39:07 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 618.665738] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 618.673198] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 618.713189] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 618.755833] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 618.782767] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 618.791772] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 618.806480] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 618.825701] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 618.871388] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 618.906378] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 618.923201] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 618.931938] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 618.940699] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 618.949110] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 618.957216] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 618.964415] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 618.972530] Interruptibility = 00000000 ActivityState = 00000000 [ 618.979117] *** Host State *** [ 618.982336] RIP = 0xffffffff81212b2e RSP = 0xffff880185b7f350 [ 618.988878] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 618.995433] FSBase=00007f901f655700 GSBase=ffff8801dae00000 TRBase=fffffe0000003000 [ 619.003732] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 619.009767] CR0=0000000080050033 CR3=0000000183552000 CR4=00000000001426f0 [ 619.016814] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87c013a0 [ 619.023565] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 619.029831] *** Control State *** [ 619.033292] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 619.040621] EntryControls=0000d1ff ExitControls=002fefff [ 619.046096] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 619.053128] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 619.059854] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 619.066420] reason=80000021 qualification=0000000000000000 03:39:08 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:39:08 executing program 1: r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) ftruncate(r0, 0x8200) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x101002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000007000/0x14000)=nil, 0x14000, 0x2000000, 0x11, r1, 0xfffffffffffffffd) r3 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, &(0x7f0000d83ff8), 0x8000fffffffe) write$cgroup_type(r0, &(0x7f0000000040)='threaded\x00', 0x9) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='cmdline\x00') preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) [ 619.072837] IDTVectoring: info=00000000 errcode=00000000 [ 619.078387] TSC Offset = 0xfffffeb2621a1426 [ 619.082713] TPR Threshold = 0x00 [ 619.086064] EPT pointer = 0x00000001bcbd501e 03:39:08 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:08 executing program 3: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x20002, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000040)={0x8, 0x8000, 0x883, 0x9, 0x4, 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000200)=0xc) r3 = syz_open_procfs(r2, &(0x7f0000000280)='statm\x00') preadv(r3, &(0x7f0000000480), 0x10000000000002a1, 0x0) ioctl$sock_proto_private(r1, 0x99ec, &(0x7f00000001c0)='s') write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f0000000340)={0x10, 0x30, 0xfa00, {&(0x7f0000000240), 0x3, {0xa, 0x4e21, 0x1, @mcast2, 0x40}, r4}}, 0x38) gettid() 03:39:08 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x60, 0x0, 0x0) 03:39:08 executing program 5: socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='cmdline\x00') signalfd(r0, &(0x7f0000000000)={0x4}, 0x8) preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) [ 619.156257] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 619.164387] Unknown ioctl -1067953333 [ 619.173152] audit: type=1804 audit(2000000348.457:112): pid=31790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir342985829/syzkaller.FB74Ih/925/bus" dev="sda1" ino=17090 res=1 03:39:08 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 619.207265] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 619.293790] *** Guest State *** 03:39:08 executing program 3: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x20002, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000040)={0x8, 0x8000, 0x883, 0x9, 0x4, 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000200)=0xc) r3 = syz_open_procfs(r2, &(0x7f0000000280)='statm\x00') preadv(r3, &(0x7f0000000480), 0x10000000000002a1, 0x0) ioctl$sock_proto_private(r1, 0x99ec, &(0x7f00000001c0)='s') write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f0000000340)={0x10, 0x30, 0xfa00, {&(0x7f0000000240), 0x3, {0xa, 0x4e21, 0x1, @mcast2, 0x40}, r4}}, 0x38) gettid() [ 619.314320] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 619.324789] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 03:39:08 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x3a2, 0x0, 0x0) 03:39:08 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 619.367403] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 619.383066] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 619.455901] CR3 = 0x0000000000000000 [ 619.463807] Unknown ioctl -1067953333 [ 619.482856] RSP = 0x0000000000000000 RIP = 0x0000000000000000 03:39:08 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000040)={0x10001, 0x9}, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) mknodat(r1, &(0x7f0000000340)='\x00', 0x4, 0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='cmdline\x00') preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000680)=""/121}, {&(0x7f0000000700)=""/196}], 0xfd616ca47c73498, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000001340)={0x0, 0x1000, "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"}, &(0x7f0000000080)=0x1008) recvmsg(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/82, 0x52}, {&(0x7f0000000240)=""/21, 0x15}, {&(0x7f0000000340)}, {&(0x7f0000000380)=""/147, 0x93}], 0x4, &(0x7f0000000480)=""/145, 0x91, 0x2f54}, 0x100) ioctl$VT_OPENQRY(r2, 0x5600, &(0x7f0000000580)) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00000000c0)={r3, 0xfc}, 0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000001c0)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000200)=0x14) [ 619.517494] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 619.544624] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 619.565943] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 619.581376] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 619.599334] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:39:08 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 619.625701] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 619.636515] audit: type=1804 audit(2000000348.907:113): pid=31790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir342985829/syzkaller.FB74Ih/925/bus" dev="sda1" ino=17090 res=1 [ 619.683552] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 619.754669] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 619.782964] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 619.818561] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 619.824089] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 619.864409] audit: type=1804 audit(2000000348.987:114): pid=31828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir342985829/syzkaller.FB74Ih/925/bus" dev="sda1" ino=17090 res=1 [ 619.900076] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 619.909403] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 619.919807] audit: type=1804 audit(2000000349.007:115): pid=31790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir342985829/syzkaller.FB74Ih/925/bus" dev="sda1" ino=17090 res=1 [ 619.946288] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 619.954449] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 619.954471] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 619.954482] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 619.954495] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 619.954505] Interruptibility = 00000000 ActivityState = 00000000 [ 619.954510] *** Host State *** [ 619.954535] RIP = 0xffffffff81212b2e RSP = 0xffff88018031f350 [ 619.954557] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 620.002146] FSBase=00007f901f655700 GSBase=ffff8801daf00000 TRBase=fffffe0000003000 [ 620.015181] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 620.021166] CR0=0000000080050033 CR3=00000001c0db2000 CR4=00000000001426e0 [ 620.028257] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87c013a0 [ 620.034976] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 620.041116] *** Control State *** [ 620.044622] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 620.051424] EntryControls=0000d1ff ExitControls=002fefff [ 620.056893] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 620.063946] VMEntry: intr_info=8000009e errcode=00000000 ilen=00000000 [ 620.070779] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 620.077418] reason=80000021 qualification=0000000000000000 [ 620.083894] IDTVectoring: info=00000000 errcode=00000000 [ 620.089533] TSC Offset = 0xfffffeb1e9fa6ff3 [ 620.093997] TPR Threshold = 0x00 [ 620.097405] EPT pointer = 0x00000001ca2f101e 03:39:09 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000300)={@empty, 0xfb1, 0x0, 0x0, 0xa, 0x8, 0x1f, 0x6}, &(0x7f0000000340)=0x20) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$UI_DEV_DESTROY(r3, 0x5502) r5 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xc1af, 0x40001) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000100)=""/110, &(0x7f00000003c0)=""/97, &(0x7f0000000640)=""/255, 0x3000}) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$P9_RMKDIR(r5, &(0x7f00000001c0)={0xfffffffffffffee3, 0x49, 0x1, {0x0, 0x0, 0x1}}, 0x14) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 03:39:09 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:09 executing program 3: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x20002, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000040)={0x8, 0x8000, 0x883, 0x9, 0x4, 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000200)=0xc) r3 = syz_open_procfs(r2, &(0x7f0000000280)='statm\x00') preadv(r3, &(0x7f0000000480), 0x10000000000002a1, 0x0) ioctl$sock_proto_private(r1, 0x99ec, &(0x7f00000001c0)='s') write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f0000000340)={0x10, 0x30, 0xfa00, {&(0x7f0000000240), 0x3, {0xa, 0x4e21, 0x1, @mcast2, 0x40}, r4}}, 0x38) gettid() 03:39:09 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xb6, 0x0, 0x0) 03:39:09 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = accept(0xffffffffffffffff, &(0x7f0000000300)=@nfc, &(0x7f0000000040)=0x80) getsockopt$inet_buf(r1, 0x0, 0x9, 0x0, &(0x7f00000000c0)) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) fcntl$getown(r0, 0x9) openat$selinux_create(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/create\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r0, 0x0, 0x8, &(0x7f0000000240)='cmdline\x00', 0xffffffffffffffff}, 0x30) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/icmp\x00') preadv(r2, &(0x7f0000000480), 0x10000000000002a1, 0x0) 03:39:09 executing program 5: socket$netlink(0x10, 0x3, 0xffffffffffffdffc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='cmdline\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 03:39:09 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 620.193773] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 620.203805] Unknown ioctl -1067953333 [ 620.221763] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:39:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000040)) r2 = syz_open_dev$midi(&(0x7f0000000340)='/dev/midi#\x00', 0x20, 0x100) connect(r2, &(0x7f0000000380)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @multicast2}, 0x0, 0x1, 0x1, 0x2}}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) acct(&(0x7f0000000080)='./file0\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f00000001c0)={{0x8}, 'port0\x00', 0xc4, 0x10401, 0x4, 0xdd, 0x0, 0x1ff, 0x3, 0x0, 0x6, 0x8}) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='cmdline\x00') preadv(r3, &(0x7f0000000480), 0x10000000000002a1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f00000002c0)={0x400, {0x2, 0x4e24, @local}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x11}}, {0x2, 0x4e20, @loopback}, 0xf, 0x11d, 0x9, 0x7f, 0x2, &(0x7f00000000c0)='ip6gre0\x00', 0x58d8, 0x93, 0x6}) [ 620.386912] *** Guest State *** [ 620.392240] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 620.416778] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 03:39:09 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 620.440448] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:39:09 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x2aa, 0x0, 0x0) [ 620.490306] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 620.547310] CR3 = 0x0000000000000000 [ 620.566141] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 620.571634] RSP = 0x0000000000000000 RIP = 0x0000000000000000 03:39:09 executing program 5: socket$netlink(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='cmdline\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 03:39:09 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 620.599569] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 620.655611] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 620.689980] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 620.727208] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 620.742122] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 620.749036] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 620.757223] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 620.783195] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 620.829602] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 620.856946] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 620.866591] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 620.879182] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 620.887240] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 620.895369] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 620.903434] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 620.911672] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 620.918473] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 620.926024] Interruptibility = 00000000 ActivityState = 00000000 [ 620.932466] *** Host State *** [ 620.935672] RIP = 0xffffffff81212b2e RSP = 0xffff88017dccf350 [ 620.941857] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 620.948316] FSBase=00007f901f655700 GSBase=ffff8801dae00000 TRBase=fffffe0000034000 [ 620.956114] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 620.962062] CR0=0000000080050033 CR3=00000001d88f7000 CR4=00000000001426f0 [ 620.969175] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff87c013a0 [ 620.975834] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 620.981954] *** Control State *** [ 620.985416] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 620.992137] EntryControls=0000d1ff ExitControls=002fefff [ 620.997612] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 621.004595] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 621.011305] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 621.017940] reason=80000021 qualification=0000000000000000 [ 621.024290] IDTVectoring: info=00000000 errcode=00000000 [ 621.029865] TSC Offset = 0xfffffeb15e6e6cb3 [ 621.034194] TPR Threshold = 0x01 [ 621.037597] EPT pointer = 0x00000001c7a3401e 03:39:10 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f0000000140)={0xfffffffffffffffd, 0x2, 0xfff, 0xfffffffffffffffe, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$BLKSECDISCARD(r4, 0x127d, &(0x7f0000000100)=0x4) 03:39:10 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = accept(0xffffffffffffffff, &(0x7f0000000300)=@nfc, &(0x7f0000000040)=0x80) getsockopt$inet_buf(r1, 0x0, 0x9, 0x0, &(0x7f00000000c0)) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) fcntl$getown(r0, 0x9) openat$selinux_create(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/create\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r0, 0x0, 0x8, &(0x7f0000000240)='cmdline\x00', 0xffffffffffffffff}, 0x30) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/icmp\x00') preadv(r2, &(0x7f0000000480), 0x10000000000002a1, 0x0) 03:39:10 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:10 executing program 5: socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='cmdline\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 03:39:10 executing program 3 (fault-call:3 fault-nth:0): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() 03:39:10 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x1d6, 0x0, 0x0) 03:39:10 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 621.135651] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 621.147195] FAULT_INJECTION: forcing a failure. [ 621.147195] name failslab, interval 1, probability 0, space 0, times 0 [ 621.173919] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 621.228673] CPU: 1 PID: 31919 Comm: syz-executor3 Not tainted 4.19.0-rc8+ #65 [ 621.235980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 621.241340] *** Guest State *** [ 621.245361] Call Trace: [ 621.245393] dump_stack+0x1c4/0x2b4 [ 621.245419] ? dump_stack_print_info.cold.2+0x52/0x52 [ 621.245446] ? mark_held_locks+0x130/0x130 [ 621.264371] should_fail.cold.4+0xa/0x17 [ 621.268456] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 621.273611] ? graph_lock+0x170/0x170 [ 621.277446] ? dput.part.26+0x26d/0x790 [ 621.278757] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 621.281446] ? graph_lock+0x170/0x170 [ 621.281463] ? graph_lock+0x170/0x170 [ 621.281480] ? graph_lock+0x170/0x170 [ 621.281512] ? find_held_lock+0x36/0x1c0 [ 621.281549] ? ___might_sleep+0x1ed/0x300 [ 621.308976] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 621.310023] ? arch_local_save_flags+0x40/0x40 [ 621.310055] __should_failslab+0x124/0x180 [ 621.310078] should_failslab+0x9/0x14 [ 621.328513] __kmalloc+0x2d4/0x760 [ 621.332076] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 621.337377] ? rcu_bh_qs+0xc0/0xc0 [ 621.340952] ? rw_copy_check_uvector+0x364/0x3e0 [ 621.343451] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 621.345757] rw_copy_check_uvector+0x364/0x3e0 [ 621.345780] ? __fget+0x4d1/0x740 [ 621.345807] import_iovec+0xcf/0x470 [ 621.345828] ? dup_iter+0x270/0x270 [ 621.370099] ? proc_cwd_link+0x1d0/0x1d0 [ 621.374149] CR3 = 0x0000000000000000 [ 621.374205] vfs_readv+0xf5/0x1c0 [ 621.381386] ? compat_rw_copy_check_uvector+0x440/0x440 [ 621.385509] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 621.386812] ? __fget_light+0x2e9/0x430 [ 621.386832] ? fget_raw+0x20/0x20 [ 621.386858] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 621.386888] ? check_preemption_disabled+0x48/0x200 [ 621.403511] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 621.405828] ? __sb_end_write+0xd9/0x110 [ 621.405859] do_preadv+0x1cc/0x280 [ 621.405878] ? do_readv+0x310/0x310 03:39:10 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x6e34, 0x9, 0x2, 0x0, 0x75}) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000040)=0xb635, 0x4) [ 621.405910] ? __ia32_sys_read+0xb0/0xb0 [ 621.432177] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 621.432201] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 621.432239] __x64_sys_preadv+0x9a/0xf0 [ 621.443070] do_syscall_64+0x1b9/0x820 [ 621.443086] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 621.443115] ? syscall_return_slowpath+0x5e0/0x5e0 [ 621.443142] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 621.443169] ? trace_hardirqs_on_caller+0x310/0x310 [ 621.449545] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 621.451066] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 621.451085] ? prepare_exit_to_usermode+0x291/0x3b0 [ 621.451118] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 621.458162] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 621.461422] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 621.461437] RIP: 0033:0x457569 [ 621.461453] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 621.461467] RSP: 002b:00007f61d5f99c78 EFLAGS: 00000246 [ 621.476615] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 621.477981] ORIG_RAX: 0000000000000127 [ 621.477993] RAX: ffffffffffffffda RBX: 00007f61d5f99c90 RCX: 0000000000457569 [ 621.478003] RDX: 10000000000002a1 RSI: 0000000020000480 RDI: 0000000000000004 [ 621.478014] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 621.478024] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f61d5f9a6d4 03:39:10 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x2a, 0x0, 0x0) 03:39:10 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 621.478034] R13: 00000000004c3088 R14: 00000000004d4a40 R15: 0000000000000005 03:39:10 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 621.656518] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:39:11 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = accept(0xffffffffffffffff, &(0x7f0000000300)=@nfc, &(0x7f0000000040)=0x80) getsockopt$inet_buf(r1, 0x0, 0x9, 0x0, &(0x7f00000000c0)) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) fcntl$getown(r0, 0x9) openat$selinux_create(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/create\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r0, 0x0, 0x8, &(0x7f0000000240)='cmdline\x00', 0xffffffffffffffff}, 0x30) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/icmp\x00') preadv(r2, &(0x7f0000000480), 0x10000000000002a1, 0x0) [ 621.770601] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 621.786105] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 622.001636] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 622.019012] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 622.037668] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 622.070905] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 622.079621] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 622.087973] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 622.096220] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 622.105520] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 622.113959] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 622.120656] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 622.128424] Interruptibility = 00000000 ActivityState = 00000000 [ 622.134844] *** Host State *** [ 622.138418] RIP = 0xffffffff81212b2e RSP = 0xffff88018423f350 [ 622.144600] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 622.151391] FSBase=00007f901f655700 GSBase=ffff8801dae00000 TRBase=fffffe0000034000 [ 622.159447] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 622.165531] CR0=0000000080050033 CR3=000000017ec43000 CR4=00000000001426f0 [ 622.172840] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff87c013a0 [ 622.179765] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 622.186020] *** Control State *** [ 622.189725] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 622.196605] EntryControls=0000d1ff ExitControls=002fefff [ 622.202341] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 622.209540] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 622.216411] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 622.223258] reason=80000021 qualification=0000000000000000 [ 622.229801] IDTVectoring: info=00000000 errcode=00000000 [ 622.240967] TSC Offset = 0xfffffeb0de9e0fde [ 622.253240] TPR Threshold = 0x00 [ 622.260427] EPT pointer = 0x000000018864d01e 03:39:11 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x101, 0x0) ioctl$TUNGETSNDBUF(r4, 0x800454d3, &(0x7f0000000140)) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) socketpair$packet(0x11, 0x2, 0x300, &(0x7f0000000080)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:39:11 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:11 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x1d4, 0x0, 0x0) 03:39:11 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = accept(0xffffffffffffffff, &(0x7f0000000300)=@nfc, &(0x7f0000000040)=0x80) getsockopt$inet_buf(r1, 0x0, 0x9, 0x0, &(0x7f00000000c0)) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) fcntl$getown(r0, 0x9) openat$selinux_create(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/create\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r0, 0x0, 0x8, &(0x7f0000000240)='cmdline\x00', 0xffffffffffffffff}, 0x30) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/icmp\x00') preadv(r2, &(0x7f0000000480), 0x10000000000002a1, 0x0) 03:39:11 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() [ 622.396364] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 622.445786] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:39:11 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x100000000000023b, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() [ 622.625765] *** Guest State *** [ 622.661683] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 03:39:12 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x91, 0x0, 0x0) [ 622.765064] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 622.829786] CR3 = 0x0000000000000000 [ 622.863880] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 622.893792] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 622.900234] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 622.907112] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 622.916356] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 622.925129] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 622.934214] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 622.966990] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 622.994605] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 623.012442] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 623.029713] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 623.041788] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 623.050485] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 623.058875] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 623.065396] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 623.074219] Interruptibility = 00000000 ActivityState = 00000000 [ 623.081055] *** Host State *** [ 623.084912] RIP = 0xffffffff81212b2e RSP = 0xffff8801850ef350 [ 623.093518] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 623.108834] FSBase=00007f901f633700 GSBase=ffff8801daf00000 TRBase=fffffe0000003000 [ 623.117259] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 623.124569] CR0=0000000080050033 CR3=00000001c0df0000 CR4=00000000001426e0 [ 623.131939] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff87c013a0 [ 623.138922] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 623.145177] *** Control State *** [ 623.148901] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 623.155747] EntryControls=0000d1ff ExitControls=002fefff [ 623.161494] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 623.168687] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 623.176626] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 623.183336] reason=80000021 qualification=0000000000000000 [ 623.189718] IDTVectoring: info=00000000 errcode=00000000 [ 623.195199] TSC Offset = 0xfffffeb03342cce3 [ 623.199614] TPR Threshold = 0x00 [ 623.202992] EPT pointer = 0x00000001c172401e 03:39:12 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)=0x0) r3 = syz_open_procfs(r2, &(0x7f00000001c0)="6e380002fff57674556a00") preadv(r3, &(0x7f0000000480), 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)='trusted.overlay.upper\x00', &(0x7f00000008c0)=ANY=[@ANYBLOB="00fb1a02016f8d4f10233403dcdfdefda0e993647fc734dd47be"], 0x7, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x200, 0x0) socket$inet6(0xa, 0x800, 0x2) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000200)='team\x00') getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000240)={{{@in=@multicast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000340)=0xe8) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000000800)={&(0x7f0000000040), 0xc, &(0x7f00000007c0)={&(0x7f0000000380)={0x440, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{{0x8, 0x1, r1}, {0x44, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0xbf92}}, {0x8}}}]}}, {{0x8, 0x1, r1}, {0x74, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x2f6}}}]}}, {{0x8, 0x1, r1}, {0x88, 0x2, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0xffffffff}}}]}}, {{0x8, 0x1, r1}, {0x44, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r6}}, {0x8}}}]}}, {{0x8, 0x1, r1}, {0x44, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x20}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r1}, {0x4}}, {{0x8, 0x1, r1}, {0x228, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x20}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r1}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x200}}}]}}]}, 0x440}, 0x1, 0x0, 0x0, 0x4}, 0x80) 03:39:12 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)) ioctl(r0, 0x4000000008912, &(0x7f0000000080)="1540623470") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1, {0x0, 0x0, 0x3}}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:39:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000188, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() 03:39:12 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:12 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = accept(0xffffffffffffffff, &(0x7f0000000300)=@nfc, &(0x7f0000000040)=0x80) getsockopt$inet_buf(r1, 0x0, 0x9, 0x0, &(0x7f00000000c0)) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) fcntl$getown(r0, 0x9) openat$selinux_create(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/create\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r0, 0x0, 0x8, &(0x7f0000000240)='cmdline\x00', 0xffffffffffffffff}, 0x30) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x0) 03:39:12 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x136, 0x0, 0x0) [ 623.425825] *** Guest State *** [ 623.439724] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 623.463488] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:39:12 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x100000000000019b, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() [ 623.484398] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 623.496183] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:39:12 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = accept(0xffffffffffffffff, &(0x7f0000000300)=@nfc, &(0x7f0000000040)=0x80) getsockopt$inet_buf(r1, 0x0, 0x9, 0x0, &(0x7f00000000c0)) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) fcntl$getown(r0, 0x9) openat$selinux_create(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/create\x00', 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/icmp\x00') preadv(r2, &(0x7f0000000480), 0x10000000000002a1, 0x0) [ 623.532638] CR3 = 0x0000000000000000 [ 623.552156] RSP = 0x0000000000000000 RIP = 0x0000000000000000 03:39:12 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x96, 0x0, 0x0) [ 623.587483] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 623.618871] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 623.626016] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 03:39:12 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 623.665604] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 623.673992] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 03:39:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000148, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() [ 623.719632] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 623.761422] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 623.797001] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 03:39:13 executing program 5: socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f0000000000)=""/115, 0x73}], 0x1, 0x0, 0xfffffffffffffed7}}], 0x1, 0x0, &(0x7f0000000180)) futex(&(0x7f0000000080)=0x7, 0x0, 0x0, &(0x7f00000000c0)={0x77359400}, &(0x7f00000001c0)=0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='cmdline\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000200)={0x0, 0x58, "4ad74893e6cf81b6df01ea87583e7300147cc85af811df8e77a0a1186ff5282f17b6eed0db5d213bb724362cb5c263f88c46a2940f124e83ea7662db7a99c4edbc94e9631ef3f212de4d3ee9ce6f377617d7f1be1a0886c6"}, &(0x7f00000002c0)=0x60) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000300)={r1, @in={{0x2, 0x4e21, @local}}, 0x7fffffff, 0x2}, 0x90) [ 623.825977] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 623.841859] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 623.855098] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:39:13 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 623.887982] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 03:39:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x100000000000019c, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() 03:39:13 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x11a, 0x0, 0x0) [ 623.948655] GDTR: limit=0x0000ffff, base=0x0000000000000000 03:39:13 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = accept(0xffffffffffffffff, &(0x7f0000000300)=@nfc, &(0x7f0000000040)=0x80) getsockopt$inet_buf(r1, 0x0, 0x9, 0x0, &(0x7f00000000c0)) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) fcntl$getown(r0, 0x9) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/icmp\x00') preadv(r2, &(0x7f0000000480), 0x10000000000002a1, 0x0) [ 624.016210] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 624.038200] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 624.054604] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 624.064352] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 624.100816] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 624.135131] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 624.166943] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 624.208753] Interruptibility = 00000000 ActivityState = 00000000 [ 624.244208] *** Host State *** [ 624.266722] RIP = 0xffffffff81212b2e RSP = 0xffff880187aa7350 [ 624.303676] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 624.349490] FSBase=00007f901f655700 GSBase=ffff8801dae00000 TRBase=fffffe0000034000 [ 624.358953] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 624.370709] CR0=0000000080050033 CR3=00000001d2615000 CR4=00000000001426f0 [ 624.382710] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff87c013a0 [ 624.389515] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 624.395709] *** Control State *** [ 624.399766] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 624.406425] EntryControls=0000d1ff ExitControls=002fefff [ 624.412011] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 624.419662] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 624.426503] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 624.433199] reason=80000021 qualification=0000000000000000 [ 624.439614] IDTVectoring: info=00000000 errcode=00000000 [ 624.445076] TSC Offset = 0xfffffeafb33efaee 03:39:13 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000080)={0xf004}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:39:13 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000043, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() 03:39:13 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x3, 0x0, 0x0) 03:39:13 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='cmdline\x00') getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000c80), &(0x7f0000000cc0)=0xc) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000004540)=""/4096, &(0x7f0000000c40)=0x1000) fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000d80)={0x0, 0x0}) perf_event_open(&(0x7f0000000d00)={0x3, 0x70, 0x1e53, 0x6, 0x9, 0x2d3, 0x0, 0x7, 0x4000, 0x4, 0xd25, 0x81, 0x10001, 0x6, 0x9, 0x7fff, 0x9, 0x4, 0x400, 0xb0, 0x5, 0x4, 0x3, 0x7, 0x6, 0x100, 0x0, 0xfffffffffffffffc, 0x1, 0xffffffff, 0x7ff, 0x2, 0x86, 0x8471, 0x1a, 0x3ff, 0x100, 0x2, 0x0, 0xffffffff, 0x1, @perf_config_ext={0x100000001, 0x7ff}, 0x100, 0x7, 0x59, 0x3, 0x873a, 0xf1ef00000, 0x3ff}, r2, 0x74f, r0, 0x3) recvmmsg(r1, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000000)=""/142, 0x8e}, {&(0x7f00000002c0)=""/231, 0xe7}, {&(0x7f00000003c0)=""/240, 0xf0}, {&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f00000005c0)=""/204, 0xcc}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/84, 0x54}, {&(0x7f00000006c0)=""/125, 0x7d}], 0x8, &(0x7f00000007c0)=""/202, 0xca, 0x2}, 0x3}, {{&(0x7f00000008c0)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x1, &(0x7f0000000940)=""/19, 0x13, 0x1}, 0xff}, {{&(0x7f0000000980)=@vsock, 0x80, &(0x7f0000000a00)=[{&(0x7f0000003540)=""/4096, 0x1000}], 0x1, &(0x7f0000000a40)=""/227, 0xe3, 0x6}, 0x7}], 0x3, 0x10001, &(0x7f0000000c00)={0x77359400}) preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0) 03:39:13 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = accept(0xffffffffffffffff, &(0x7f0000000300)=@nfc, &(0x7f0000000040)=0x80) getsockopt$inet_buf(r0, 0x0, 0x9, 0x0, &(0x7f00000000c0)) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/icmp\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0) [ 624.449522] TPR Threshold = 0x01 [ 624.452895] EPT pointer = 0x000000018044d01e 03:39:13 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 624.495899] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 624.519153] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:39:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000076, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() [ 624.636777] *** Guest State *** [ 624.657217] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 624.670485] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:39:14 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='cmdline\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x2c7c1ec9, 0x2, 0x800a, 0x401, 0x1, 0x0, 0x3f, 0x80, 0x0}, &(0x7f0000000040)=0x20) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000300)={0x9, 0x8000, 0x5, 0x4, r2}, &(0x7f0000000340)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f00000001c0)={r2, 0x5, 0x3, 0x0, 0x7, 0x7fffffff, 0xa36, 0x6, {r3, @in={{0x2, 0x4e22, @local}}, 0x2, 0x4, 0x6, 0x826, 0x100}}, &(0x7f00000002c0)=0xb0) 03:39:14 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x2ee, 0x0, 0x0) [ 624.703540] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 624.720189] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 03:39:14 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:14 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = accept(0xffffffffffffffff, &(0x7f0000000300)=@nfc, &(0x7f0000000040)=0x80) getsockopt$inet_buf(r0, 0x0, 0x9, 0x0, &(0x7f00000000c0)) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/icmp\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0) [ 624.769919] CR3 = 0x0000000000000000 [ 624.788163] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 624.805732] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 624.833948] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 624.860528] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 624.902411] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 624.914627] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 624.943022] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 624.970783] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 625.004360] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 625.048454] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 625.062362] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 625.073916] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 625.083222] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 625.094293] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 625.102916] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 625.109944] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 625.117584] Interruptibility = 00000000 ActivityState = 00000000 [ 625.124310] *** Host State *** [ 625.134182] RIP = 0xffffffff81212b2e RSP = 0xffff8801845e7350 [ 625.140418] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 625.147007] FSBase=00007f901f655700 GSBase=ffff8801dae00000 TRBase=fffffe0000003000 [ 625.155120] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 625.161411] CR0=0000000080050033 CR3=00000001d2615000 CR4=00000000001426f0 [ 625.168982] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff87c013a0 [ 625.175647] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 625.181781] *** Control State *** [ 625.185243] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 625.191959] EntryControls=0000d1ff ExitControls=002fefff [ 625.197440] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 625.204442] VMEntry: intr_info=8000001e errcode=00000000 ilen=00000000 [ 625.211203] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 625.217917] reason=80000021 qualification=0000000000000000 [ 625.224236] IDTVectoring: info=00000000 errcode=00000000 [ 625.229738] TSC Offset = 0xfffffeaf0d65fd2d [ 625.234092] TPR Threshold = 0x00 [ 625.237468] EPT pointer = 0x000000017f00e01e [ 625.246102] *** Guest State *** [ 625.249575] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 625.258505] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 625.267361] CR3 = 0x0000000000000000 [ 625.271179] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 625.277172] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 625.283220] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 625.289923] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 625.298008] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 625.305985] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 625.314029] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 625.322038] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 625.330060] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 625.338080] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 625.346048] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 625.354809] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 625.362863] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 625.370879] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 625.377276] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 625.384848] Interruptibility = 00000000 ActivityState = 00000000 [ 625.391108] *** Host State *** [ 625.394315] RIP = 0xffffffff81212b2e RSP = 0xffff8801845e7350 [ 625.400354] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 625.406766] FSBase=00007f901f655700 GSBase=ffff8801dae00000 TRBase=fffffe0000003000 [ 625.414619] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 625.420557] CR0=0000000080050033 CR3=00000001d2615000 CR4=00000000001426f0 [ 625.427561] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87c013a0 [ 625.434273] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 625.440393] *** Control State *** [ 625.443854] PinBased=0000003f CPUBased=b5a06dfe SecondaryExec=000000c3 [ 625.450583] EntryControls=0000d1ff ExitControls=002fefff [ 625.456044] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 625.463022] VMEntry: intr_info=8000001e errcode=00000000 ilen=00000000 [ 625.469723] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 625.476297] reason=80000021 qualification=0000000000000000 [ 625.483488] IDTVectoring: info=00000000 errcode=00000000 [ 625.488994] TSC Offset = 0xfffffeaf0d65fd2d [ 625.493343] TPR Threshold = 0x00 [ 625.496709] EPT pointer = 0x000000017f00e01e 03:39:14 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) r4 = dup3(r0, r1, 0x80000) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r4, 0x40405515, &(0x7f0000000080)={0x2, 0x7, 0x0, 0xfffffffffffffffe, 'syz1\x00', 0x9}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:39:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x100000000000003a, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() 03:39:14 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:14 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x25e, 0x0, 0x0) 03:39:14 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = accept(0xffffffffffffffff, &(0x7f0000000300)=@nfc, &(0x7f0000000040)=0x80) getsockopt$inet_buf(r0, 0x0, 0x9, 0x0, &(0x7f00000000c0)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/icmp\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0) 03:39:14 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000000)) 03:39:14 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:14 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x7000000}) [ 625.555636] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:39:15 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:15 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = accept(0xffffffffffffffff, &(0x7f0000000300)=@nfc, &(0x7f0000000040)=0x80) getsockopt$inet_buf(r0, 0x0, 0x9, 0x0, &(0x7f00000000c0)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/icmp\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0) 03:39:15 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x7000000}) [ 625.673730] vhci_hcd: invalid port number 0 [ 625.687515] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 625.695465] vhci_hcd: invalid port number 0 [ 625.701423] *** Guest State *** [ 625.706772] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:39:15 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x1b9, 0x0, 0x0) [ 625.760492] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 625.776777] vhci_hcd: invalid port number 0 [ 625.843134] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 625.860432] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 625.880602] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 625.890094] CR3 = 0x0000000000000000 [ 625.904405] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 625.923184] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 625.932494] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 625.939725] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 625.948202] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 625.956368] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 625.972062] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 625.992264] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 626.001654] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 626.012149] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 626.020761] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 626.028948] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 626.037060] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 626.045734] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 626.052276] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 626.059811] Interruptibility = 00000000 ActivityState = 00000000 [ 626.066061] *** Host State *** [ 626.069353] RIP = 0xffffffff81212b2e RSP = 0xffff8801865d7350 [ 626.075352] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 626.081885] FSBase=00007f901f655700 GSBase=ffff8801daf00000 TRBase=fffffe0000003000 [ 626.089754] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 626.095656] CR0=0000000080050033 CR3=00000001c6389000 CR4=00000000001426e0 [ 626.102797] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87c013a0 [ 626.109508] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 626.115550] *** Control State *** [ 626.119110] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 626.125796] EntryControls=0000d1ff ExitControls=002fefff [ 626.132063] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 03:39:15 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) pipe(&(0x7f0000001680)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f00000016c0)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0xb44, 0xb48f, 0x100, 0x1, 0x5}, &(0x7f0000001780)=0x98) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f00000017c0)={r5, 0x9, 0xf00, 0xc74}, &(0x7f0000001800)=0x10) 03:39:15 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x7000000}) 03:39:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x100000000000008a, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() 03:39:15 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:15 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x1bb, 0x0, 0x0) 03:39:15 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = accept(0xffffffffffffffff, &(0x7f0000000300)=@nfc, &(0x7f0000000040)=0x80) getsockopt$inet_buf(r0, 0x0, 0x9, 0x0, &(0x7f00000000c0)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/icmp\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0) [ 626.139105] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 626.145782] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 626.152413] reason=80000021 qualification=0000000000000000 [ 626.158793] IDTVectoring: info=00000000 errcode=00000000 [ 626.164239] TSC Offset = 0xfffffeae7c8c9f84 [ 626.168601] TPR Threshold = 0x00 [ 626.171970] EPT pointer = 0x0000000183eef01e 03:39:15 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x7000000}) [ 626.220453] vhci_hcd: invalid port number 0 03:39:15 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 626.268563] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 626.296659] *** Guest State *** [ 626.316652] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 03:39:15 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept(0xffffffffffffffff, &(0x7f0000000300)=@nfc, &(0x7f0000000040)=0x80) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/icmp\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 03:39:15 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0xa3, 0x7000000}) [ 626.362361] vhci_hcd: invalid port number 0 [ 626.374890] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 03:39:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000059, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() [ 626.406430] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 626.432814] CR3 = 0x0000000000000000 [ 626.445605] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:39:15 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 626.446046] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 626.483055] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 626.537066] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 626.584914] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 626.613293] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 626.624362] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 626.640610] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 626.652735] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 626.661345] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 626.688439] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 626.697008] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 626.705885] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 626.723233] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 626.731738] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 626.741185] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 626.749350] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 626.755868] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 626.763736] Interruptibility = 00000000 ActivityState = 00000000 [ 626.770864] *** Host State *** [ 626.774083] RIP = 0xffffffff81212b2e RSP = 0xffff880183867350 [ 626.780943] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 626.787364] FSBase=00007f901f655700 GSBase=ffff8801daf00000 TRBase=fffffe0000003000 [ 626.795244] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 626.801229] CR0=0000000080050033 CR3=00000001b271c000 CR4=00000000001426e0 [ 626.808392] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87c013a0 [ 626.815066] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 626.821227] *** Control State *** [ 626.824685] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 626.831417] EntryControls=0000d1ff ExitControls=002fefff 03:39:16 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000080)=0x7fff) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:39:16 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x5b, 0x0, 0x0) 03:39:16 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x7000000}) 03:39:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001ea, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() 03:39:16 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:16 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/icmp\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) [ 626.836876] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 626.844029] VMEntry: intr_info=8000001e errcode=00000000 ilen=00000000 [ 626.850751] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 626.857333] reason=80000021 qualification=0000000000000000 [ 626.863724] IDTVectoring: info=00000000 errcode=00000000 [ 626.869231] TSC Offset = 0xfffffeae28ccdbee [ 626.873561] TPR Threshold = 0x00 [ 626.876944] EPT pointer = 0x00000001d186701e [ 626.980456] *** Guest State *** [ 626.992905] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 626.999260] vhci_hcd: invalid port number 0 [ 627.003864] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 627.020570] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:39:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000225, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() 03:39:16 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 627.033518] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 03:39:16 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x7000000}) [ 627.109380] CR3 = 0x0000000000000000 03:39:16 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x25c, 0x0, 0x0) [ 627.136947] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 627.183278] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 627.220393] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 03:39:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001cd, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() 03:39:16 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 627.231546] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 627.252556] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 627.261428] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 627.267499] vhci_hcd: invalid port number 0 [ 627.309744] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 627.334426] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 627.363219] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 627.383478] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 627.392161] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 627.406947] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 627.415775] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 627.423862] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 627.431012] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 627.452203] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 627.476562] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 627.485234] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 627.492141] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 627.500258] Interruptibility = 00000000 ActivityState = 00000000 [ 627.506751] *** Host State *** [ 627.526111] RIP = 0xffffffff81212b2e RSP = 0xffff880180f07350 [ 627.535584] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 627.543118] FSBase=00007f901f655700 GSBase=ffff8801daf00000 TRBase=fffffe0000003000 [ 627.551636] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 627.557547] CR0=0000000080050033 CR3=00000001890ac000 CR4=00000000001426e0 [ 627.564666] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87c013a0 [ 627.571908] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 627.578042] *** Control State *** [ 627.581500] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 627.588218] EntryControls=0000d1ff ExitControls=002fefff [ 627.593685] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 627.601072] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 627.607793] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 627.614364] reason=80000021 qualification=0000000000000000 [ 627.620752] IDTVectoring: info=00000000 errcode=00000000 03:39:16 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1, {0x3}}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:39:16 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/icmp\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 03:39:16 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x7000000}) 03:39:16 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:16 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x311, 0x0, 0x0) 03:39:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x100000000000012f, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() [ 627.626218] TSC Offset = 0xfffffeadcb290467 [ 627.630577] TPR Threshold = 0x01 [ 627.633958] EPT pointer = 0x0000000188a2701e 03:39:17 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x7000000}) [ 627.752080] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 627.788060] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:39:17 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0xa3, 0x7000000}) 03:39:17 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/icmp\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 03:39:17 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 627.802644] *** Guest State *** 03:39:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000243, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() [ 627.850529] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 03:39:17 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x7000000}) [ 627.922189] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 627.950749] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 627.966634] CR3 = 0x0000000000000000 [ 627.993822] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 628.022587] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 628.054038] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 628.082448] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 628.102863] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 628.111258] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 628.150280] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 628.158950] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 628.174024] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 628.183022] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 628.191456] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 628.199936] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 628.208111] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 628.216865] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 628.227033] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 628.234607] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 628.242471] Interruptibility = 00000000 ActivityState = 00000000 [ 628.248880] *** Host State *** [ 628.252204] RIP = 0xffffffff81212b2e RSP = 0xffff88018a36f350 [ 628.258599] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 628.265055] FSBase=00007f901f655700 GSBase=ffff8801dae00000 TRBase=fffffe0000034000 [ 628.273311] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 628.279292] CR0=0000000080050033 CR3=000000018d887000 CR4=00000000001426f0 [ 628.286315] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff87c013a0 [ 628.293095] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 628.299255] *** Control State *** [ 628.302712] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 628.309465] EntryControls=0000d1ff ExitControls=002fefff [ 628.315268] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 628.322560] VMEntry: intr_info=8000001e errcode=00000000 ilen=00000000 [ 628.329454] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 628.336045] reason=80000021 qualification=0000000000000000 [ 628.342416] IDTVectoring: info=00000000 errcode=00000000 [ 628.347901] TSC Offset = 0xfffffead5aad42e1 [ 628.352218] TPR Threshold = 0x00 [ 628.355574] EPT pointer = 0x00000001cd02f01e [ 628.397960] *** Guest State *** [ 628.401267] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 628.410195] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 628.419165] CR3 = 0x0000000000000000 [ 628.422887] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 628.428948] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 628.428965] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 628.441888] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 628.449958] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 628.457969] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 628.465955] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 628.474021] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 628.482081] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 628.490159] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 628.498760] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 628.506760] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 628.514905] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 628.522926] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 628.529401] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 628.536858] Interruptibility = 00000000 ActivityState = 00000000 [ 628.543155] *** Host State *** [ 628.546353] RIP = 0xffffffff81212b2e RSP = 0xffff88017f0e7350 [ 628.552403] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 628.558852] FSBase=00007f901f612700 GSBase=ffff8801dae00000 TRBase=fffffe0000003000 [ 628.566643] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 628.572585] CR0=0000000080050033 CR3=000000018d887000 CR4=00000000001426f0 [ 628.579754] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87c013a0 [ 628.586426] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 628.592538] *** Control State *** [ 628.595992] PinBased=0000003f CPUBased=b5a06dfe SecondaryExec=000000c3 [ 628.602711] EntryControls=0000d1ff ExitControls=002fefff [ 628.608243] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 628.615185] VMEntry: intr_info=8000001e errcode=00000000 ilen=00000000 [ 628.621918] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 628.629126] reason=80000021 qualification=0000000000000000 [ 628.635444] IDTVectoring: info=00000000 errcode=00000000 [ 628.640957] TSC Offset = 0xfffffead5aad42e1 [ 628.645278] TPR Threshold = 0x00 03:39:17 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000100)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:39:17 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xc4, 0x0, 0x0) 03:39:17 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/icmp\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 03:39:17 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3}) 03:39:17 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000291, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() [ 628.648700] EPT pointer = 0x00000001cd02f01e 03:39:18 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3}) [ 628.705913] vhci_hcd: invalid port number 0 [ 628.740335] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 628.761239] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 628.810379] *** Guest State *** 03:39:18 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/icmp\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 03:39:18 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 628.831095] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 628.881434] vhci_hcd: invalid port number 0 03:39:18 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x25, 0x0, 0x0) [ 628.901792] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 03:39:18 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x1a8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001e1, 0x4c000000) [ 628.965729] CR3 = 0x0000000000000000 03:39:18 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/icmp\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) [ 629.005823] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 629.013374] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 629.039934] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 629.046554] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 629.068613] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 629.102762] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 629.133867] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 629.157428] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 629.183279] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 629.191623] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 629.201590] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 629.212334] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 629.222258] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 629.236514] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 629.244713] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 629.254880] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 629.263815] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 629.271451] Interruptibility = 00000000 ActivityState = 00000000 [ 629.278004] *** Host State *** [ 629.281321] RIP = 0xffffffff81212b2e RSP = 0xffff880186e3f350 [ 629.287442] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 629.294050] FSBase=00007f901f655700 GSBase=ffff8801dae00000 TRBase=fffffe0000034000 [ 629.301976] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 629.307924] CR0=0000000080050033 CR3=00000001cc437000 CR4=00000000001426f0 [ 629.314948] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff87c013a0 [ 629.321687] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 629.327826] *** Control State *** [ 629.331305] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 629.338042] EntryControls=0000d1ff ExitControls=002fefff [ 629.343512] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 629.350525] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 629.357199] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 629.363821] reason=80000021 qualification=0000000000000000 [ 629.370205] IDTVectoring: info=00000000 errcode=00000000 [ 629.375660] TSC Offset = 0xfffffeacd0d0fc41 [ 629.380044] TPR Threshold = 0x00 03:39:18 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x20000, 0x0) getpeername(r0, &(0x7f0000000300)=@hci={0x1f, 0x0}, &(0x7f00000003c0)=0x80) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000400)={r2, 0x1, 0x6, @random="5ea2ed96553a"}, 0x10) clock_gettime(0x0, &(0x7f0000000200)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000100)={0x4, 0x3, 0xd000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0xae80, 0x0) 03:39:18 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x10000000000000db, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() 03:39:18 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x322, 0x0, 0x0) 03:39:18 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:18 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/icmp\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) [ 629.383418] EPT pointer = 0x00000001bbb1a01e 03:39:18 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x2, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000100)) [ 629.474203] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 629.498008] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:39:18 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/icmp\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) [ 629.535453] *** Guest State *** 03:39:18 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r0, 0x8912, &(0x7f0000000000)="153f6234488dd25d5c6070") r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='loginuid\x00') write$cgroup_pid(r1, &(0x7f00000000c0), 0x1) 03:39:18 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000139, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() [ 629.566658] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 03:39:18 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 629.630612] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 03:39:18 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x185, 0x0, 0x0) [ 629.673312] CR3 = 0x0000000000000000 03:39:19 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r0, 0x8912, &(0x7f0000000000)="153f6234488dd25d5c6070") r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='loginuid\x00') write$cgroup_pid(r1, &(0x7f00000000c0), 0x1) [ 629.710409] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 629.746911] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 629.776026] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 629.814632] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 629.846357] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 629.895222] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 629.924421] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 629.942831] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 629.951453] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 629.960017] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 629.968249] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 629.976258] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 629.984367] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 629.992413] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 630.000457] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 630.006910] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 630.014499] Interruptibility = 00000000 ActivityState = 00000000 [ 630.020800] *** Host State *** [ 630.024023] RIP = 0xffffffff81212b2e RSP = 0xffff8801806bf350 [ 630.030076] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 630.036493] FSBase=00007f901f655700 GSBase=ffff8801daf00000 TRBase=fffffe0000034000 [ 630.044346] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 630.050278] CR0=0000000080050033 CR3=00000001ce471000 CR4=00000000001426e0 [ 630.057282] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff87c013a0 [ 630.064027] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 630.070133] *** Control State *** [ 630.073605] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 630.080377] EntryControls=0000d1ff ExitControls=002fefff [ 630.085837] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 630.092839] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 630.099569] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 630.106136] reason=80000021 qualification=0000000000000000 [ 630.112520] IDTVectoring: info=00000000 errcode=00000000 [ 630.118030] TSC Offset = 0xfffffeac6de47950 [ 630.122355] TPR Threshold = 0x01 [ 630.125709] EPT pointer = 0x000000018884101e [ 630.142146] *** Guest State *** [ 630.145442] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 630.154517] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 630.163478] CR3 = 0x0000000000000000 [ 630.167201] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 630.173242] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 630.179302] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 630.185960] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 630.194023] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 630.202069] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 630.210127] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 630.219072] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 630.227080] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 630.235160] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 630.243188] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 630.251241] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 630.259257] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 630.267223] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 630.273751] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 630.281254] Interruptibility = 00000000 ActivityState = 00000000 [ 630.287509] *** Host State *** [ 630.290787] RIP = 0xffffffff81212b2e RSP = 0xffff8801806bf350 [ 630.296772] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 630.303251] FSBase=00007f901f655700 GSBase=ffff8801dae00000 TRBase=fffffe0000003000 [ 630.311101] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 630.316978] CR0=0000000080050033 CR3=00000001ce471000 CR4=00000000001426f0 [ 630.324055] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87c013a0 [ 630.330767] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 630.336807] *** Control State *** [ 630.340336] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 03:39:19 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x13, &(0x7f0000000140)) ioctl(r0, 0x4000000008913, &(0x7f0000000080)="153f6234418dd25d766070") openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x20000, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x80, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r1, 0xae80, 0x0) 03:39:19 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/icmp\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 03:39:19 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000153, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() 03:39:19 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x20d, 0x0, 0x0) 03:39:19 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r0, 0x8912, &(0x7f0000000000)="153f6234488dd25d5c6070") r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='loginuid\x00') write$cgroup_pid(r1, &(0x7f00000000c0), 0x1) [ 630.347021] EntryControls=0000d1ff ExitControls=002fefff [ 630.353237] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 630.360237] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 630.366908] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 630.373553] reason=80000021 qualification=0000000000000000 [ 630.379923] IDTVectoring: info=00000000 errcode=00000000 [ 630.385367] TSC Offset = 0xfffffeac19838466 [ 630.389728] TPR Threshold = 0x01 [ 630.393099] EPT pointer = 0x0000000189dd201e 03:39:19 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 630.475388] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:39:19 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r0, 0x8912, &(0x7f0000000000)="153f6234488dd25d5c6070") r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='loginuid\x00') write$cgroup_pid(r1, &(0x7f00000000c0), 0x1) 03:39:19 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/icmp\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 03:39:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000218, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() 03:39:19 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 630.623355] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:39:19 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x108, 0x0, 0x0) 03:39:20 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000540)={0x7, 0x0, [{0x7fff, 0x1, 0x0, 0x0, @msi={0x4, 0x4, 0x9}}, {0x6, 0x3, 0x0, 0x0, @msi={0x3f, 0x497, 0x7}}, {0x8, 0x2, 0x0, 0x0, @irqchip={0x40, 0x8000}}, {0x7f, 0x7, 0x0, 0x0, @sint={0xc, 0x5}}, {0x4, 0x3, 0x0, 0x0, @adapter={0xfff, 0xe90, 0x1, 0x5, 0x7c}}, {0x6, 0x1, 0x0, 0x0, @adapter={0x9d, 0x0, 0x1, 0x100000001}}, {0x5, 0x5, 0x0, 0x0, @msi={0x400, 0x6, 0x40}}]}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:39:20 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r0, 0x8912, &(0x7f0000000000)="153f6234488dd25d5c6070") write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0), 0x1) 03:39:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000249, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() [ 630.755825] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:39:20 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/icmp\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) [ 630.801780] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:39:20 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:20 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='loginuid\x00') write$cgroup_pid(r0, &(0x7f00000000c0), 0x1) 03:39:20 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x394, 0x0, 0x0) [ 630.990370] *** Guest State *** [ 631.006841] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 03:39:20 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/icmp\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 03:39:20 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 631.047874] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 631.074742] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 631.089998] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:39:20 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='loginuid\x00') write$cgroup_pid(r0, &(0x7f00000000c0), 0x1) [ 631.138146] CR3 = 0x0000000000000000 [ 631.141926] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 631.156449] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 631.171401] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 03:39:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001ac, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() [ 631.183498] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 631.193769] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 631.200180] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 03:39:20 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 631.231015] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 631.315744] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 631.324463] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 631.330921] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 631.373267] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 631.398620] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 631.417772] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 631.425795] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 631.436116] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 631.444562] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 631.453008] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 631.459923] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 631.469310] Interruptibility = 00000000 ActivityState = 00000000 [ 631.476919] *** Host State *** [ 631.480598] RIP = 0xffffffff81212b2e RSP = 0xffff880186a1f350 [ 631.492367] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 631.498888] FSBase=00007f901f655700 GSBase=ffff8801daf00000 TRBase=fffffe0000003000 [ 631.506691] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 631.512670] CR0=0000000080050033 CR3=00000001d97d1000 CR4=00000000001426e0 [ 631.520385] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87c013a0 [ 631.527074] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 631.533366] *** Control State *** [ 631.536824] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 631.544067] EntryControls=0000d1ff ExitControls=002fefff [ 631.549590] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 631.556537] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 631.563288] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 631.569950] reason=80000021 qualification=0000000000000000 [ 631.576261] IDTVectoring: info=00000000 errcode=00000000 [ 631.581784] TSC Offset = 0xfffffeaba5f37e0d [ 631.586117] TPR Threshold = 0x00 [ 631.589558] EPT pointer = 0x00000001870b901e [ 631.638044] *** Guest State *** [ 631.641357] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 631.651445] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 631.660545] CR3 = 0x0000000000000000 [ 631.664256] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 631.670318] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 631.676325] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 631.683056] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 631.691123] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 631.699213] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 631.707218] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 631.715274] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 631.723290] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 631.731334] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 631.739357] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 631.747311] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 631.755423] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 631.763425] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 631.769897] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 631.777354] Interruptibility = 00000000 ActivityState = 00000000 [ 631.784287] *** Host State *** [ 631.787476] RIP = 0xffffffff81212b2e RSP = 0xffff88018de57350 [ 631.793512] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 631.799958] FSBase=00007f901f612700 GSBase=ffff8801dae00000 TRBase=fffffe0000003000 [ 631.807811] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 631.814049] CR0=0000000080050033 CR3=00000001d97d1000 CR4=00000000001426f0 [ 631.821126] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87c013a0 [ 631.827848] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 631.833896] *** Control State *** [ 631.837354] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 631.844084] EntryControls=0000d1ff ExitControls=002fefff [ 631.849579] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 631.856491] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 631.863239] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 631.869858] reason=80000021 qualification=0000000000000000 [ 631.876165] IDTVectoring: info=00000000 errcode=00000000 [ 631.881675] TSC Offset = 0xfffffeaba5f37e0d 03:39:21 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) fsetxattr$trusted_overlay_upper(r3, &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f0000000240)={0x0, 0xfb, 0xee, 0x6, 0x4, "6fb586b9c008c4db1985d2ba62e83a1f", "27ce9e30c8247182284769074bf06cb10ff6a097ca07a9f583bb7360c2fd3e8c7c2851e78b08044a586e5da43de58c6aacca66dd854857b6b6ce87c35a3db9744971845a6030d5aa4ffbb1af5ccce42269edef8da6f6272099e70a6d5470362b0d9e8552daacd8fb073402cba82e580b18910714b2383cdd93149c9317642b164cbf9f3f2ff26a83797fc9bed80cea15a2d38e6d4f64dd0a4ca8d4397a824e05108181c70d57c2ebeb8380f4d7b1ff36b65a0b26dfff155693bb3347d8edff0d7ac66a56cb4402567ad2ffc92fb9a4b1532981ce3878fc4d38"}, 0xee, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) getsockopt$inet_dccp_int(r4, 0x21, 0xf, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:39:21 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:21 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x3a, 0x0, 0x0) 03:39:21 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='loginuid\x00') write$cgroup_pid(r0, &(0x7f00000000c0), 0x1) 03:39:21 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/icmp\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 03:39:21 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x10000000000000a1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() [ 631.885998] TPR Threshold = 0x00 [ 631.889428] EPT pointer = 0x00000001870b901e 03:39:21 executing program 5: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000000)="153f6234488dd25d5c6070") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='loginuid\x00') write$cgroup_pid(r0, &(0x7f00000000c0), 0x1) 03:39:21 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x324, 0x0, 0x0) [ 632.008088] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 632.046477] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 632.069521] *** Guest State *** [ 632.073038] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 632.082441] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 632.098545] CR3 = 0x0000000000000000 [ 632.106960] RSP = 0x0000000000000000 RIP = 0x0000000000000000 03:39:21 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:21 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x10000000000000af, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() [ 632.121267] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 632.127446] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 03:39:21 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/icmp\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) [ 632.174696] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 632.227065] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 03:39:21 executing program 5: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000000)="153f6234488dd25d5c6070") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='loginuid\x00') write$cgroup_pid(r0, &(0x7f00000000c0), 0x1) [ 632.268418] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 632.286195] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 632.312011] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 632.330967] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 632.361178] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 632.414091] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 632.427079] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 632.435595] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 632.444252] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 632.452526] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 632.460551] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 632.466979] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 632.466991] Interruptibility = 00000000 ActivityState = 00000000 [ 632.466997] *** Host State *** [ 632.467011] RIP = 0xffffffff81212b2e RSP = 0xffff88018169f350 [ 632.467035] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 632.496681] FSBase=00007f901f655700 GSBase=ffff8801dae00000 TRBase=fffffe0000034000 [ 632.504974] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 632.510935] CR0=0000000080050033 CR3=00000001d97d1000 CR4=00000000001426f0 [ 632.518005] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff87c013a0 [ 632.524671] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 632.530804] *** Control State *** [ 632.534268] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 632.540995] EntryControls=0000d1ff ExitControls=002fefff [ 632.546477] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 632.553491] VMEntry: intr_info=800000fd errcode=00000000 ilen=00000000 03:39:21 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x83, &(0x7f0000000200)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x400000, 0x0) ioctl$RTC_IRQP_SET(r2, 0x4008700c, 0x1f21) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$SCSI_IOCTL_STOP_UNIT(r2, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x4d, 0x801) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40405515, &(0x7f0000000080)={0x3, 0x0, 0x1, 0x2, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9", 0x1}) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000140)={'bond_slave_0\x00', 0x5}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 03:39:21 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:21 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000136, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() 03:39:21 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/icmp\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 03:39:21 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x33b, 0x0, 0x0) 03:39:21 executing program 5: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000000)="153f6234488dd25d5c6070") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='loginuid\x00') write$cgroup_pid(r0, &(0x7f00000000c0), 0x1) [ 632.560195] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 632.566771] reason=80000021 qualification=0000000000000000 [ 632.573153] IDTVectoring: info=00000000 errcode=00000000 [ 632.578663] TSC Offset = 0xfffffeab11a9ea49 [ 632.582978] TPR Threshold = 0x00 [ 632.586329] EPT pointer = 0x000000018672a01e 03:39:21 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r0, 0x8912, &(0x7f0000000000)="153f6234488dd25d5c6070") r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='loginuid\x00') write$cgroup_pid(r1, &(0x7f00000000c0), 0x1) 03:39:22 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 632.713277] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:39:22 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/icmp\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) [ 632.781756] *** Guest State *** [ 632.798309] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 03:39:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000246, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() 03:39:22 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r0, 0x8912, &(0x7f0000000000)="153f6234488dd25d5c6070") r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='loginuid\x00') write$cgroup_pid(r1, &(0x7f00000000c0), 0x1) [ 632.838694] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 632.864518] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:39:22 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x35b, 0x0, 0x0) [ 632.897919] CR3 = 0x0000000000000000 [ 632.904939] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 632.939282] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 632.970198] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 633.017259] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 633.029207] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 633.037297] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 633.047030] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 633.056580] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 633.066627] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 633.075057] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 633.084630] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 633.096801] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 633.111529] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 633.119979] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 633.128494] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 633.154190] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 633.161951] Interruptibility = 00000000 ActivityState = 00000000 [ 633.168419] *** Host State *** [ 633.171736] RIP = 0xffffffff81212b2e RSP = 0xffff880185ba7350 [ 633.178113] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 633.184546] FSBase=00007f901f655700 GSBase=ffff8801dae00000 TRBase=fffffe0000034000 [ 633.192548] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 633.198573] CR0=0000000080050033 CR3=00000001c6eba000 CR4=00000000001426f0 [ 633.205733] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff87c013a0 [ 633.212473] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 633.218578] *** Control State *** [ 633.222036] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 633.228746] EntryControls=0000d1ff ExitControls=002fefff [ 633.234210] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 633.241242] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 633.247939] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 633.254505] reason=80000021 qualification=0000000000000000 [ 633.260928] IDTVectoring: info=00000000 errcode=00000000 03:39:22 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9", 0x1000000000000007}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:39:22 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:22 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r0, 0x8912, &(0x7f0000000000)="153f6234488dd25d5c6070") r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='loginuid\x00') write$cgroup_pid(r1, &(0x7f00000000c0), 0x1) 03:39:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001bc, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() 03:39:22 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500), 0x0, 0x0, &(0x7f0000000180)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/icmp\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 03:39:22 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x1f3, 0x0, 0x0) [ 633.266381] TSC Offset = 0xfffffeaab0e06100 [ 633.270751] TPR Threshold = 0x00 [ 633.274123] EPT pointer = 0x0000000187d5d01e 03:39:22 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000000)="153f6234488dd25d5c6070") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='loginuid\x00') write$cgroup_pid(r0, &(0x7f00000000c0), 0x1) 03:39:22 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500), 0x0, 0x0, &(0x7f0000000180)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/icmp\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) [ 633.417274] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 633.440226] *** Guest State *** [ 633.449366] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:39:22 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x100000000000002b, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() [ 633.466173] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 03:39:22 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000000)="153f6234488dd25d5c6070") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='loginuid\x00') write$cgroup_pid(r0, &(0x7f00000000c0), 0x1) [ 633.522516] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 03:39:22 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xd, 0x0, 0x0) [ 633.594965] CR3 = 0x0000000000000000 [ 633.610270] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 633.647861] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 633.670705] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 633.674091] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 633.688922] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 633.722536] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 633.794832] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 633.820033] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 633.828305] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 633.836350] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 633.848056] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 633.856206] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 633.865324] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 633.873701] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 633.881778] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 633.889830] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 633.896251] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 633.903790] Interruptibility = 00000000 ActivityState = 00000000 [ 633.910095] *** Host State *** [ 633.913295] RIP = 0xffffffff81212b2e RSP = 0xffff88018443f350 [ 633.919381] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 633.925795] FSBase=00007f901f655700 GSBase=ffff8801dae00000 TRBase=fffffe0000003000 [ 633.933681] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 633.939614] CR0=0000000080050033 CR3=00000001cdc58000 CR4=00000000001426f0 [ 633.946629] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87c013a0 [ 633.953742] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 633.959834] *** Control State *** [ 633.963273] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 633.969999] EntryControls=0000d1ff ExitControls=002fefff [ 633.975462] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 633.982433] VMEntry: intr_info=8000001e errcode=00000000 ilen=00000000 [ 633.989778] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 03:39:23 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) rt_sigqueueinfo(r4, 0x20, &(0x7f0000000100)={0x0, 0xfffffffffffffb35, 0xfffffffffffffac3, 0x5}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:39:23 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500), 0x0, 0x0, &(0x7f0000000180)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/icmp\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) [ 633.996347] reason=80000021 qualification=0000000000000000 [ 634.002781] IDTVectoring: info=00000000 errcode=00000000 [ 634.008296] TSC Offset = 0xfffffeaa56326d5a [ 634.012614] TPR Threshold = 0x00 [ 634.015967] EPT pointer = 0x000000018643a01e 03:39:23 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x100000000000018a, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() 03:39:23 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000000)="153f6234488dd25d5c6070") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='loginuid\x00') write$cgroup_pid(r0, &(0x7f00000000c0), 0x1) 03:39:23 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:23 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x2a8, 0x0, 0x0) 03:39:23 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 634.113165] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 634.133506] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 634.156462] *** Guest State *** 03:39:23 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r0, 0x0, &(0x7f0000000000)="153f6234488dd25d5c6070") r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='loginuid\x00') write$cgroup_pid(r1, &(0x7f00000000c0), 0x1) 03:39:23 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001e9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() [ 634.169568] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 634.208227] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 03:39:23 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000002580)}}], 0x1, 0x0, &(0x7f0000000180)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/icmp\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) [ 634.269996] CR3 = 0x0000000000000000 03:39:23 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x72, 0x0, 0x0) [ 634.302930] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 634.331055] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 634.331247] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 03:39:23 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 634.350078] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 634.370821] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 634.379095] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 634.431985] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 634.471821] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 634.509645] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 634.515859] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 634.526636] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 634.537863] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 634.551630] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 634.562641] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 634.595199] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 634.608928] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 634.617012] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 634.625399] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 634.632286] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 634.640135] Interruptibility = 00000000 ActivityState = 00000000 [ 634.646408] *** Host State *** [ 634.650625] RIP = 0xffffffff81212b2e RSP = 0xffff880185bcf350 [ 634.656605] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 634.663102] FSBase=00007f901f655700 GSBase=ffff8801daf00000 TRBase=fffffe0000003000 [ 634.670952] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 634.676836] CR0=0000000080050033 CR3=0000000186aa7000 CR4=00000000001426e0 [ 634.683925] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87c013a0 [ 634.690680] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 634.696768] *** Control State *** [ 634.700305] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 634.706973] EntryControls=0000d1ff ExitControls=002fefff 03:39:24 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) clock_gettime(0x0, &(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) chroot(&(0x7f0000000180)='./file0\x00') ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r4, 0x4c09, 0x2000) getpeername$inet(r4, &(0x7f0000000240)={0x2, 0x0, @remote}, &(0x7f00000002c0)=0x10) ioctl$sock_inet6_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000140)) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000280)) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$SG_SCSI_RESET(r4, 0x2284, 0x0) ioctl$KDGKBMODE(r4, 0x4b44, &(0x7f0000000000)) 03:39:24 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r0, 0x0, &(0x7f0000000000)="153f6234488dd25d5c6070") r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='loginuid\x00') write$cgroup_pid(r1, &(0x7f00000000c0), 0x1) [ 634.712499] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 634.719461] VMEntry: intr_info=8000001e errcode=00000000 ilen=00000000 [ 634.726117] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 634.732789] reason=80000021 qualification=0000000000000000 [ 634.739140] IDTVectoring: info=00000000 errcode=00000000 [ 634.744579] TSC Offset = 0xfffffea9f3f2ccf0 [ 634.748964] TPR Threshold = 0x00 [ 634.752343] EPT pointer = 0x00000001c79aa01e 03:39:24 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000002580)}}], 0x1, 0x0, &(0x7f0000000180)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/icmp\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 03:39:24 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000140, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() 03:39:24 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:24 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x102, 0x0, 0x0) 03:39:24 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 634.842012] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:39:24 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r0, 0x0, &(0x7f0000000000)="153f6234488dd25d5c6070") r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='loginuid\x00') write$cgroup_pid(r1, &(0x7f00000000c0), 0x1) [ 634.948862] *** Guest State *** 03:39:24 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000160, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() 03:39:24 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000002580)}}], 0x1, 0x0, &(0x7f0000000180)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/icmp\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 03:39:24 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 634.971506] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 634.978041] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 03:39:24 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x145, 0x0, 0x0) [ 635.019630] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 635.083670] CR3 = 0x0000000000000000 [ 635.103621] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 635.143276] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 635.143286] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 635.156517] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 635.193213] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 635.223705] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 635.251935] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 635.277860] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 635.297390] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 635.313702] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 635.332069] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 635.341205] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 635.349815] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 635.357879] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 635.365867] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 635.373932] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 635.380446] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 635.387982] Interruptibility = 00000000 ActivityState = 00000000 [ 635.394213] *** Host State *** [ 635.397398] RIP = 0xffffffff81212b2e RSP = 0xffff8801846e7350 [ 635.403454] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 635.409914] FSBase=00007f901f655700 GSBase=ffff8801dae00000 TRBase=fffffe0000034000 [ 635.417775] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 635.423671] CR0=0000000080050033 CR3=0000000184e5d000 CR4=00000000001426f0 [ 635.430756] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff87c013a0 [ 635.437428] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 635.443551] *** Control State *** [ 635.447040] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 635.453789] EntryControls=0000d1ff ExitControls=002fefff [ 635.459308] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 635.466234] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 635.472958] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 635.479613] reason=80000021 qualification=0000000000000000 [ 635.485927] IDTVectoring: info=00000000 errcode=00000000 [ 635.491442] TSC Offset = 0xfffffea9886e571a [ 635.495809] TPR Threshold = 0x00 [ 635.499281] EPT pointer = 0x00000001cd38901e [ 635.513701] *** Guest State *** [ 635.517551] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 635.526569] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 635.535481] CR3 = 0x0000000000000000 [ 635.539608] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 635.545572] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 635.551642] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 635.559459] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 635.567459] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 635.567481] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 635.567498] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 635.583574] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 635.583595] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 635.583610] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 635.615765] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 635.623832] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 635.631878] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 635.639916] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 635.646344] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 635.653887] Interruptibility = 00000000 ActivityState = 00000000 [ 635.660155] *** Host State *** [ 635.663392] RIP = 0xffffffff81212b2e RSP = 0xffff88017ea8f350 [ 635.669458] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 635.675870] FSBase=00007f901f633700 GSBase=ffff8801dae00000 TRBase=fffffe0000003000 [ 635.683727] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 635.690188] CR0=0000000080050033 CR3=0000000184e5d000 CR4=00000000001426f0 [ 635.697209] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87c013a0 [ 635.703935] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 635.710046] *** Control State *** [ 635.713526] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 635.720242] EntryControls=0000d1ff ExitControls=002fefff [ 635.725711] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 635.732687] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 635.739402] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 635.745975] reason=80000021 qualification=0000000000000000 03:39:25 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:39:25 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r0, 0x8912, &(0x7f0000000000)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='loginuid\x00') write$cgroup_pid(r1, &(0x7f00000000c0), 0x1) 03:39:25 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:25 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000200)='net/icmp\x00') preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x0) 03:39:25 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000071, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() 03:39:25 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x298, 0x0, 0x0) [ 635.752342] IDTVectoring: info=00000000 errcode=00000000 [ 635.757820] TSC Offset = 0xfffffea9392a580e [ 635.762169] TPR Threshold = 0x00 [ 635.765540] EPT pointer = 0x000000017a81301e 03:39:25 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x381, 0x0, 0x0) [ 635.876859] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 635.919914] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 635.944722] *** Guest State *** 03:39:25 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(r0, &(0x7f00000016c0)={&(0x7f0000000040)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000000100), 0x0, &(0x7f00000011c0)=[{0x10, 0x1}], 0x10}, 0x0) 03:39:25 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000279, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() [ 635.965509] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 03:39:25 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r0, 0x8912, &(0x7f0000000000)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='loginuid\x00') write$cgroup_pid(r1, &(0x7f00000000c0), 0x1) [ 636.007399] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 636.041631] CR3 = 0x0000000000000000 03:39:25 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 636.055252] RSP = 0x0000000000000000 RIP = 0x0000000000000000 03:39:25 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x6, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000001c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x0, "1933b7ab6710b5ea3d89e791f2abaa48f81177ec63f6c8c58c53a5f2481b06c67b2e3c22736dbd926a98c748150311a4199a3202cc5b8743291c19b9266cb9ec7339a3302c78fc31e39b654b2fb113f0"}, 0xd8) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfffffe0e) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)) [ 636.119352] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 636.157682] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 636.179963] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 636.198764] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 636.230106] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 636.232941] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 636.257391] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 636.284453] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 636.307941] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 636.316123] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 636.329856] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 636.339124] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 636.347237] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 636.355768] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 636.364481] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 636.371380] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 636.379410] Interruptibility = 00000000 ActivityState = 00000000 [ 636.385752] *** Host State *** [ 636.389436] RIP = 0xffffffff81212b2e RSP = 0xffff8801814a7350 [ 636.395533] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 636.402422] FSBase=00007f901f655700 GSBase=ffff8801dae00000 TRBase=fffffe0000034000 [ 636.410641] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 636.416646] CR0=0000000080050033 CR3=00000001b701c000 CR4=00000000001426f0 [ 636.424148] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff87c013a0 [ 636.431378] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 636.437541] *** Control State *** [ 636.441450] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 636.448561] EntryControls=0000d1ff ExitControls=002fefff [ 636.454125] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 636.461602] VMEntry: intr_info=8000001e errcode=00000000 ilen=00000000 [ 636.468676] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 636.475381] reason=80000021 qualification=0000000000000000 [ 636.482149] IDTVectoring: info=00000000 errcode=00000000 [ 636.488172] TSC Offset = 0xfffffea8fef4a3f0 [ 636.492599] TPR Threshold = 0x00 [ 636.496087] EPT pointer = 0x00000001b3d4d01e [ 636.538022] *** Guest State *** [ 636.541371] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 636.551059] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 636.564118] CR3 = 0x0000000000000000 [ 636.568432] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 636.574623] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 636.581436] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 636.588673] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 636.596972] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 636.606887] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 636.616712] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 636.625315] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 636.635158] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 636.643827] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 636.652427] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 636.660992] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 636.669560] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 636.678018] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 636.684704] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 636.692798] Interruptibility = 00000000 ActivityState = 00000000 [ 636.700025] *** Host State *** [ 636.703453] RIP = 0xffffffff81212b2e RSP = 0xffff880182067350 [ 636.710002] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 636.716623] FSBase=00007f901f612700 GSBase=ffff8801dae00000 TRBase=fffffe0000003000 [ 636.725171] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 636.731596] CR0=0000000080050033 CR3=00000001b701c000 CR4=00000000001426f0 [ 636.739188] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87c013a0 [ 636.746141] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 636.752714] *** Control State *** [ 636.756403] PinBased=0000003f CPUBased=b5a06dfe SecondaryExec=000000c3 [ 636.764904] EntryControls=0000d1ff ExitControls=002fefff [ 636.771621] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 636.779009] VMEntry: intr_info=8000001e errcode=00000000 ilen=00000000 03:39:26 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000440)='/dev/full\x00', 0x80080, 0x0) write$P9_RSTAT(r4, &(0x7f0000000540)={0x4b, 0x7d, 0x2, {0x0, 0x44, 0x5e, 0xfff, {0x2, 0x3, 0x2}, 0x800000, 0x52, 0x6, 0x2a4, 0x2, '-{', 0x5, 'nossd', 0x4, 'eth1', 0x6, 'btrfs\x00'}}, 0x4b) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) prctl$getreaper(0x19, &(0x7f0000000080)) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000340)={'bpq0\x00', 0xfffffffffffffff8}) syz_mount_image$btrfs(&(0x7f0000000100)='btrfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000240)="0de87bbfc6c3ea1c5394fc40d23ccbedab35a291f727bfed56fa5b5154635c184803aff3e3e1406b48a23c722eec62a7d22cbdcfa12d7a602ef1cd63da06f2ff3e73951352a14909718719ce13e673a64cd60cfeaffdefb7581b6c0ec8bce0535f042927ad4b87d55c5213f021e7d039493085102cb35e41a4aeac77c651ddaed23793bdb471c6373ab05c41d730c975f8713933fb0838c221346100f95841c9c99ab114fca97bbb5de0707bcd72b9f164a1ccf43db6f3eb1cd6707814c6b7dde7e73984cddfe17563551a0959a30d6c787241fa30c5d3", 0xd7, 0xfff}], 0x20, &(0x7f00000003c0)={[{@noautodefrag='noautodefrag'}, {@nossd='nossd'}, {@space_cache='space_cache'}, {@datacow='datacow'}], [{@smackfshat={'smackfshat', 0x3d, "70707031707070315d248d2d292e7365637572697479"}}]}) 03:39:26 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x100000000000019e, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() 03:39:26 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x22a, 0x0, 0x0) 03:39:26 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r0, 0x8912, &(0x7f0000000000)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='loginuid\x00') write$cgroup_pid(r1, &(0x7f00000000c0), 0x1) 03:39:26 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 636.785938] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 636.793019] reason=80000021 qualification=0000000000000000 [ 636.799875] IDTVectoring: info=00000000 errcode=00000000 [ 636.805533] TSC Offset = 0xfffffea8fef4a3f0 [ 636.810446] TPR Threshold = 0x00 [ 636.814005] EPT pointer = 0x00000001b3d4d01e 03:39:26 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:26 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r0, 0x8912, &(0x7f0000000000)="153f6234488d") r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='loginuid\x00') write$cgroup_pid(r1, &(0x7f00000000c0), 0x1) [ 636.924657] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 636.952572] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:39:26 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x100000000000007e, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() [ 637.060557] *** Guest State *** [ 637.065195] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 03:39:26 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x21a, 0x0, 0x0) [ 637.125007] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 637.148688] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 03:39:26 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 637.171105] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 637.194671] CR3 = 0x0000000000000000 03:39:26 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r0, 0x8912, &(0x7f0000000000)="153f6234488d") r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='loginuid\x00') write$cgroup_pid(r1, &(0x7f00000000c0), 0x1) 03:39:26 executing program 1: [ 637.216456] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 637.239905] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 637.253993] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 637.279685] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 637.322661] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 637.339640] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 637.359834] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 637.367818] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 637.399808] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 637.430999] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 637.455619] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 637.472021] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 637.480983] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 637.489192] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 637.497191] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 637.505258] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 637.511834] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 637.519379] Interruptibility = 00000000 ActivityState = 00000000 [ 637.525610] *** Host State *** [ 637.528924] RIP = 0xffffffff81212b2e RSP = 0xffff88018848f350 [ 637.534935] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 637.541849] FSBase=00007f901f655700 GSBase=ffff8801daf00000 TRBase=fffffe0000003000 [ 637.550371] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 637.556253] CR0=0000000080050033 CR3=00000001c889e000 CR4=00000000001426e0 [ 637.563336] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87c013a0 [ 637.570043] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 637.576108] *** Control State *** [ 637.579601] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 637.586276] EntryControls=0000d1ff ExitControls=002fefff [ 637.591791] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 637.598752] VMEntry: intr_info=8000001e errcode=00000000 ilen=00000000 [ 637.605406] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 637.612031] reason=80000021 qualification=0000000000000000 [ 637.618386] IDTVectoring: info=00000000 errcode=00000000 [ 637.623839] TSC Offset = 0xfffffea868a05a68 [ 637.628199] TPR Threshold = 0x00 [ 637.631569] EPT pointer = 0x0000000185bee01e [ 637.678038] *** Guest State *** [ 637.681368] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 637.690533] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 637.700148] CR3 = 0x0000000000000000 [ 637.703901] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 637.709987] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 637.715999] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 637.722880] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 637.730931] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 637.739014] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 637.746995] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 637.755073] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 637.763098] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 637.771148] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 637.779168] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 637.787128] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 637.795272] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 637.803287] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 637.809768] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 637.817224] Interruptibility = 00000000 ActivityState = 00000000 [ 637.823506] *** Host State *** [ 637.826712] RIP = 0xffffffff81212b2e RSP = 0xffff88017ea8f350 [ 637.832739] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 637.839205] FSBase=00007f901f612700 GSBase=ffff8801daf00000 TRBase=fffffe0000034000 [ 637.847007] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 637.852945] CR0=0000000080050033 CR3=00000001c889e000 CR4=00000000001426e0 [ 637.860044] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff87c013a0 [ 637.866756] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 637.872849] *** Control State *** [ 637.876306] PinBased=0000003f CPUBased=b5a06dfe SecondaryExec=000000c3 [ 637.883012] EntryControls=0000d1ff ExitControls=002fefff [ 637.888502] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 637.895437] VMEntry: intr_info=8000001e errcode=00000000 ilen=00000000 [ 637.902190] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 637.908807] reason=80000021 qualification=0000000000000000 [ 637.915119] IDTVectoring: info=00000000 errcode=00000000 [ 637.920603] TSC Offset = 0xfffffea868a05a68 [ 637.924927] TPR Threshold = 0x00 03:39:27 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/mixer\x00', 0x10001, 0x0) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000280)=@req={0x5d8, 0x1, 0x2, 0x200}, 0x10) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x1000000000000], 0x0, 0x1a200}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f00000002c0)={0x1, 0x7, [@remote, @random="e0ec4d75ecab", @empty, @dev={[], 0x21}, @remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}]}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2f, "73797a300000000000000000000000000000000000000000000000000000000000000000000e00", 0x200000}) getsockname$llc(r1, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000140)=0x10) ioctl$KVM_KVMCLOCK_CTRL(r4, 0xaead) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0x0, 0x0, @msi={0x0, 0xdf5, 0xffffffff}}]}) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:39:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000178, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() 03:39:27 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:27 executing program 1: 03:39:27 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r0, 0x8912, &(0x7f0000000000)="153f6234488d") r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='loginuid\x00') write$cgroup_pid(r1, &(0x7f00000000c0), 0x1) 03:39:27 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x2a3, 0x0, 0x0) [ 637.928332] EPT pointer = 0x0000000185bee01e 03:39:27 executing program 1: 03:39:27 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r0, 0x8912, &(0x7f0000000000)="153f6234488dd25d5c") r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='loginuid\x00') write$cgroup_pid(r1, &(0x7f00000000c0), 0x1) [ 638.006897] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:39:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x100000000000015a, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() 03:39:27 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 638.049015] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:39:27 executing program 1: 03:39:27 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x165, 0x0, 0x0) 03:39:27 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) getpgid(r4) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:39:27 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r0, 0x8912, &(0x7f0000000000)="153f6234488dd25d5c") r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='loginuid\x00') write$cgroup_pid(r1, &(0x7f00000000c0), 0x1) 03:39:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000163, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() 03:39:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x10000000000000f3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() 03:39:27 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r0, 0x8912, &(0x7f0000000000)="153f6234488dd25d5c") r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='loginuid\x00') write$cgroup_pid(r1, &(0x7f00000000c0), 0x1) [ 638.431769] *** Guest State *** [ 638.441408] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:39:27 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:27 executing program 1: [ 638.474487] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 03:39:27 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x2b3, 0x0, 0x0) [ 638.521021] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 638.555039] CR3 = 0x0000000000000000 [ 638.566741] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 638.584108] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 638.602630] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 638.610439] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 03:39:27 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:27 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r0, 0x8912, &(0x7f0000000000)="153f6234488dd25d5c60") r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='loginuid\x00') write$cgroup_pid(r1, &(0x7f00000000c0), 0x1) 03:39:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000003, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() [ 638.627981] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 03:39:28 executing program 1: [ 638.682657] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 638.714432] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 638.720701] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 638.760159] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 638.794884] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 638.818814] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 638.827015] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 638.843423] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 638.863965] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 638.886559] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 638.895955] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 638.906711] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 638.920179] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 638.927909] Interruptibility = 00000000 ActivityState = 00000000 [ 638.934268] *** Host State *** [ 638.937504] RIP = 0xffffffff81212b2e RSP = 0xffff880183477350 [ 638.943609] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 638.950090] FSBase=00007f901f655700 GSBase=ffff8801dae00000 TRBase=fffffe0000003000 [ 638.958041] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 638.963942] CR0=0000000080050033 CR3=0000000188af0000 CR4=00000000001426f0 [ 638.971055] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87c013a0 [ 638.977781] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 638.983835] *** Control State *** [ 638.987308] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 638.994824] EntryControls=0000d1ff ExitControls=002fefff [ 639.000337] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 639.007286] VMEntry: intr_info=8000001e errcode=00000000 ilen=00000000 [ 639.014032] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 03:39:28 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x141000, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000000)={0x10002, 0x0, &(0x7f0000c00000/0x400000)=nil}) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000100)={0x100000001, 0x456, 0x7, 0x2}) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 03:39:28 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:28 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r0, 0x8912, &(0x7f0000000000)="153f6234488dd25d5c60") r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='loginuid\x00') write$cgroup_pid(r1, &(0x7f00000000c0), 0x1) 03:39:28 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl(r0, 0x8912, &(0x7f00000002c0)="153f6234488dd25d766070") mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c832, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x21, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2}}}, 0x84) [ 639.020667] reason=80000021 qualification=0000000000000000 [ 639.026987] IDTVectoring: info=00000000 errcode=00000000 [ 639.032483] TSC Offset = 0xfffffea7ac0b9170 [ 639.036804] TPR Threshold = 0x00 [ 639.040214] EPT pointer = 0x00000001b81c501e 03:39:28 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000122, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() 03:39:28 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x4f, 0x0, 0x0) 03:39:28 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 639.108931] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 639.123372] audit: type=1400 audit(2000000368.407:116): avc: denied { map } for pid=542 comm="syz-executor1" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=116183 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:hugetlbfs_t:s0 tclass=file permissive=1 03:39:28 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r0, 0x8912, &(0x7f0000000000)="153f6234488dd25d5c60") r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='loginuid\x00') write$cgroup_pid(r1, &(0x7f00000000c0), 0x1) 03:39:28 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000233, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() [ 639.197339] *** Guest State *** [ 639.211167] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 03:39:28 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) 03:39:28 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xce, 0x0, 0x0) [ 639.262781] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 639.278179] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:39:28 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 639.329533] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 639.338918] CR3 = 0x0000000000000000 [ 639.348214] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 639.371588] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 639.395371] input:  as /devices/virtual/input/input11 [ 639.408025] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 639.446477] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 639.456475] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 639.476270] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 639.490292] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 639.563590] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 639.588532] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 639.597603] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 639.607420] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 639.623166] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 639.636801] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 639.646428] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 639.656206] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 639.671478] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 639.680488] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 639.688066] Interruptibility = 00000000 ActivityState = 00000000 [ 639.694305] *** Host State *** [ 639.697488] RIP = 0xffffffff81212b2e RSP = 0xffff880183477350 [ 639.703919] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 639.710404] FSBase=00007f901f655700 GSBase=ffff8801daf00000 TRBase=fffffe0000003000 [ 639.718291] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 639.724176] CR0=0000000080050033 CR3=0000000182166000 CR4=00000000001426e0 [ 639.731282] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87c013a0 [ 639.738077] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 639.744122] *** Control State *** [ 639.747560] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 639.754314] EntryControls=0000d1ff ExitControls=002fefff [ 639.759814] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 03:39:29 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:39:29 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r0, 0x8912, &(0x7f0000000000)="153f6234488dd25d5c6070") syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='loginuid\x00') write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0), 0x1) 03:39:29 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x1a8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001e1, 0x4c000000) openat$vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vsock\x00', 0x8008000003fff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in=@loopback, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000500)=0xe8) fchown(0xffffffffffffffff, r1, 0x0) 03:39:29 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x10b, 0x0, 0x0) 03:39:29 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000014, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() [ 639.766731] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 639.774207] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 639.781063] reason=80000021 qualification=0000000000000000 [ 639.787390] IDTVectoring: info=00000000 errcode=00000000 [ 639.792906] TSC Offset = 0xfffffea7415bb18a [ 639.797242] TPR Threshold = 0x00 [ 639.800684] EPT pointer = 0x00000001c368701e [ 639.931960] *** Guest State *** [ 639.935290] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 639.963588] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 03:39:29 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:29 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x237, 0x0, 0x0) 03:39:29 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0x40286608, &(0x7f0000000440)={0x2000000000000157, &(0x7f0000000400)}) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) getsockname(0xffffffffffffffff, &(0x7f0000000640)=@ax25, &(0x7f0000000800)=0x80) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140), &(0x7f0000000080)=0xc) r1 = accept(0xffffffffffffffff, &(0x7f0000007ec0)=@can, &(0x7f0000007f40)=0x80) sendmmsg(0xffffffffffffffff, &(0x7f000000a7c0), 0x0, 0x8000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000180)=0x9, 0x4) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote, [0x3f000000, 0x706, 0x0, 0x0, 0x0, 0x0, 0x6c000000]}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80389}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x9, 0x60}}], 0x48}, 0x0) [ 639.979944] CR3 = 0x0000000000000000 [ 639.988257] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 639.994383] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 640.000535] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 640.007299] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 640.015503] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 640.023655] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 03:39:29 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 640.058205] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 640.065651] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 640.076187] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 03:39:29 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0x40286608, &(0x7f0000000440)={0x2000000000000157, &(0x7f0000000400)}) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) getsockname(0xffffffffffffffff, &(0x7f0000000640)=@ax25, &(0x7f0000000800)=0x80) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140), &(0x7f0000000080)=0xc) r1 = accept(0xffffffffffffffff, &(0x7f0000007ec0)=@can, &(0x7f0000007f40)=0x80) sendmmsg(0xffffffffffffffff, &(0x7f000000a7c0), 0x0, 0x8000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000180)=0x9, 0x4) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote, [0x3f000000, 0x706, 0x0, 0x0, 0x0, 0x0, 0x6c000000]}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80389}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x9, 0x60}}], 0x48}, 0x0) [ 640.110434] rdma_op 00000000123834c7 conn xmit_rdma (null) [ 640.112772] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 03:39:29 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000221, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() [ 640.171806] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 640.199825] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:39:29 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0xfffffffffffffffe, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)='^'}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0xc, 0x0, &(0x7f0000000380)=[@dead_binder_done], 0x0, 0x0, &(0x7f0000000480)}) [ 640.217083] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 640.264580] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 640.284668] rdma_op 00000000bd625b93 conn xmit_rdma (null) [ 640.319852] binder_alloc: 7658: binder_alloc_buf, no vma [ 640.325627] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 640.336320] binder: 646:647 transaction failed 29189/-3, size 0-0 line 2970 [ 640.347591] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 640.356959] binder: 646:647 ERROR: BC_REGISTER_LOOPER called without request [ 640.365377] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 640.384743] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 640.387105] binder_alloc: 7658: binder_alloc_buf, no vma [ 640.392860] Interruptibility = 00000000 ActivityState = 00000000 [ 640.404647] *** Host State *** [ 640.408501] RIP = 0xffffffff81212b2e RSP = 0xffff88017ea8f350 [ 640.414665] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 640.428128] binder: 646:647 ERROR: BC_REGISTER_LOOPER called without request [ 640.439100] binder: undelivered TRANSACTION_ERROR: 29189 [ 640.439752] binder: 646:650 transaction failed 29189/-3, size 0-0 line 2970 [ 640.450497] FSBase=00007f901f655700 GSBase=ffff8801dae00000 TRBase=fffffe0000034000 [ 640.473431] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 640.474488] binder: undelivered TRANSACTION_ERROR: 29189 [ 640.479992] CR0=0000000080050033 CR3=0000000188bae000 CR4=00000000001426f0 [ 640.492844] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff87c013a0 [ 640.510294] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 640.516543] *** Control State *** [ 640.520225] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 640.527061] EntryControls=0000d1ff ExitControls=002fefff [ 640.532699] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 640.539804] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 640.546574] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 640.553530] reason=80000021 qualification=0000000000000000 [ 640.561068] IDTVectoring: info=00000000 errcode=00000000 [ 640.566637] TSC Offset = 0xfffffea6db64fb40 [ 640.571427] TPR Threshold = 0x00 [ 640.574795] EPT pointer = 0x00000001d4e7e01e [ 640.617947] *** Guest State *** [ 640.621268] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 640.630260] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 640.639202] CR3 = 0x0000000000000000 [ 640.642923] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 640.642937] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 640.642953] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 640.642971] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 640.655002] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 640.655030] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 640.685874] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 640.693953] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 640.702211] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 640.710291] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 640.718343] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 640.726310] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 640.734463] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 640.742474] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 640.748960] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 640.756431] Interruptibility = 00000000 ActivityState = 00000000 [ 640.762726] *** Host State *** [ 640.765933] RIP = 0xffffffff81212b2e RSP = 0xffff880182fcf350 [ 640.772014] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 640.778499] FSBase=00007f901f612700 GSBase=ffff8801daf00000 TRBase=fffffe0000034000 [ 640.786333] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 640.792303] CR0=0000000080050033 CR3=0000000188bae000 CR4=00000000001426e0 [ 640.799362] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff87c013a0 [ 640.806020] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 640.812127] *** Control State *** [ 640.815600] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 640.822309] EntryControls=0000d1ff ExitControls=002fefff [ 640.827815] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 640.834740] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 640.841452] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 640.848093] reason=80000021 qualification=0000000000000000 [ 640.854411] IDTVectoring: info=00000000 errcode=00000000 [ 640.859902] TSC Offset = 0xfffffea6db64fb40 [ 640.864226] TPR Threshold = 0x00 03:39:30 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000100)) 03:39:30 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:30 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x34b, 0x0, 0x0) 03:39:30 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:30 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0x40286608, &(0x7f0000000440)={0x2000000000000157, &(0x7f0000000400)}) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) getsockname(0xffffffffffffffff, &(0x7f0000000640)=@ax25, &(0x7f0000000800)=0x80) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140), &(0x7f0000000080)=0xc) r1 = accept(0xffffffffffffffff, &(0x7f0000007ec0)=@can, &(0x7f0000007f40)=0x80) sendmmsg(0xffffffffffffffff, &(0x7f000000a7c0), 0x0, 0x8000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000180)=0x9, 0x4) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote, [0x3f000000, 0x706, 0x0, 0x0, 0x0, 0x0, 0x6c000000]}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80389}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x9, 0x60}}], 0x48}, 0x0) 03:39:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001f0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() [ 640.867578] EPT pointer = 0x00000001d4e7e01e 03:39:30 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='loginuid\x00') write$cgroup_pid(r0, &(0x7f00000000c0), 0x1) 03:39:30 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 640.919818] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 640.938243] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 640.949785] rdma_op 00000000418e6a83 conn xmit_rdma (null) 03:39:30 executing program 5: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0x40286608, &(0x7f0000000440)={0x2000000000000157, &(0x7f0000000400)}) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) getsockname(0xffffffffffffffff, &(0x7f0000000640)=@ax25, &(0x7f0000000800)=0x80) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140), &(0x7f0000000080)=0xc) r1 = accept(0xffffffffffffffff, &(0x7f0000007ec0)=@can, &(0x7f0000007f40)=0x80) sendmmsg(0xffffffffffffffff, &(0x7f000000a7c0), 0x0, 0x8000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000180)=0x9, 0x4) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote, [0x3f000000, 0x706, 0x0, 0x0, 0x0, 0x0, 0x6c000000]}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80389}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x9, 0x60}}], 0x48}, 0x0) 03:39:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000085, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() 03:39:30 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='loginuid\x00') write$cgroup_pid(r0, &(0x7f00000000c0), 0x1) [ 641.104378] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 641.128236] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:39:30 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3}) [ 641.152558] rdma_op 00000000266548d8 conn xmit_rdma (null) 03:39:30 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:39:30 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:30 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x189, 0x0, 0x0) 03:39:30 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='loginuid\x00') write$cgroup_pid(r0, &(0x7f00000000c0), 0x1) 03:39:30 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:30 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3}) [ 641.275582] vhci_hcd: invalid port number 0 [ 641.283993] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 641.313090] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:39:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x100000000000011b, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() 03:39:30 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3}) [ 641.531023] vhci_hcd: invalid port number 0 [ 641.531105] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 641.570393] *** Guest State *** 03:39:30 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0), 0x1) [ 641.573735] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 641.584335] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 641.602565] CR3 = 0x0000000000000000 [ 641.610078] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 641.616233] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 03:39:30 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:30 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0xa3}) 03:39:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000048, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() [ 641.625177] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 641.633849] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 641.638454] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 641.659145] vhci_hcd: invalid port number 0 [ 641.665738] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 641.716841] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 641.744463] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 641.758999] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 641.803448] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 641.809832] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 641.828817] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 641.850713] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 641.859519] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 641.867631] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 641.876811] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 641.885232] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 641.892568] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 641.900102] Interruptibility = 00000000 ActivityState = 00000000 [ 641.906339] *** Host State *** [ 641.909713] RIP = 0xffffffff81212b2e RSP = 0xffff880188d07350 [ 641.915703] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 641.922189] FSBase=00007f901f655700 GSBase=ffff8801dae00000 TRBase=fffffe0000003000 [ 641.930041] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 641.935923] CR0=0000000080050033 CR3=00000001841f1000 CR4=00000000001426f0 [ 641.943099] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87c013a0 [ 641.949890] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 641.955956] *** Control State *** [ 641.959519] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 641.966233] EntryControls=0000d1ff ExitControls=002fefff [ 641.971787] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 641.978768] VMEntry: intr_info=8000001e errcode=00000000 ilen=00000000 [ 641.985477] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 641.992122] reason=80000021 qualification=0000000000000000 [ 641.998544] IDTVectoring: info=00000000 errcode=00000000 03:39:31 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x290, 0x0, 0x0) 03:39:31 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3}) 03:39:31 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='loginuid\x00') write$cgroup_pid(r0, &(0x7f00000000c0), 0x1) 03:39:31 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 642.004007] TSC Offset = 0xfffffea6041b833a [ 642.008395] TPR Threshold = 0x00 [ 642.011783] EPT pointer = 0x00000001c827101e 03:39:31 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x10000000000000e9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() 03:39:31 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) r4 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) r5 = fcntl$dupfd(r2, 0x406, r1) ioctl$TUNSETNOCSUM(r5, 0x400454c8, 0x0) write$binfmt_elf32(r1, &(0x7f0000000540)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x8000, 0xa53d, 0x4, 0x73, 0x2, 0x3e, 0x4, 0x21, 0x38, 0x3e8, 0x7, 0x5cd6, 0x20, 0x2, 0x5, 0x3, 0x3}, [{0x7474e557, 0xe8, 0x8, 0x0, 0x3, 0x2, 0x52e, 0xfffffffffffffffc}, {0x6474e553, 0x2, 0x7, 0x100, 0x20, 0x6, 0x4, 0x4}], "2c23530eed8ae1e7a6c7c7d4d82c75873f", [[], [], [], [], [], [], [], [], []]}, 0x989) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) signalfd(r0, &(0x7f0000000080)={0x5}, 0x8) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:39:31 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:31 executing program 1: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='loginuid\x00') write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0), 0x1) [ 642.100821] vhci_hcd: invalid port number 0 [ 642.106013] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 642.127865] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:39:31 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3}) 03:39:31 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000106, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() [ 642.182839] *** Guest State *** [ 642.195499] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 642.244199] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 642.260472] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:39:31 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:31 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x7000000}) 03:39:31 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x63, 0x0, 0x0) [ 642.298793] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 642.309113] CR3 = 0x0000000000000000 [ 642.322309] vhci_hcd: invalid port number 0 [ 642.331633] RSP = 0x0000000000000000 RIP = 0x0000000000000000 03:39:31 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x10000000000000de, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() 03:39:31 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3}) [ 642.368559] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 642.393956] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 03:39:31 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 642.432584] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 642.445810] vhci_hcd: invalid port number 0 [ 642.454786] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 642.466674] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:39:31 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x7000000}) [ 642.510568] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 642.564257] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 642.596718] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 642.615049] vhci_hcd: invalid port number 0 [ 642.617361] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 642.631388] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 642.631603] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 642.667999] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 642.676213] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 642.688627] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 642.704134] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 642.712584] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 642.720972] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 642.727401] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 642.735365] Interruptibility = 00000000 ActivityState = 00000000 [ 642.741694] *** Host State *** [ 642.744898] RIP = 0xffffffff81212b2e RSP = 0xffff8801815c7350 [ 642.750961] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 642.757376] FSBase=00007f901f655700 GSBase=ffff8801daf00000 TRBase=fffffe0000003000 [ 642.765252] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 642.771205] CR0=0000000080050033 CR3=00000001bf401000 CR4=00000000001426e0 [ 642.778295] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87c013a0 [ 642.784989] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 642.791084] *** Control State *** [ 642.794553] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 642.801984] EntryControls=0000d1ff ExitControls=002fefff [ 642.807435] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 642.814402] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 642.821131] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 642.827761] reason=80000021 qualification=0000000000000000 [ 642.834088] IDTVectoring: info=00000000 errcode=00000000 [ 642.839588] TSC Offset = 0xfffffea5aa2eaa0c [ 642.843912] TPR Threshold = 0x00 [ 642.847268] EPT pointer = 0x00000001c2dc401e 03:39:32 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x40000, 0x0) 03:39:32 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3}) 03:39:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x10000000000000e1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() 03:39:32 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x9, 0x0, 0x0) 03:39:32 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty=0x6c000000, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:32 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x7000000}) 03:39:32 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0xa3}) 03:39:32 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty=0x6000000, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 642.978685] IPVS: set_ctl: invalid protocol: 0 108.0.0.0:20002 [ 643.010047] vhci_hcd: invalid port number 0 03:39:32 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)) 03:39:32 executing program 1: ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0xa3, 0x7000000}) 03:39:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000018, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() 03:39:32 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x32d, 0x0, 0x0) [ 643.133046] IPVS: set_ctl: invalid protocol: 0 6.0.0.0:20002 [ 643.191959] IPVS: set_ctl: invalid protocol: 0 6.0.0.0:20002 [ 643.200265] *** Guest State *** [ 643.203572] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 643.226896] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 643.233447] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 643.253000] CR3 = 0x0000000000000000 [ 643.262279] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 643.273259] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 643.279554] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 643.296712] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 643.328253] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 643.340982] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 643.359872] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 643.368379] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 643.383713] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 643.401811] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 643.410346] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 643.418790] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 643.426861] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 643.435047] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 643.441689] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 643.450219] Interruptibility = 00000000 ActivityState = 00000000 [ 643.456474] *** Host State *** [ 643.459766] RIP = 0xffffffff81212b2e RSP = 0xffff880180447350 [ 643.465755] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 643.472222] FSBase=00007f901f655700 GSBase=ffff8801daf00000 TRBase=fffffe0000003000 [ 643.480082] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 643.485979] CR0=0000000080050033 CR3=00000001c6fa0000 CR4=00000000001426e0 [ 643.493076] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87c013a0 [ 643.499799] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 643.505858] *** Control State *** [ 643.509394] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 643.516073] EntryControls=0000d1ff ExitControls=002fefff [ 643.521592] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 03:39:32 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup3(r0, r2, 0x80000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000, 0xffffffffffffff9c}) ioctl$SG_SET_FORCE_PACK_ID(r3, 0x227b, &(0x7f0000000180)=0x1) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000140)={r4, 0x80000, r5}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000300)={0x4, 0x0, [{0xbae, 0x0, 0x7}, {0xc0000b9e, 0x0, 0x40}, {0xb5a, 0x0, 0x8}, {0x812, 0x0, 0x80}]}) getresgid(&(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0)) setfsgid(r7) 03:39:32 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x11c, 0x0, 0x0) 03:39:32 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)) 03:39:32 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty=0x1100, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:32 executing program 1: ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0xa3, 0x7000000}) 03:39:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x10000000000000cb, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() [ 643.528556] VMEntry: intr_info=8000001e errcode=00000000 ilen=00000000 [ 643.535208] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 643.542340] reason=80000021 qualification=0000000000000000 [ 643.548745] IDTVectoring: info=00000000 errcode=00000000 [ 643.554220] TSC Offset = 0xfffffea520237db4 [ 643.558582] TPR Threshold = 0x00 [ 643.561951] EPT pointer = 0x000000017a85801e 03:39:32 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)) 03:39:32 executing program 1: ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0xa3, 0x7000000}) [ 643.648607] IPVS: set_ctl: invalid protocol: 0 0.0.17.0:20002 [ 643.660715] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 643.663540] IPVS: set_ctl: invalid protocol: 0 0.0.17.0:20002 03:39:33 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty=0x4c00, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000144, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() 03:39:33 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = accept(0xffffffffffffffff, &(0x7f0000000300)=@nfc, &(0x7f0000000040)=0x80) getsockopt$inet_buf(r1, 0x0, 0x9, 0x0, &(0x7f00000000c0)) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) fcntl$getown(r0, 0x9) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/icmp\x00') preadv(r2, &(0x7f0000000480), 0x10000000000002a1, 0x0) 03:39:33 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x7000000}) [ 643.801521] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 643.816389] *** Guest State *** [ 643.829852] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 643.830900] IPVS: set_ctl: invalid protocol: 0 0.0.76.0:20002 [ 643.878741] IPVS: set_ctl: invalid protocol: 0 0.0.76.0:20002 [ 643.904792] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 643.942701] CR3 = 0x0000000000000000 [ 643.955110] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 643.968644] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 643.991226] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 644.001121] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 644.033405] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 644.049423] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 644.068757] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 644.076870] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 644.085087] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 644.093255] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 644.101802] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 644.111943] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 644.120368] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 644.128706] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 644.135231] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 644.142942] Interruptibility = 00000000 ActivityState = 00000000 [ 644.149243] *** Host State *** [ 644.152446] RIP = 0xffffffff81212b2e RSP = 0xffff88017fb6f350 [ 644.158652] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 644.165078] FSBase=00007f901f655700 GSBase=ffff8801dae00000 TRBase=fffffe0000034000 [ 644.172974] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 644.179138] CR0=0000000080050033 CR3=00000001c159d000 CR4=00000000001426f0 [ 644.186152] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff87c013a0 [ 644.192905] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 644.199042] *** Control State *** [ 644.202528] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 644.209272] EntryControls=0000d1ff ExitControls=002fefff [ 644.214753] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 644.221763] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 03:39:33 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000a00)=ANY=[@ANYRESDEC=r1, @ANYRES32, @ANYPTR=&(0x7f00000007c0)=ANY=[@ANYRESDEC, @ANYRES64=0x0, @ANYRESHEX=r0, @ANYRESHEX=r1, @ANYBLOB="424b563df6aa16cf703de3d17feea32090cff1e572b5c4f2fdefb2df79ad1f31922ba84c225a4ec9604b23"], @ANYRESOCT=r1, @ANYRESOCT=r0, @ANYRESOCT=r1, @ANYBLOB="69856506606caff04aa2fd4e7474d6bed9af40bf523816b41dd2415854e5fd16fff1a9a42b988990915fa2fac1ffc474738a103e8ef583af945a2845", @ANYPTR64=&(0x7f0000000840)=ANY=[@ANYRESOCT, @ANYRES64=0x0, @ANYRES64=r1, @ANYRES32=r1]], &(0x7f0000000780)=0x8) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x1a200}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x6, 0x0, 0x1, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x10400, 0x50) write$FUSE_INTERRUPT(r4, &(0x7f0000000280)={0x10, 0x0, 0x7}, 0x10) r5 = dup(r4) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000540)={{{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@mcast1}}, &(0x7f00000002c0)=0xe8) stat(&(0x7f0000000300)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ATTR(r0, &(0x7f0000000640)={0x78, 0x0, 0x3, {0x100000001, 0x8, 0x0, {0x6, 0xffffffffe3b77ccc, 0x2b07, 0x8, 0x3, 0x2, 0x0, 0x8, 0x200, 0xfffffffffffff911, 0x9, r6, r7, 0x8, 0x9}}}, 0x78) ioctl$KVM_RUN(r3, 0xae80, 0x0) lremovexattr(&(0x7f0000000440)='./file0\x00', &(0x7f00000006c0)=@random={'osx.', ')trusted.-vboxnet0\x00'}) accept(r0, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000080)=0x80) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r8, 0x84, 0x12, &(0x7f0000000180), &(0x7f0000000200)=0x4) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000340)=r5) 03:39:33 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xf3, 0x0, 0x0) 03:39:33 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty=0x7a, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:33 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x7000000}) 03:39:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000166, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() 03:39:33 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = accept(0xffffffffffffffff, &(0x7f0000000300)=@nfc, &(0x7f0000000040)=0x80) getsockopt$inet_buf(r1, 0x0, 0x9, 0x0, &(0x7f00000000c0)) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) fcntl$getown(r0, 0x9) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/icmp\x00') preadv(r2, &(0x7f0000000480), 0x10000000000002a1, 0x0) [ 644.228542] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 644.235149] reason=80000021 qualification=0000000000000000 [ 644.241513] IDTVectoring: info=00000000 errcode=00000000 [ 644.246963] TSC Offset = 0xfffffea4c738a00f [ 644.251318] TPR Threshold = 0x00 [ 644.254688] EPT pointer = 0x000000018465401e 03:39:33 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty=0x700000000000000, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:33 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x7000000}) [ 644.310635] IPVS: set_ctl: invalid protocol: 0 0.0.0.122:20002 [ 644.332440] IPVS: set_ctl: invalid protocol: 0 0.0.0.122:20002 03:39:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x100000000000026b, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() [ 644.437395] *** Guest State *** [ 644.451659] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 644.454871] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 03:39:33 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty=0x300, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 644.485976] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:39:33 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x7000000}) 03:39:33 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = accept(0xffffffffffffffff, &(0x7f0000000300)=@nfc, &(0x7f0000000040)=0x80) getsockopt$inet_buf(r1, 0x0, 0x9, 0x0, &(0x7f00000000c0)) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) fcntl$getown(r0, 0x9) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/icmp\x00') preadv(r2, &(0x7f0000000480), 0x10000000000002a1, 0x0) [ 644.559690] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 644.633381] CR3 = 0x0000000000000000 [ 644.646760] IPVS: set_ctl: invalid protocol: 0 0.0.3.0:20002 [ 644.655637] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 644.689581] IPVS: set_ctl: invalid protocol: 0 0.0.3.0:20002 [ 644.695349] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 644.707097] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 644.714130] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 644.722640] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 644.730943] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 644.751271] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 644.780530] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 644.789508] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 644.797765] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 644.806423] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 644.814697] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 644.823009] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 644.832245] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 644.839208] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 644.846869] Interruptibility = 00000000 ActivityState = 00000000 [ 644.853398] *** Host State *** [ 644.856809] RIP = 0xffffffff81212b2e RSP = 0xffff88017f8cf350 [ 644.863054] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 644.873807] FSBase=00007f901f655700 GSBase=ffff8801dae00000 TRBase=fffffe0000003000 [ 644.881841] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 644.888074] CR0=0000000080050033 CR3=0000000181a87000 CR4=00000000001426f0 [ 644.895279] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87c013a0 [ 644.902132] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 644.917820] *** Control State *** [ 644.921378] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 644.929158] EntryControls=0000d1ff ExitControls=002fefff [ 644.934722] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 644.942702] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 03:39:34 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)) ioctl(r0, 0x4000000008914, &(0x7f0000000140)="153f6234418dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) getsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000080), &(0x7f0000000100)=0x4) r4 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$restrict_keyring(0x1d, r4, &(0x7f0000000280)='cifs.idmap\x00', &(0x7f00000002c0)='/dev/kvm\x00') ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:39:34 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x2f5, 0x0, 0x0) 03:39:34 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x7000000}) 03:39:34 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty=0xff00, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x10000000000000cf, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() 03:39:34 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = accept(0xffffffffffffffff, &(0x7f0000000300)=@nfc, &(0x7f0000000040)=0x80) getsockopt$inet_buf(r1, 0x0, 0x9, 0x0, &(0x7f00000000c0)) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) fcntl$getown(r0, 0x9) openat$selinux_create(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/create\x00', 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/icmp\x00') preadv(r2, &(0x7f0000000480), 0x10000000000002a1, 0x0) [ 644.949929] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 644.956667] reason=80000021 qualification=0000000000000000 [ 644.963585] IDTVectoring: info=00000000 errcode=00000000 [ 644.969486] TSC Offset = 0xfffffea474a964e8 [ 644.973964] TPR Threshold = 0x00 [ 644.977504] EPT pointer = 0x00000001b5d7001e 03:39:34 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x7000000}) 03:39:34 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty=0x5000000, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 645.062625] IPVS: set_ctl: invalid protocol: 0 0.0.255.0:20002 [ 645.082252] IPVS: set_ctl: invalid protocol: 0 0.0.255.0:20002 03:39:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000038, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() 03:39:34 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x12d, 0x0, 0x0) [ 645.224825] IPVS: set_ctl: invalid protocol: 0 5.0.0.0:20002 03:39:34 executing program 1: syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0xa3, 0x7000000}) 03:39:34 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty=0x600000000000000, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 645.269447] IPVS: set_ctl: invalid protocol: 0 5.0.0.0:20002 [ 645.376165] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:39:34 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000080)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:39:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000261, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() 03:39:34 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = accept(0xffffffffffffffff, &(0x7f0000000300)=@nfc, &(0x7f0000000040)=0x80) getsockopt$inet_buf(r1, 0x0, 0x9, 0x0, &(0x7f00000000c0)) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) fcntl$getown(r0, 0x9) openat$selinux_create(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/create\x00', 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/icmp\x00') preadv(r2, &(0x7f0000000480), 0x10000000000002a1, 0x0) 03:39:34 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty=0xffffff7f00000000, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:34 executing program 1: syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0xa3, 0x7000000}) [ 645.425860] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:39:34 executing program 1: syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0xa3, 0x7000000}) [ 645.552273] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 645.583974] *** Guest State *** [ 645.591509] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 03:39:34 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty=0xff00000000000000, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:34 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x1d2, 0x0, 0x0) [ 645.600665] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 645.609668] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:39:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x100000000000023e, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() [ 645.649994] CR3 = 0x0000000000000000 [ 645.662622] RSP = 0x0000000000000000 RIP = 0x0000000000000000 03:39:35 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x7000000}) [ 645.709862] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 645.729829] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 645.750203] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 03:39:35 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty=0x8400000000000000, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 645.769917] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:39:35 executing program 5 (fault-call:2 fault-nth:0): clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3}) [ 645.820848] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 645.883755] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 645.899053] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 645.937947] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 645.944479] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 645.956787] FAULT_INJECTION: forcing a failure. [ 645.956787] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 645.984222] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 646.007480] CPU: 1 PID: 1092 Comm: syz-executor5 Not tainted 4.19.0-rc8+ #65 [ 646.014691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 646.024048] Call Trace: [ 646.026651] dump_stack+0x1c4/0x2b4 [ 646.030305] ? dump_stack_print_info.cold.2+0x52/0x52 [ 646.035529] should_fail.cold.4+0xa/0x17 [ 646.039606] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 646.044717] ? graph_lock+0x170/0x170 [ 646.048522] ? graph_lock+0x170/0x170 [ 646.052352] ? lock_acquire+0x1ed/0x520 [ 646.056350] ? __lock_is_held+0xb5/0x140 [ 646.060463] ? ___might_sleep+0x1ed/0x300 [ 646.064620] ? lock_release+0x970/0x970 [ 646.068599] ? arch_local_save_flags+0x40/0x40 [ 646.073192] ? __mutex_lock+0x85e/0x1700 [ 646.077267] ? __might_sleep+0x95/0x190 [ 646.081250] __alloc_pages_nodemask+0x34b/0xde0 [ 646.085933] ? __alloc_pages_slowpath+0x2d80/0x2d80 [ 646.091065] ? find_held_lock+0x36/0x1c0 [ 646.095141] ? __might_fault+0x12b/0x1e0 [ 646.099235] ? lock_downgrade+0x900/0x900 [ 646.103389] ? lock_release+0x970/0x970 [ 646.107369] ? arch_local_save_flags+0x40/0x40 [ 646.111963] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 646.116989] ? usbfs_increase_memory_usage+0xf7/0x1d0 [ 646.122187] ? usbfs_decrease_memory_usage+0x30/0x30 [ 646.127312] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 646.132863] alloc_pages_current+0x10c/0x210 [ 646.137287] ? check_ctrlrecip+0xa9/0x320 [ 646.141448] __get_free_pages+0xc/0x40 [ 646.145347] proc_control+0x227/0xef0 [ 646.149154] ? mark_held_locks+0x130/0x130 [ 646.153399] ? proc_bulk+0xa70/0xa70 [ 646.157144] usbdev_do_ioctl+0x1eb8/0x3b50 [ 646.161413] ? processcompl_compat+0x680/0x680 [ 646.166021] ? mark_held_locks+0x130/0x130 [ 646.170281] ? print_usage_bug+0xc0/0xc0 [ 646.174349] ? __lock_acquire+0x7ec/0x4ec0 [ 646.178587] ? graph_lock+0x170/0x170 [ 646.182394] ? dput.part.26+0x26d/0x790 [ 646.186373] ? graph_lock+0x170/0x170 [ 646.190192] ? graph_lock+0x170/0x170 [ 646.194003] ? find_held_lock+0x36/0x1c0 [ 646.198131] ? avc_has_extended_perms+0x8cb/0x15a0 [ 646.203082] ? lock_downgrade+0x900/0x900 [ 646.207234] ? check_preemption_disabled+0x48/0x200 [ 646.212265] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 646.218082] ? kasan_check_read+0x11/0x20 [ 646.222237] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 646.227517] ? rcu_bh_qs+0xc0/0xc0 [ 646.231103] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 646.236667] ? avc_has_extended_perms+0xab2/0x15a0 [ 646.241640] ? avc_ss_reset+0x190/0x190 [ 646.245623] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 646.251417] ? kasan_check_read+0x11/0x20 [ 646.255567] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 646.260939] ? rcu_bh_qs+0xc0/0xc0 [ 646.264537] ? ___might_sleep+0x1ed/0x300 [ 646.268718] ? arch_local_save_flags+0x40/0x40 [ 646.273317] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 646.278284] usbdev_ioctl+0x25/0x30 [ 646.281930] ? usbdev_compat_ioctl+0x30/0x30 [ 646.286345] do_vfs_ioctl+0x1de/0x1720 [ 646.290274] ? ioctl_preallocate+0x300/0x300 [ 646.294690] ? selinux_file_mprotect+0x620/0x620 [ 646.299463] ? __sb_end_write+0xd9/0x110 [ 646.303554] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 646.309089] ? fput+0x130/0x1a0 [ 646.312370] ? do_syscall_64+0x9a/0x820 [ 646.316349] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 646.321894] ? security_file_ioctl+0x94/0xc0 [ 646.326324] ksys_ioctl+0xa9/0xd0 [ 646.329787] __x64_sys_ioctl+0x73/0xb0 [ 646.333695] do_syscall_64+0x1b9/0x820 [ 646.337592] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 646.342962] ? syscall_return_slowpath+0x5e0/0x5e0 [ 646.347905] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 646.352762] ? trace_hardirqs_on_caller+0x310/0x310 [ 646.357783] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 646.362809] ? prepare_exit_to_usermode+0x291/0x3b0 [ 646.367836] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 646.372717] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 646.377906] RIP: 0033:0x457569 [ 646.381121] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 646.400034] RSP: 002b:00007f92727a3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 646.407749] RAX: ffffffffffffffda RBX: 00007f92727a3c90 RCX: 0000000000457569 [ 646.415017] RDX: 0000000020000000 RSI: 00000000c0185500 RDI: 0000000000000003 [ 646.422301] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 646.429605] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f92727a46d4 [ 646.436872] R13: 00000000004bf6ac R14: 00000000004cf598 R15: 0000000000000004 [ 646.448531] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 646.462832] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 646.471296] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 646.479538] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 646.488375] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 646.496465] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 646.505261] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 646.512096] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 646.519747] Interruptibility = 00000000 ActivityState = 00000000 [ 646.526291] *** Host State *** [ 646.535282] RIP = 0xffffffff81212b2e RSP = 0xffff88018082f350 [ 646.541769] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 646.548574] FSBase=00007f901f655700 GSBase=ffff8801dae00000 TRBase=fffffe0000003000 [ 646.556594] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 646.562776] CR0=0000000080050033 CR3=000000018b0d9000 CR4=00000000001426f0 [ 646.570064] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87c013a0 [ 646.576844] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 646.583672] *** Control State *** [ 646.587151] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 646.593877] EntryControls=0000d1ff ExitControls=002fefff [ 646.599385] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 646.606351] VMEntry: intr_info=8000001e errcode=00000000 ilen=00000000 [ 646.613076] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 646.619728] reason=80000021 qualification=0000000000000000 [ 646.626049] IDTVectoring: info=00000000 errcode=00000000 [ 646.631647] TSC Offset = 0xfffffea3d5cbe9e8 [ 646.635990] TPR Threshold = 0x00 03:39:35 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)) ioctl(r0, 0x4000008008912, &(0x7f0000000080)="153f6234418dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:39:35 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x50, 0x0, 0x0) 03:39:35 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x7000000}) 03:39:35 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty=0x4800000000000000, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:35 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000276, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() 03:39:35 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3}) [ 646.639447] EPT pointer = 0x00000001c6cf701e 03:39:36 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x40087602, &(0x7f0000000000)={0xa3}) [ 646.697387] vhci_hcd: invalid port number 0 03:39:36 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x7000000}) [ 646.733072] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 646.750636] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:39:36 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x117, 0x0, 0x0) 03:39:36 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty=0x84000000, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000113, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() [ 646.810042] *** Guest State *** [ 646.825907] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 03:39:36 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185507, &(0x7f0000000000)={0xa3}) [ 646.885724] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 646.941000] IPVS: set_ctl: invalid protocol: 0 132.0.0.0:20002 [ 646.961346] CR3 = 0x0000000000000000 [ 646.977217] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 646.983798] IPVS: set_ctl: invalid protocol: 0 132.0.0.0:20002 [ 646.988723] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 647.002321] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 647.052133] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 647.078203] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 647.086307] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 647.125907] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 647.138337] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 647.146324] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 647.154337] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 647.162520] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 647.170681] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 647.178698] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 647.186681] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 647.193159] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 647.200685] Interruptibility = 00000000 ActivityState = 00000000 [ 647.206928] *** Host State *** [ 647.210221] RIP = 0xffffffff81212b2e RSP = 0xffff880186877350 [ 647.216209] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 647.222677] FSBase=00007f901f655700 GSBase=ffff8801daf00000 TRBase=fffffe0000003000 [ 647.230561] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 647.236451] CR0=0000000080050033 CR3=000000017e9e9000 CR4=00000000001426e0 [ 647.243509] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87c013a0 [ 647.250778] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 647.256832] *** Control State *** [ 647.260367] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 647.267081] EntryControls=0000d1ff ExitControls=002fefff [ 647.272584] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 647.279549] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 647.286201] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 647.292837] reason=80000021 qualification=0000000000000000 [ 647.299211] IDTVectoring: info=00000000 errcode=00000000 [ 647.304665] TSC Offset = 0xfffffea32d9a3f8d [ 647.309075] TPR Threshold = 0x01 [ 647.312446] EPT pointer = 0x0000000182aa101e [ 647.358038] *** Guest State *** [ 647.361350] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 647.370390] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 647.380259] CR3 = 0x0000000000000000 [ 647.383992] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 647.390049] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 647.396027] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 647.402758] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 647.410832] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 647.418895] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 647.426878] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 647.434945] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 647.442953] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 647.450964] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 647.458982] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 647.466952] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 647.475064] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 647.483097] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 647.489614] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 647.497088] Interruptibility = 00000000 ActivityState = 00000000 [ 647.503355] *** Host State *** [ 647.506558] RIP = 0xffffffff81212b2e RSP = 0xffff88017373f350 [ 647.513294] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 647.519760] FSBase=00007f901f612700 GSBase=ffff8801dae00000 TRBase=fffffe0000003000 [ 647.527566] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 647.533506] CR0=0000000080050033 CR3=000000017e9e9000 CR4=00000000001426f0 [ 647.540926] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87c013a0 [ 647.547587] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 647.553686] *** Control State *** [ 647.557154] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 647.563891] EntryControls=0000d1ff ExitControls=002fefff [ 647.569406] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 647.576337] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 647.583071] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 647.589698] reason=80000021 qualification=0000000000000000 [ 647.596041] IDTVectoring: info=00000000 errcode=00000000 [ 647.601532] TSC Offset = 0xfffffea32d9a3f8d [ 647.605852] TPR Threshold = 0x01 03:39:36 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000240)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000280)=""/149) clock_gettime(0x0, &(0x7f0000000200)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) connect$bt_sco(r2, &(0x7f0000000080)={0x1f, {0xfe6b, 0x7f, 0x400, 0x5, 0x400, 0x1}}, 0x8) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000100)={0xa, 0x0, [{0xafd, 0x0, 0x3b59}, {0x387, 0x0, 0x2}, {0x8a4, 0x0, 0x80}, {0x8d3, 0x0, 0xfffffffeffffffff}, {0xbf7, 0x0, 0x10001}, {0xb9b, 0x0, 0x4}, {0x824, 0x0, 0x100000001}, {0x986}, {0x9ba, 0x0, 0x1}, {0x9fa, 0x0, 0x7}]}) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 03:39:36 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3}) 03:39:36 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty=0x5, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:36 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185560, &(0x7f0000000000)={0xa3}) 03:39:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000155, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() 03:39:36 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x320, 0x0, 0x0) [ 647.609280] EPT pointer = 0x0000000182aa101e 03:39:36 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x4008550d, &(0x7f0000000000)={0xa3}) [ 647.671576] vhci_hcd: invalid port number 0 [ 647.678147] IPVS: set_ctl: invalid protocol: 0 0.0.0.5:20002 03:39:37 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty=0x6c, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x100000000000011a, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() [ 647.719039] IPVS: set_ctl: invalid protocol: 0 0.0.0.5:20002 03:39:37 executing program 1 (fault-call:1 fault-nth:0): r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3}) 03:39:37 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0105512, &(0x7f0000000000)={0xa3}) [ 647.825394] *** Guest State *** [ 647.854297] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 647.860885] IPVS: set_ctl: invalid protocol: 0 0.0.0.108:20002 [ 647.893045] FAULT_INJECTION: forcing a failure. 03:39:37 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty=0x7a000000, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 647.893045] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 647.912007] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 647.917455] IPVS: set_ctl: invalid protocol: 0 0.0.0.108:20002 [ 647.935666] CR3 = 0x0000000000000000 [ 647.948343] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 647.968082] CPU: 0 PID: 1202 Comm: syz-executor1 Not tainted 4.19.0-rc8+ #65 [ 647.972351] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 647.975303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 647.975311] Call Trace: [ 647.975344] dump_stack+0x1c4/0x2b4 [ 647.975373] ? dump_stack_print_info.cold.2+0x52/0x52 [ 647.975410] should_fail.cold.4+0xa/0x17 [ 647.975433] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 647.997722] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 648.002151] ? graph_lock+0x170/0x170 [ 648.002184] ? graph_lock+0x170/0x170 [ 648.002209] ? lock_acquire+0x1ed/0x520 [ 648.002237] ? __lock_is_held+0xb5/0x140 [ 648.002253] ? cpu_map_delete_elem+0xf0/0xf0 [ 648.002280] ? ___might_sleep+0x1ed/0x300 [ 648.006806] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 648.011429] ? lock_release+0x970/0x970 [ 648.011450] ? arch_local_save_flags+0x40/0x40 [ 648.011471] ? __mutex_lock+0x85e/0x1700 [ 648.011500] ? __might_sleep+0x95/0x190 [ 648.011525] __alloc_pages_nodemask+0x34b/0xde0 [ 648.011550] ? __alloc_pages_slowpath+0x2d80/0x2d80 [ 648.011564] ? find_held_lock+0x36/0x1c0 [ 648.011591] ? __might_fault+0x12b/0x1e0 [ 648.019239] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 648.022099] ? lock_downgrade+0x900/0x900 [ 648.022121] ? lock_release+0x970/0x970 [ 648.022138] ? arch_local_save_flags+0x40/0x40 [ 648.022161] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 648.022182] ? usbfs_increase_memory_usage+0xf7/0x1d0 [ 648.022200] ? usbfs_decrease_memory_usage+0x30/0x30 [ 648.022220] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 648.026225] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 648.030004] alloc_pages_current+0x10c/0x210 [ 648.030021] ? check_ctrlrecip+0xa9/0x320 [ 648.030041] __get_free_pages+0xc/0x40 [ 648.030057] proc_control+0x227/0xef0 [ 648.030075] ? mark_held_locks+0x130/0x130 [ 648.030095] ? proc_bulk+0xa70/0xa70 [ 648.030124] usbdev_do_ioctl+0x1eb8/0x3b50 [ 648.030146] ? processcompl_compat+0x680/0x680 [ 648.035135] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 648.038644] ? mark_held_locks+0x130/0x130 [ 648.038670] ? print_usage_bug+0xc0/0xc0 [ 648.038687] ? __lock_acquire+0x7ec/0x4ec0 [ 648.038705] ? graph_lock+0x170/0x170 [ 648.038726] ? dput.part.26+0x26d/0x790 [ 648.038746] ? graph_lock+0x170/0x170 [ 648.038769] ? graph_lock+0x170/0x170 [ 648.043510] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 648.050893] ? find_held_lock+0x36/0x1c0 [ 648.050923] ? avc_has_extended_perms+0x8cb/0x15a0 [ 648.050942] ? lock_downgrade+0x900/0x900 [ 648.050962] ? check_preemption_disabled+0x48/0x200 [ 648.050988] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 648.051001] ? kasan_check_read+0x11/0x20 [ 648.051024] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 648.055652] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 648.059572] ? rcu_bh_qs+0xc0/0xc0 [ 648.059605] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 648.059622] ? avc_has_extended_perms+0xab2/0x15a0 [ 648.059654] ? avc_ss_reset+0x190/0x190 [ 648.059686] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 648.059699] ? kasan_check_read+0x11/0x20 [ 648.059720] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 648.064404] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 648.067745] ? rcu_bh_qs+0xc0/0xc0 [ 648.067792] ? ___might_sleep+0x1ed/0x300 [ 648.067813] ? arch_local_save_flags+0x40/0x40 [ 648.067839] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 648.067864] usbdev_ioctl+0x25/0x30 [ 648.067884] ? usbdev_compat_ioctl+0x30/0x30 [ 648.073137] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 648.077571] do_vfs_ioctl+0x1de/0x1720 [ 648.077598] ? ioctl_preallocate+0x300/0x300 [ 648.077621] ? selinux_file_mprotect+0x620/0x620 [ 648.077645] ? __sb_end_write+0xd9/0x110 [ 648.077691] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 648.077708] ? fput+0x130/0x1a0 [ 648.082355] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 648.085830] ? do_syscall_64+0x9a/0x820 [ 648.085855] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 648.085874] ? security_file_ioctl+0x94/0xc0 [ 648.085897] ksys_ioctl+0xa9/0xd0 [ 648.085918] __x64_sys_ioctl+0x73/0xb0 [ 648.085938] do_syscall_64+0x1b9/0x820 [ 648.094519] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 648.098046] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 648.098068] ? syscall_return_slowpath+0x5e0/0x5e0 [ 648.098084] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 648.098105] ? trace_hardirqs_on_caller+0x310/0x310 [ 648.098137] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 648.098166] ? prepare_exit_to_usermode+0x291/0x3b0 [ 648.098202] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 648.098226] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 648.102827] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 648.106798] RIP: 0033:0x457569 [ 648.106815] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 648.106825] RSP: 002b:00007ff5f3208c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 648.106855] RAX: ffffffffffffffda RBX: 00007ff5f3208c90 RCX: 0000000000457569 [ 648.106866] RDX: 0000000020000000 RSI: 00000000c0185500 RDI: 0000000000000003 [ 648.106876] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 648.106886] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff5f32096d4 [ 648.106896] R13: 00000000004bf6ac R14: 00000000004cf598 R15: 0000000000000004 [ 648.125382] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 648.144585] Interruptibility = 00000000 ActivityState = 00000000 [ 648.157113] IPVS: set_ctl: invalid protocol: 0 122.0.0.0:20002 [ 648.161777] *** Host State *** [ 648.253071] RIP = 0xffffffff81212b2e RSP = 0xffff880186877350 [ 648.274989] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 648.297952] FSBase=00007f901f655700 GSBase=ffff8801daf00000 TRBase=fffffe0000034000 [ 648.297967] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 648.297984] CR0=0000000080050033 CR3=00000001d4ef6000 CR4=00000000001426e0 [ 648.298001] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff87c013a0 [ 648.298014] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 648.298019] *** Control State *** [ 648.298030] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 648.298039] EntryControls=0000d1ff ExitControls=002fefff [ 648.298053] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 648.298063] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 648.298079] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 648.309871] reason=80000021 qualification=0000000000000000 [ 648.592229] IDTVectoring: info=00000000 errcode=00000000 [ 648.623814] TSC Offset = 0xfffffea2a21f799b [ 648.634344] TPR Threshold = 0x00 [ 648.637826] EPT pointer = 0x00000001b5f7101e [ 648.688000] *** Guest State *** [ 648.691404] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 648.691433] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 648.710059] CR3 = 0x0000000000000000 [ 648.713800] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 648.719908] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 648.726009] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 648.732747] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 648.740791] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 648.748965] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 648.756945] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 648.765030] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 648.773065] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 648.781079] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 648.789085] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 648.797044] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 648.805209] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 648.813250] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 648.819749] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 648.827230] Interruptibility = 00000000 ActivityState = 00000000 [ 648.833497] *** Host State *** [ 648.836696] RIP = 0xffffffff81212b2e RSP = 0xffff8801802ef350 [ 648.842716] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 648.849175] FSBase=00007f901f633700 GSBase=ffff8801daf00000 TRBase=fffffe0000034000 [ 648.856995] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 648.862919] CR0=0000000080050033 CR3=00000001d4ef6000 CR4=00000000001426e0 [ 648.869984] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff87c013a0 [ 648.876655] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 648.882742] *** Control State *** [ 648.886195] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 648.892897] EntryControls=0000d1ff ExitControls=002fefff [ 648.898396] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 648.905310] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 648.912012] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 648.918637] reason=80000021 qualification=0000000000000000 [ 648.924944] IDTVectoring: info=00000000 errcode=00000000 [ 648.930431] TSC Offset = 0xfffffea2a21f799b [ 648.934752] TPR Threshold = 0x00 03:39:38 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = open(&(0x7f0000000080)='./file0\x00', 0x8100, 0xc) setsockopt$ALG_SET_AEAD_AUTHSIZE(r3, 0x117, 0x5, 0x0, 0x17) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 03:39:38 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x54, 0x0, 0x0) 03:39:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x10000000000000d1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() 03:39:38 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty=0x6c00, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:38 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0189436, &(0x7f0000000000)={0xa3}) 03:39:38 executing program 1 (fault-call:1 fault-nth:1): r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3}) [ 648.938165] EPT pointer = 0x00000001b5f7101e [ 649.000382] IPVS: set_ctl: invalid protocol: 0 0.0.108.0:20002 [ 649.016551] FAULT_INJECTION: forcing a failure. [ 649.016551] name failslab, interval 1, probability 0, space 0, times 0 03:39:38 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x2, &(0x7f0000000000)={0xa3}) 03:39:38 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty=0x63, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 649.045474] IPVS: set_ctl: invalid protocol: 0 0.0.108.0:20002 03:39:38 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xcf, 0x0, 0x0) 03:39:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x100000000000018e, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() [ 649.136082] CPU: 0 PID: 1238 Comm: syz-executor1 Not tainted 4.19.0-rc8+ #65 [ 649.143349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 649.143361] Call Trace: [ 649.155337] dump_stack+0x1c4/0x2b4 [ 649.158989] ? dump_stack_print_info.cold.2+0x52/0x52 [ 649.164199] ? graph_lock+0x170/0x170 [ 649.168043] should_fail.cold.4+0xa/0x17 [ 649.172143] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 649.177294] ? graph_lock+0x170/0x170 [ 649.181119] ? graph_lock+0x170/0x170 [ 649.184957] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 649.190516] ? check_preemption_disabled+0x48/0x200 [ 649.195550] ? check_preemption_disabled+0x48/0x200 [ 649.195576] ? find_held_lock+0x36/0x1c0 [ 649.204674] ? proc_control+0x831/0xef0 [ 649.208694] ? ___might_sleep+0x1ed/0x300 [ 649.212860] ? arch_local_save_flags+0x40/0x40 [ 649.217783] ? __alloc_pages_slowpath+0x2d80/0x2d80 [ 649.222803] ? find_held_lock+0x36/0x1c0 [ 649.226899] __should_failslab+0x124/0x180 [ 649.231190] should_failslab+0x9/0x14 [ 649.235002] kmem_cache_alloc_trace+0x2d7/0x750 [ 649.239684] ? lock_release+0x970/0x970 [ 649.243665] ? arch_local_save_flags+0x40/0x40 [ 649.248284] usb_control_msg+0xc4/0x4e0 [ 649.252319] ? usb_start_wait_urb+0x370/0x370 [ 649.256851] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 649.262404] proc_control+0x99b/0xef0 [ 649.266255] ? proc_bulk+0xa70/0xa70 [ 649.270007] usbdev_do_ioctl+0x1eb8/0x3b50 [ 649.274256] ? processcompl_compat+0x680/0x680 [ 649.278890] ? mark_held_locks+0x130/0x130 [ 649.283203] ? print_usage_bug+0xc0/0xc0 [ 649.287281] ? __lock_acquire+0x7ec/0x4ec0 [ 649.291539] ? graph_lock+0x170/0x170 [ 649.295354] ? dput.part.26+0x26d/0x790 [ 649.299382] ? graph_lock+0x170/0x170 [ 649.303228] ? graph_lock+0x170/0x170 [ 649.307059] ? find_held_lock+0x36/0x1c0 [ 649.311149] ? avc_has_extended_perms+0x8cb/0x15a0 [ 649.316082] ? lock_downgrade+0x900/0x900 [ 649.320235] ? check_preemption_disabled+0x48/0x200 [ 649.325270] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 649.331066] ? kasan_check_read+0x11/0x20 [ 649.335221] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 649.340524] ? rcu_bh_qs+0xc0/0xc0 [ 649.344083] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 649.349669] ? avc_has_extended_perms+0xab2/0x15a0 [ 649.354635] ? avc_ss_reset+0x190/0x190 [ 649.358622] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 649.364444] ? kasan_check_read+0x11/0x20 [ 649.368616] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 649.373918] ? rcu_bh_qs+0xc0/0xc0 [ 649.377522] ? ___might_sleep+0x1ed/0x300 [ 649.381715] ? arch_local_save_flags+0x40/0x40 [ 649.386364] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 649.391331] usbdev_ioctl+0x25/0x30 [ 649.394966] ? usbdev_compat_ioctl+0x30/0x30 [ 649.399377] do_vfs_ioctl+0x1de/0x1720 [ 649.403292] ? ioctl_preallocate+0x300/0x300 [ 649.407719] ? selinux_file_mprotect+0x620/0x620 [ 649.412502] ? __sb_end_write+0xd9/0x110 [ 649.416613] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 649.422169] ? fput+0x130/0x1a0 [ 649.425454] ? do_syscall_64+0x9a/0x820 [ 649.429480] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 649.435019] ? security_file_ioctl+0x94/0xc0 [ 649.439467] ksys_ioctl+0xa9/0xd0 [ 649.442931] __x64_sys_ioctl+0x73/0xb0 [ 649.446824] do_syscall_64+0x1b9/0x820 [ 649.450748] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 649.456157] ? syscall_return_slowpath+0x5e0/0x5e0 [ 649.461138] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 649.465998] ? trace_hardirqs_on_caller+0x310/0x310 [ 649.471040] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 649.476063] ? prepare_exit_to_usermode+0x291/0x3b0 [ 649.481097] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 649.485953] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 649.491164] RIP: 0033:0x457569 [ 649.494396] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 649.513299] RSP: 002b:00007ff5f3208c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 649.521039] RAX: ffffffffffffffda RBX: 00007ff5f3208c90 RCX: 0000000000457569 [ 649.528308] RDX: 0000000020000000 RSI: 00000000c0185500 RDI: 0000000000000003 [ 649.535617] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 649.542915] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff5f32096d4 [ 649.550204] R13: 00000000004bf6ac R14: 00000000004cf598 R15: 0000000000000004 [ 649.572605] IPVS: set_ctl: invalid protocol: 0 0.0.0.99:20002 03:39:38 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty=0x6800000000000000, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:38 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x550b, &(0x7f0000000000)={0xa3}) [ 649.589842] IPVS: set_ctl: invalid protocol: 0 0.0.0.99:20002 [ 649.703360] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 649.721280] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 649.740172] *** Guest State *** [ 649.743728] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 649.770789] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 649.803577] CR3 = 0x0000000000000000 [ 649.809242] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 649.815489] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 649.823146] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 649.833850] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 649.850018] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 649.858153] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 649.866183] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 649.874774] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 649.882830] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 649.890961] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 649.899021] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 649.906997] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 649.915063] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 649.923114] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 649.929620] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 649.937071] Interruptibility = 00000000 ActivityState = 00000000 [ 649.943399] *** Host State *** [ 649.946620] RIP = 0xffffffff81212b2e RSP = 0xffff88017f837350 [ 649.952678] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 649.959241] FSBase=00007f901f612700 GSBase=ffff8801dae00000 TRBase=fffffe0000034000 [ 649.967033] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 649.973019] CR0=0000000080050033 CR3=0000000181629000 CR4=00000000001426f0 [ 649.980089] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff87c013a0 [ 649.986754] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 649.992847] *** Control State *** [ 649.996305] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 650.003058] EntryControls=0000d1ff ExitControls=002fefff [ 650.008608] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 650.015538] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 03:39:39 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0xfffffffffffffffd, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000180)=ANY=[@ANYPTR=&(0x7f0000000140)=ANY=[@ANYRES64=r2, @ANYPTR], @ANYRES16=r1], &(0x7f0000000100)=0x2) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x4800, 0x0) write$P9_RMKDIR(r5, &(0x7f0000000240)={0x14, 0x49, 0x1, {0x40000000000000, 0x4}}, 0x8) r6 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000002ac0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000002b00)='tls\x00', 0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0xae80, 0x0) 03:39:39 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty=0x200000000000000, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001c0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() 03:39:39 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045505, &(0x7f0000000000)={0xa3}) 03:39:39 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x217, 0x0, 0x0) 03:39:39 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3}) [ 650.022277] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 650.028901] reason=80000021 qualification=0000000000000000 [ 650.035218] IDTVectoring: info=00000000 errcode=00000000 [ 650.040707] TSC Offset = 0xfffffea19d274455 [ 650.045032] TPR Threshold = 0x01 [ 650.048457] EPT pointer = 0x0000000183b4001e 03:39:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000187, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() 03:39:39 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty=0xa000000, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:39 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x80087601, &(0x7f0000000000)={0xa3}) [ 650.126548] usb usb9: usbfs: interface 0 claimed by hub while 'syz-executor5' sets config #163 [ 650.136787] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 650.151821] vhci_hcd: invalid port number 0 [ 650.151977] usb usb9: usbfs: interface 0 claimed by hub while 'syz-executor5' sets config #163 03:39:39 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x4004551e, &(0x7f0000000000)={0xa3}) 03:39:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000180, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() 03:39:39 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in6, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@multicast2}}, &(0x7f0000000100)=0xe8) r4 = getgid() write$FUSE_CREATE_OPEN(r2, &(0x7f00000003c0)={0xa0, 0x0, 0x6, {{0x6, 0x3, 0x3, 0x9, 0x7f, 0x3ff, {0x4, 0x200, 0x82, 0x3, 0x9, 0xffffffffffffff7f, 0x80000000000000, 0x20, 0x7, 0x0, 0x2, r3, r4, 0x0, 0x1722}}, {0x0, 0x2}}}, 0xa0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r6, 0xae80, 0x0) 03:39:39 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty=0x7400, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 650.253581] IPVS: set_ctl: invalid protocol: 0 10.0.0.0:20002 [ 650.286762] IPVS: set_ctl: invalid protocol: 0 10.0.0.0:20002 03:39:39 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185503, &(0x7f0000000000)={0xa3}) 03:39:39 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x345, 0x0, 0x0) 03:39:39 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x4008550d, &(0x7f0000000000)={0xa3}) 03:39:39 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty=0xa, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:39 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185506, &(0x7f0000000000)={0xa3}) [ 650.425633] IPVS: set_ctl: invalid protocol: 0 0.0.116.0:20002 [ 650.463337] IPVS: set_ctl: invalid protocol: 0 0.0.116.0:20002 03:39:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000141, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() [ 650.512665] *** Guest State *** [ 650.523288] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 03:39:39 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x40049409, &(0x7f0000000000)={0xa3}) [ 650.576253] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 650.584394] IPVS: set_ctl: invalid protocol: 0 0.0.0.10:20002 [ 650.616320] CR3 = 0x0000000000000000 03:39:39 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty=0x100000000000000, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 650.635086] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 650.645704] IPVS: set_ctl: invalid protocol: 0 0.0.0.10:20002 03:39:39 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x368, 0x0, 0x0) 03:39:40 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x8108551b, &(0x7f0000000000)={0xa3}) [ 650.702724] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 650.744813] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 650.785810] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 650.812001] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 650.815909] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 650.834321] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 650.888039] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 650.896073] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 650.909676] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 650.927905] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 650.935907] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 650.943995] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 650.952918] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 650.961193] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 650.969275] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 650.975703] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 650.983249] Interruptibility = 00000000 ActivityState = 00000000 [ 650.989534] *** Host State *** [ 650.992758] RIP = 0xffffffff81212b2e RSP = 0xffff88017f82f350 [ 650.998810] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 651.005231] FSBase=00007f901f655700 GSBase=ffff8801dae00000 TRBase=fffffe0000034000 [ 651.013124] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 651.019062] CR0=0000000080050033 CR3=00000001c31a1000 CR4=00000000001426f0 [ 651.026103] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff87c013a0 [ 651.032928] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 651.039040] *** Control State *** [ 651.042507] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 651.049291] EntryControls=0000d1ff ExitControls=002fefff [ 651.054757] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 651.061754] VMEntry: intr_info=8000001e errcode=00000000 ilen=00000000 [ 651.068495] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 651.075079] reason=80000021 qualification=0000000000000000 [ 651.081510] IDTVectoring: info=00000000 errcode=00000000 03:39:40 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x100, 0x0) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0x1c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x8040ae9f, &(0x7f0000000100)) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 03:39:40 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000274, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() 03:39:40 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x8008550e, &(0x7f0000000000)={0xa3}) 03:39:40 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty=0x68000000, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:40 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0045878, &(0x7f0000000000)={0xa3}) [ 651.086970] TSC Offset = 0xfffffea130efbfae [ 651.091336] TPR Threshold = 0x00 [ 651.094707] EPT pointer = 0x00000001828fc01e 03:39:40 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x205, 0x0, 0x0) 03:39:40 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0105502, &(0x7f0000000000)={0xa3}) [ 651.184732] IPVS: set_ctl: invalid protocol: 0 104.0.0.0:20002 03:39:40 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty=0x500, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:40 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x5514, &(0x7f0000000000)={0xa3}) [ 651.226289] IPVS: set_ctl: invalid protocol: 0 104.0.0.0:20002 03:39:40 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000000)={0xa3}) [ 651.321366] *** Guest State *** 03:39:40 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0105512, &(0x7f0000000000)={0xa3}) [ 651.360550] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 651.384009] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 03:39:40 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x361, 0x0, 0x0) [ 651.414166] IPVS: set_ctl: invalid protocol: 0 0.0.5.0:20002 [ 651.426996] CR3 = 0x0000000000000000 [ 651.444067] IPVS: set_ctl: invalid protocol: 0 0.0.5.0:20002 [ 651.450541] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 651.477480] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 651.502127] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 651.543048] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 651.578559] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 651.592984] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 651.601455] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 651.611205] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 651.629772] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 651.639278] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 651.647391] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 651.655974] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 651.664605] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 651.673014] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 651.679580] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 651.687070] Interruptibility = 00000000 ActivityState = 00000000 [ 651.693361] *** Host State *** [ 651.696573] RIP = 0xffffffff81212b2e RSP = 0xffff880174bd7350 [ 651.702777] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 651.709276] FSBase=00007f901f655700 GSBase=ffff8801dae00000 TRBase=fffffe0000034000 [ 651.717077] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 651.723074] CR0=0000000080050033 CR3=00000001881be000 CR4=00000000001426f0 [ 651.730192] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff87c013a0 [ 651.736875] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 651.743039] *** Control State *** [ 651.746507] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 651.753218] EntryControls=0000d1ff ExitControls=002fefff [ 651.758749] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 651.765678] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 651.772400] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 651.779040] reason=80000021 qualification=0000000000000000 [ 651.785366] IDTVectoring: info=00000000 errcode=00000000 [ 651.790867] TSC Offset = 0xfffffea0c3aeea70 [ 651.795194] TPR Threshold = 0x01 [ 651.798619] EPT pointer = 0x000000018d9ab01e [ 651.812524] *** Guest State *** [ 651.815825] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 651.815839] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 651.815846] CR3 = 0x0000000000000000 [ 651.815859] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 651.834801] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 651.849777] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 651.856437] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 651.864482] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 651.872507] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 651.880566] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 651.888615] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 651.896594] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 651.904637] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 651.912655] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 651.920784] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 651.928848] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 651.936832] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 651.943342] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 651.950822] Interruptibility = 00000000 ActivityState = 00000000 [ 651.957037] *** Host State *** [ 651.960278] RIP = 0xffffffff81212b2e RSP = 0xffff880174bd7350 [ 651.966261] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 651.972725] FSBase=00007f901f655700 GSBase=ffff8801daf00000 TRBase=fffffe0000034000 [ 651.980557] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 651.986436] CR0=0000000080050033 CR3=00000001881be000 CR4=00000000001426e0 [ 651.993507] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff87c013a0 [ 652.000237] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 652.006279] *** Control State *** [ 652.009786] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 652.016451] EntryControls=0000d1ff ExitControls=002fefff [ 652.021980] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 652.028940] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 652.035596] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 03:39:41 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:39:41 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty=0x6800, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:41 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x8004551a, &(0x7f0000000000)={0xa3}) 03:39:41 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000273, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() 03:39:41 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000000)={0xa3}) 03:39:41 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x175, 0x0, 0x0) [ 652.042297] reason=80000021 qualification=0000000000000000 [ 652.049724] IDTVectoring: info=00000000 errcode=00000000 [ 652.055198] TSC Offset = 0xfffffea0c3aeea70 [ 652.059566] TPR Threshold = 0x01 [ 652.062938] EPT pointer = 0x000000018d9ab01e 03:39:41 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc018557a, &(0x7f0000000000)={0xa3}) [ 652.140274] IPVS: set_ctl: invalid protocol: 0 0.0.104.0:20002 03:39:41 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x5451, &(0x7f0000000000)={0xa3}) 03:39:41 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty=0x6300, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:41 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x100000000000002d, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() 03:39:41 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x5421, &(0x7f0000000000)={0xa3}) 03:39:41 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x328, 0x0, 0x0) [ 652.328459] IPVS: set_ctl: invalid protocol: 0 0.0.99.0:20002 [ 652.367210] IPVS: set_ctl: invalid protocol: 0 0.0.99.0:20002 03:39:41 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e21, 0x1, @mcast2, 0x3f2}}, 0x2, 0x1}, &(0x7f0000000240)=0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r5, @in6={{0xa, 0x4e24, 0x7, @local}}, 0x2}, &(0x7f0000000340)=0x90) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:39:41 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty=0x900000000000000, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:41 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x8008551c, &(0x7f0000000000)={0xa3}) 03:39:41 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000217, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() 03:39:41 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185502, &(0x7f0000000000)={0xa3}) [ 652.573087] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 652.592095] *** Guest State *** [ 652.605437] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 652.612128] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 03:39:41 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty=0x300000000000000, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:41 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xf4, 0x0, 0x0) 03:39:41 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x4004551e, &(0x7f0000000000)={0xa3}) 03:39:41 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc018556c, &(0x7f0000000000)={0xa3}) [ 652.631082] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 652.687297] CR3 = 0x0000000000000000 [ 652.712193] RSP = 0x0000000000000000 RIP = 0x0000000000000000 03:39:42 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty=0x700, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 652.753548] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 652.769463] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 03:39:42 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc020660b, &(0x7f0000000000)={0xa3}) 03:39:42 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x5514, &(0x7f0000000000)={0xa3}) [ 652.829238] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 652.849454] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 652.859149] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 652.879700] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 652.895743] IPVS: set_ctl: invalid protocol: 0 0.0.7.0:20002 [ 652.906824] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 652.973199] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 653.014585] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 653.036074] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 653.045599] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 653.054007] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 653.062080] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 653.070345] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 653.076789] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 653.084345] Interruptibility = 00000000 ActivityState = 00000000 [ 653.090745] *** Host State *** [ 653.093957] RIP = 0xffffffff81212b2e RSP = 0xffff880174bd7350 [ 653.100023] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 653.106451] FSBase=00007f901f655700 GSBase=ffff8801daf00000 TRBase=fffffe0000003000 [ 653.114357] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 653.120366] CR0=0000000080050033 CR3=0000000187695000 CR4=00000000001426e0 [ 653.127382] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87c013a0 [ 653.134111] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 653.140204] *** Control State *** [ 653.143698] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 653.150420] EntryControls=0000d1ff ExitControls=002fefff [ 653.155897] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 03:39:42 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, 0x1a200}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 653.162868] VMEntry: intr_info=80000087 errcode=00000000 ilen=00000000 [ 653.170130] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 653.176714] reason=80000021 qualification=0000000000000000 [ 653.183081] IDTVectoring: info=00000000 errcode=00000000 [ 653.188596] TSC Offset = 0xfffffea0147ef515 [ 653.192916] TPR Threshold = 0x00 [ 653.196265] EPT pointer = 0x0000000185e9701e 03:39:42 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty=0x6300000000000000, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001d7, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() 03:39:42 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x231, 0x0, 0x0) 03:39:42 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x4b49, &(0x7f0000000000)={0xa3}) 03:39:42 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x4004550d, &(0x7f0000000000)={0xa3}) 03:39:42 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x4004550c, &(0x7f0000000000)={0xa3}) [ 653.287425] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 653.294038] *** Guest State *** [ 653.303618] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 653.320223] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 653.329118] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:39:42 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty=0x4000000, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:42 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x5460, &(0x7f0000000000)={0xa3}) 03:39:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x10000000000000e3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() [ 653.335560] CR3 = 0x0000000000000000 [ 653.339750] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 653.358545] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 653.410403] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 653.431925] IPVS: set_ctl: invalid protocol: 0 4.0.0.0:20002 [ 653.452343] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 03:39:42 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty=0xa00000000000000, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:42 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x4b47, &(0x7f0000000000)={0xa3}) [ 653.461648] IPVS: set_ctl: invalid protocol: 0 4.0.0.0:20002 [ 653.480857] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 653.532276] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 653.563308] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 653.601720] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 653.613787] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 653.620142] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 653.629258] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 653.647366] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 653.657230] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 653.665555] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 653.674355] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 653.682654] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 653.689494] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 653.697036] Interruptibility = 00000000 ActivityState = 00000000 [ 653.703491] *** Host State *** [ 653.706735] RIP = 0xffffffff81212b2e RSP = 0xffff880180877350 [ 653.712825] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 653.719283] FSBase=00007f901f655700 GSBase=ffff8801daf00000 TRBase=fffffe0000034000 [ 653.727077] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 653.733331] CR0=0000000080050033 CR3=00000001d27ec000 CR4=00000000001426e0 [ 653.740385] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff87c013a0 [ 653.747037] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 653.753184] *** Control State *** [ 653.756642] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 653.763355] EntryControls=0000d1ff ExitControls=002fefff [ 653.768931] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 653.775856] VMEntry: intr_info=8000001e errcode=00000000 ilen=00000000 [ 653.782732] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 653.789401] reason=80000021 qualification=0000000000000000 [ 653.795735] IDTVectoring: info=00000000 errcode=00000000 [ 653.801235] TSC Offset = 0xfffffe9fb40efafa [ 653.805556] TPR Threshold = 0x00 [ 653.809192] EPT pointer = 0x00000001cbe1d01e [ 653.858036] *** Guest State *** [ 653.861375] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 653.870419] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 653.879369] CR3 = 0x0000000000000000 [ 653.883087] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 653.883101] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 653.883117] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 653.883132] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 653.883156] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 653.895180] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 653.895200] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 653.895220] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 653.895239] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 653.950619] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 653.958717] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 653.966690] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 653.974818] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 653.982857] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 653.989340] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 653.996795] Interruptibility = 00000000 ActivityState = 00000000 [ 654.003064] *** Host State *** [ 654.006264] RIP = 0xffffffff81212b2e RSP = 0xffff88018660f350 [ 654.012290] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 654.018831] FSBase=00007f901f633700 GSBase=ffff8801dae00000 TRBase=fffffe0000003000 [ 654.026630] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 654.032587] CR0=0000000080050033 CR3=00000001d27ec000 CR4=00000000001426f0 [ 654.039720] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87c013a0 [ 654.046406] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 654.052526] *** Control State *** [ 654.056023] PinBased=0000003f CPUBased=b5a06dfe SecondaryExec=000000c3 [ 654.062734] EntryControls=0000d1ff ExitControls=002fefff [ 654.068222] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 654.075173] VMEntry: intr_info=8000001e errcode=00000000 ilen=00000000 [ 654.082408] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 654.089282] reason=80000021 qualification=0000000000000000 [ 654.095668] IDTVectoring: info=00000000 errcode=00000000 [ 654.101214] TSC Offset = 0xfffffe9fb40efafa [ 654.105564] TPR Threshold = 0x00 03:39:43 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rfkill\x00', 0x2, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000280)={0x10d000, 0x10000}) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc4c85513, &(0x7f0000000540)={{0xa, 0x0, 0x81, 0x9, 'syz0\x00', 0x6}, 0x0, [0x4, 0x1, 0x1f, 0x8, 0x9, 0x4, 0x9, 0x5, 0x9, 0xa842, 0x1, 0xb5, 0xb3bf, 0x3, 0x3, 0xba, 0x6, 0x2, 0x3, 0xfffffffffffff000, 0x7, 0x200, 0x5, 0x0, 0x3, 0x1, 0x9, 0x400000000000000, 0x100, 0x9, 0x0, 0x100000001, 0x3f, 0x5, 0x7, 0x40, 0xfc, 0x7, 0x80000001, 0x10000, 0x9, 0x0, 0x9, 0x8, 0x3, 0x800, 0x6, 0x21, 0x8, 0x3, 0x7fe0000000000000, 0x3, 0x2, 0x0, 0x400, 0x4, 0x4, 0x2, 0xe5c, 0x4, 0x1fa9, 0x9655, 0x0, 0x0, 0x6, 0x3, 0x5, 0x86c7, 0x1, 0x7fffffff, 0x9, 0x1ff, 0x7fffffff, 0x0, 0x401, 0x200, 0xe86, 0x7cc, 0x0, 0x1, 0x100, 0xffff, 0x9e, 0x1400, 0xffffffffffff6162, 0x36c0, 0xffffffffffffffff, 0x9, 0x9, 0x100000001, 0x8, 0x1, 0x8, 0x8, 0xc5, 0x2, 0x5, 0xffffffffffff1b66, 0x2, 0x4, 0x7, 0x10001, 0xbca4, 0x0, 0x87, 0x4, 0x8001, 0x4, 0x5, 0x5, 0x9, 0xfffffffffffffff8, 0x4, 0x2, 0xb3a, 0x2, 0x8001, 0x1, 0x40, 0x200, 0x3, 0x9, 0x87, 0x5, 0x2, 0x3, 0x80000000, 0x8000], {r6, r7+30000000}}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000140)='trusted.overlay.redirect\x00', &(0x7f0000000180)='./file0\x00', 0x8, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 03:39:43 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x8008551c, &(0x7f0000000000)={0xa3}) 03:39:43 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x100000000000021f, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() 03:39:43 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x270, 0x0, 0x0) 03:39:43 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty=0x2000000000000000, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 654.108988] EPT pointer = 0x00000001cbe1d01e 03:39:43 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty=0x7000000, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 654.159921] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 654.200820] *** Guest State *** [ 654.210685] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 654.245094] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 03:39:43 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x80085504, &(0x7f0000000000)={0xa3}) 03:39:43 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x40085511, &(0x7f0000000000)={0xa3}) 03:39:43 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x379, 0x0, 0x0) [ 654.302155] CR3 = 0x0000000000000000 [ 654.318807] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 654.329375] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 654.342428] IPVS: set_ctl: invalid protocol: 0 7.0.0.0:20002 [ 654.344728] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 03:39:43 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x8010550e, &(0x7f0000000000)={0xa3}) [ 654.384999] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 654.405626] IPVS: set_ctl: invalid protocol: 0 7.0.0.0:20002 [ 654.426038] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 03:39:43 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185503, &(0x7f0000000000)={0xa3}) 03:39:43 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000278, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() [ 654.485143] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 654.541720] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 654.585545] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 654.637152] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 654.648138] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 654.667378] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 654.687893] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 654.703816] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 654.724638] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 654.736716] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 654.750506] Interruptibility = 00000000 ActivityState = 00000000 [ 654.756870] *** Host State *** [ 654.762975] RIP = 0xffffffff81212b2e RSP = 0xffff88018444f350 [ 654.769677] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 654.776217] FSBase=00007f901f655700 GSBase=ffff8801daf00000 TRBase=fffffe0000003000 [ 654.784391] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 654.790590] CR0=0000000080050033 CR3=00000001d19a9000 CR4=00000000001426e0 [ 654.797620] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff87c013a0 [ 654.804740] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 654.810873] *** Control State *** [ 654.814358] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 654.821296] EntryControls=0000d1ff ExitControls=002fefff [ 654.826767] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 03:39:44 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000080)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000300)) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x1, 0x9, 0xfffffffffffffffb, 0x401, 0x9, 0x40, 0x7, 0xa49, 0x8f, 0x1, 0x6, 0x9, 0x77a0, 0x3, 0x2], 0x5000, 0x1}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x80000) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) sendmsg$can_bcm(r5, &(0x7f0000000340)={&(0x7f0000000140), 0x10, &(0x7f00000002c0)={&(0x7f0000000240)={0x5, 0x220, 0x1f, {r6, r7/1000+30000}, {}, {0x0, 0x4, 0x7, 0xfffffffffffffffe}, 0x1, @can={{0x4, 0xffff, 0x1, 0x7ba}, 0x6, 0x2, 0x0, 0x0, "388a08b3b8fb745c"}}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x800) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 654.833804] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 654.840566] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 654.847137] reason=80000021 qualification=0000000000000000 [ 654.853564] IDTVectoring: info=00000000 errcode=00000000 [ 654.859075] TSC Offset = 0xfffffe9f381738dd [ 654.863394] TPR Threshold = 0x00 [ 654.866773] EPT pointer = 0x000000018646101e 03:39:44 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x4008550c, &(0x7f0000000000)={0xa3}) 03:39:44 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty=0x3f000000, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:44 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185560, &(0x7f0000000000)={0xa3}) 03:39:44 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x323, 0x0, 0x0) 03:39:44 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000021, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() 03:39:44 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x4b49, &(0x7f0000000000)={0xa3}) 03:39:44 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x8010550e, &(0x7f0000000000)={0xa3}) [ 654.991828] IPVS: set_ctl: invalid protocol: 0 63.0.0.0:20002 03:39:44 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045519, &(0x7f0000000000)={0xa3}) 03:39:44 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x100000000000005b, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() [ 655.046029] IPVS: set_ctl: invalid protocol: 0 63.0.0.0:20002 03:39:44 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045519, &(0x7f0000000000)={0xa3}) 03:39:44 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xb3, 0x0, 0x0) 03:39:44 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000100)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:39:44 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty=0x4800, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:44 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x541b, &(0x7f0000000000)={0xa3}) 03:39:44 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000268, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() 03:39:44 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc018550a, &(0x7f0000000000)={0xa3}) 03:39:44 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x2, &(0x7f0000000000)={0xa3}) [ 655.305184] IPVS: set_ctl: invalid protocol: 0 0.0.72.0:20002 [ 655.325472] IPVS: set_ctl: invalid protocol: 0 0.0.72.0:20002 [ 655.369566] *** Guest State *** [ 655.389510] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 03:39:44 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty=0x3, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:44 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x41045508, &(0x7f0000000000)={0xa3}) 03:39:44 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x2a2, 0x0, 0x0) [ 655.443164] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 655.504209] CR3 = 0x0000000000000000 [ 655.520830] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 655.547912] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 655.580458] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 03:39:44 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x541b, &(0x7f0000000000)={0xa3}) [ 655.599149] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 655.609246] IPVS: set_ctl: invalid protocol: 0 0.0.0.3:20002 [ 655.629526] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 03:39:44 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty=0x9, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:45 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x5452, &(0x7f0000000000)={0xa3}) [ 655.650868] IPVS: set_ctl: invalid protocol: 0 0.0.0.3:20002 [ 655.671612] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 655.720078] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 655.768072] IPVS: set_ctl: invalid protocol: 0 0.0.0.9:20002 [ 655.786938] IPVS: set_ctl: invalid protocol: 0 0.0.0.9:20002 [ 655.792038] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 655.816303] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 655.825676] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 655.845708] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 655.860432] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 655.870217] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 655.878824] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 655.885431] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 655.894199] Interruptibility = 00000000 ActivityState = 00000000 [ 655.900882] *** Host State *** [ 655.904238] RIP = 0xffffffff81212b2e RSP = 0xffff880185b9f350 [ 655.910697] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 655.917134] FSBase=00007f901f655700 GSBase=ffff8801daf00000 TRBase=fffffe0000034000 [ 655.925054] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 655.931007] CR0=0000000080050033 CR3=000000018d992000 CR4=00000000001426e0 [ 655.938089] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff87c013a0 [ 655.944762] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 655.950947] *** Control State *** [ 655.954407] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 655.961150] EntryControls=0000d1ff ExitControls=002fefff [ 655.966629] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 655.973608] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 655.980334] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 655.986914] reason=80000021 qualification=0000000000000000 [ 655.993288] IDTVectoring: info=00000000 errcode=00000000 [ 655.998796] TSC Offset = 0xfffffe9e9833718f [ 656.003119] TPR Threshold = 0x00 [ 656.006471] EPT pointer = 0x00000001c7f7501e [ 656.047953] *** Guest State *** [ 656.051263] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 656.060218] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 656.070198] CR3 = 0x0000000000000000 [ 656.073923] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 656.080009] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 656.085987] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 656.092716] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 656.100882] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 656.108937] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 656.116919] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 656.124969] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 656.132982] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 656.140996] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 656.149024] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 656.156996] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 656.165085] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 656.173088] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 656.179556] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 656.187016] Interruptibility = 00000000 ActivityState = 00000000 [ 656.193289] *** Host State *** [ 656.196528] RIP = 0xffffffff81212b2e RSP = 0xffff880182eff350 [ 656.203262] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 656.209746] FSBase=00007f901f612700 GSBase=ffff8801dae00000 TRBase=fffffe0000003000 [ 656.217555] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 656.223497] CR0=0000000080050033 CR3=000000018d992000 CR4=00000000001426f0 [ 656.230593] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87c013a0 [ 656.237256] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 656.243357] *** Control State *** [ 656.246849] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 656.253563] EntryControls=0000d1ff ExitControls=002fefff [ 656.259082] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 656.265993] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 656.272779] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 656.279386] reason=80000021 qualification=0000000000000000 [ 656.285693] IDTVectoring: info=00000000 errcode=00000000 [ 656.291200] TSC Offset = 0xfffffe9e9833718f [ 656.295523] TPR Threshold = 0x00 03:39:45 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000240)={0x0, 0x1, 0x7, 0x7}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) setsockopt$inet6_mreq(r5, 0x29, 0x0, &(0x7f0000000140)={@empty, r6}, 0x14) [ 656.298964] EPT pointer = 0x00000001c7f7501e 03:39:45 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0105502, &(0x7f0000000000)={0xa3}) 03:39:45 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x3b7, 0x0, 0x0) 03:39:45 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty=0xffffff7f, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001f9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() 03:39:45 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185508, &(0x7f0000000000)={0xa3}) 03:39:45 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185548, &(0x7f0000000000)={0xa3}) [ 656.361290] IPVS: set_ctl: invalid protocol: 0 255.255.255.127:20002 03:39:45 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty=0x63000000, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 656.405496] IPVS: set_ctl: invalid protocol: 0 255.255.255.127:20002 03:39:45 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185574, &(0x7f0000000000)={0xa3}) 03:39:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000277, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() [ 656.489542] *** Guest State *** 03:39:45 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty=0xa00, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 656.512629] IPVS: set_ctl: invalid protocol: 0 99.0.0.0:20002 [ 656.517350] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 03:39:45 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x151, 0x0, 0x0) [ 656.577011] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 656.625893] CR3 = 0x0000000000000000 [ 656.633068] IPVS: set_ctl: invalid protocol: 0 0.0.10.0:20002 [ 656.657918] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 656.673559] IPVS: set_ctl: invalid protocol: 0 0.0.10.0:20002 [ 656.686251] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 656.709592] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 656.726359] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 656.775630] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 656.788456] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 656.796454] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 656.804635] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 656.812705] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 656.821167] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 656.829271] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 656.837246] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 656.845332] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 656.853397] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 656.859901] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 656.867353] Interruptibility = 00000000 ActivityState = 00000000 [ 656.873648] *** Host State *** [ 656.876897] RIP = 0xffffffff81212b2e RSP = 0xffff880184557350 [ 656.882946] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 656.889440] FSBase=00007f901f655700 GSBase=ffff8801daf00000 TRBase=fffffe0000034000 [ 656.897251] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 656.903400] CR0=0000000080050033 CR3=00000001c6025000 CR4=00000000001426e0 [ 656.910486] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff87c013a0 [ 656.917174] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 656.923287] *** Control State *** [ 656.926747] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 656.933475] EntryControls=0000d1ff ExitControls=002fefff [ 656.938971] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 656.945898] VMEntry: intr_info=80000090 errcode=00000000 ilen=00000000 [ 656.952609] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 656.959233] reason=80000021 qualification=0000000000000000 [ 656.965554] IDTVectoring: info=00000000 errcode=00000000 [ 656.971088] TSC Offset = 0xfffffe9e00d9a21d [ 656.975437] TPR Threshold = 0x00 [ 656.978846] EPT pointer = 0x000000018514901e [ 657.017954] *** Guest State *** [ 657.021258] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 657.030336] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 657.039274] CR3 = 0x0000000000000000 [ 657.042998] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 657.049042] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 657.049062] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 657.061750] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 657.069794] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 657.077843] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 657.085819] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 657.093898] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 657.101913] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 657.109965] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 657.118575] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 657.126552] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 657.134648] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 657.142745] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 657.149210] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 657.156673] Interruptibility = 00000000 ActivityState = 00000000 [ 657.162944] *** Host State *** [ 657.166154] RIP = 0xffffffff81212b2e RSP = 0xffff88017a907350 [ 657.172191] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 657.178685] FSBase=00007f901f633700 GSBase=ffff8801dae00000 TRBase=fffffe0000003000 [ 657.186535] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 657.192475] CR0=0000000080050033 CR3=00000001c6025000 CR4=00000000001426f0 [ 657.199552] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87c013a0 [ 657.206252] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 657.212358] *** Control State *** [ 657.215817] PinBased=0000003f CPUBased=b5a06dfe SecondaryExec=000000c3 [ 657.222560] EntryControls=0000d1ff ExitControls=002fefff [ 657.228048] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 657.234963] VMEntry: intr_info=80000090 errcode=00000000 ilen=00000000 [ 657.241672] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 657.248847] reason=80000021 qualification=0000000000000000 [ 657.255160] IDTVectoring: info=00000000 errcode=00000000 [ 657.260655] TSC Offset = 0xfffffe9e00d9a21d [ 657.264994] TPR Threshold = 0x00 03:39:46 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$KVM_GET_EMULATED_CPUID(r2, 0xc008ae09, &(0x7f0000000940)=""/4096) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, &(0x7f0000000100), 0x4) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000540)={"abb5a5632fb1edca7cc8fde9ea0b7dba730769792977c44a1b2c8792b005236159fa019fd976c7a2787e6918b5898645b25225be030b8890249e59bbb563db4004b5658fe7fb9c5431ddefcc80d7c5984a574bb84c8eaa109f792f0534e45fb362b40451d9795c5016219ddc7f99cd1c85957656ad3e6bdb6d175242aa02073d76fe5d55944816f45ddb4ee4b65a280c07125a8fb40bdd7f59704221fe14f2dd06f544dab193f057e8dbad262249a9ec11fbfe4ea2a3feca7440a11970fbc3632710d8fb14d0abf67b6196b518d3c15a2d8691c06b08c0dad40a529bae54f80c51758728cf008e8da9a2d3081c622429b277f6365107e444b4ab9223fa7d10315d9ade73a2d6b0740b5f03652f14710671b210dded3765a6c6f0247c95945d4eac94bfb309081b96203cdd87190bd5c41ab71cd29bf01100d8371b2494a005b1c7b947cd69641aff6161cc39b9d6bc655d4f64ac7c39ab53b53b05ad6c8cb2b29b148206ae33177ad5968e0a3480927f7280523b7456d3c6d9c8ede9b763b6181f3a3cfcb74b725eb429d39232b06f7d638f0c286770413007f9b465b7eaf2655d3d4230d3b2f354946b0d939cb020526ce4cbf7c754bde2ac677230965adae356a667cd0b9bcdbd09c84523b6c4e81daa15a481e48d8efb6edd3788072dcb365f6dbdb57077198b3308e4dcaed03f856935451980bfc866577a85370e6105eb7f1fd11dbc7f1f3837f2c2dc2fdd0f0b706d0dbef5417a31e0d4da3fb9a3023774f0c7cf5a56b443f0a64761ab823ee2dfa682b803a5ca80ef50d92473b0c9ee3b10241261d19f7c07eb500e3bfab81e05ffee807aafc53ff3aa7dd8738ed6671a02b3945d6903271bb224efb9e94625b9048eab7d727e32a75d283f0f57e1ec7a731f2cb13cf94c4542e0a2733ea8686a45f93f0740dc96fc0ee489f60ef07333c81ff42303c4720df6c6343d7c823dbca9f68ebe7ec392cdc3714178fb6382077135a47024a5d3034943f1ca64765f78ccfd150b77773ad55c0af026bd015e1c086a39cafb81ebd6bcc2eee23039d349bafc71c04df772fc752ae3f1a1ae467bad10f7ad7016b14105a0a881b74e16e67e6e73c1ba499379d80c33d8f341371b4869228ea137f692768af2127afe2fbd05b033d81b30894d4342f6b6a48e8f5867ce51b891327422c258f68698da7b6531467619461554279a0e4b8b4b2c16b9e37290572b24d19ff60facede495481a2be0a0cbc310c9173f2eb9841637f3b978b797b499099e6e85e4424be51cfba39646bb1cc23dd1846167754278f07022b21362a3213f3df7c9479e5fb2734dc398749b2dcf5679ad13a332c1ef2e1d513eb0a4c2d5f999295ccea5c10a7bd5035aacaafb44eb7e9cf033fa55807c969ab4c9b5607ed62b63a9ef3da0953b64ee2931d2a90b2b88e48a227ad8d59597"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:39:46 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x8004550f, &(0x7f0000000000)={0xa3}) 03:39:46 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc018550a, &(0x7f0000000000)={0xa3}) 03:39:46 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000012, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() 03:39:46 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty=0x84, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:46 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x69, 0x0, 0x0) [ 657.268400] EPT pointer = 0x000000018514901e 03:39:46 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185505, &(0x7f0000000000)={0xa3}) [ 657.323607] IPVS: set_ctl: invalid protocol: 0 0.0.0.132:20002 [ 657.342519] IPVS: set_ctl: invalid protocol: 0 0.0.0.132:20002 03:39:46 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty=0x74000000, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:46 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x4004550d, &(0x7f0000000000)={0xa3}) 03:39:46 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000248, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() 03:39:46 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x8, 0x0, 0x0) 03:39:46 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185568, &(0x7f0000000000)={0xa3}) [ 657.505522] IPVS: set_ctl: invalid protocol: 0 116.0.0.0:20002 [ 657.560315] IPVS: set_ctl: invalid protocol: 0 116.0.0.0:20002 03:39:47 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {r5, 0x2}}, 0x10) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:39:47 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty=0x500000000000000, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:47 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045503, &(0x7f0000000000)={0xa3}) 03:39:47 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000127, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() 03:39:47 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x8004550f, &(0x7f0000000000)={0xa3}) 03:39:47 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x23e, 0x0, 0x0) 03:39:47 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty=0x1100000000000000, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 658.327101] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 658.340932] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:39:47 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0105500, &(0x7f0000000000)={0xa3}) [ 658.397503] *** Guest State *** [ 658.408064] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 03:39:47 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045505, &(0x7f0000000000)={0xa3}) 03:39:47 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000185, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() [ 658.445931] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 658.508121] CR3 = 0x0000000000000000 [ 658.517056] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 658.529503] RSP = 0x0000000000000000 RIP = 0x0000000000000000 03:39:47 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x21c, 0x0, 0x0) 03:39:47 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x8008550e, &(0x7f0000000000)={0xa3}) [ 658.553653] usb usb9: usbfs: interface 0 claimed by hub while 'syz-executor1' sets config #163 [ 658.557294] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 658.569482] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 658.581348] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 658.610640] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 658.662814] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 658.700216] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 658.740476] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 658.776576] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 658.799941] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 658.808867] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 658.816950] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 658.826670] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 658.835137] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 658.843527] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 658.850296] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 658.857878] Interruptibility = 00000000 ActivityState = 00000000 [ 658.864110] *** Host State *** [ 658.867295] RIP = 0xffffffff81212b2e RSP = 0xffff880182867350 [ 658.873401] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 658.879879] FSBase=00007f901f655700 GSBase=ffff8801daf00000 TRBase=fffffe0000003000 [ 658.887768] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 658.893669] CR0=0000000080050033 CR3=000000018480f000 CR4=00000000001426e0 [ 658.900783] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87c013a0 [ 658.908928] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 658.914984] *** Control State *** [ 658.919153] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 658.925824] EntryControls=0000d1ff ExitControls=002fefff [ 658.931365] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 658.938361] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 03:39:48 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = syz_open_dev$sndpcmc(&(0x7f0000000280)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f00000002c0)=0x5, &(0x7f0000000300)=0x2) clock_gettime(0x0, &(0x7f0000000200)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000000)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)=0x0) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/policy\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x6f5, 0xff, 0x7, 0x1ff, 0x0, 0x400000000000000, 0x40, 0x1, 0x9, 0x7, 0x1, 0x20, 0x3f, 0x8, 0x6, 0xffffffffffffffff, 0x8, 0x3f, 0x8, 0x4, 0x4, 0xfffffffffffffffb, 0xcc, 0x7a8, 0x1, 0x10000, 0x8001, 0x4, 0x5, 0xffffffffecaea8ce, 0x86, 0x8, 0x1, 0x8, 0xffffffff, 0x8, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000080), 0x8}, 0x4170, 0x100, 0x10001, 0x3, 0x6, 0x2}, r5, 0xe, r6, 0xb) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 658.945028] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 658.951645] reason=80000021 qualification=0000000000000000 [ 658.958016] IDTVectoring: info=00000000 errcode=00000000 [ 658.963500] TSC Offset = 0xfffffe9cf94dafcd [ 658.967875] TPR Threshold = 0x01 [ 658.971248] EPT pointer = 0x0000000189bfd01e 03:39:48 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty=0x400000000000000, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:48 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185502, &(0x7f0000000000)={0xa3}) 03:39:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001c8, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() 03:39:48 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x5451, &(0x7f0000000000)={0xa3}) 03:39:48 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x3a4, 0x0, 0x0) 03:39:48 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000000)={0xa3}) 03:39:48 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty=0x1000000, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 659.047586] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 659.078792] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:39:48 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0045878, &(0x7f0000000000)={0xa3}) 03:39:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x100000000000000e, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() [ 659.192863] IPVS: set_ctl: invalid protocol: 0 1.0.0.0:20002 [ 659.221860] *** Guest State *** [ 659.233647] IPVS: set_ctl: invalid protocol: 0 1.0.0.0:20002 03:39:48 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc018556c, &(0x7f0000000000)={0xa3}) 03:39:48 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xac, 0x0, 0x0) [ 659.240021] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 659.310286] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 659.355074] CR3 = 0x0000000000000000 [ 659.364401] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 659.373708] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 659.389169] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 659.411233] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 659.420320] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 659.441676] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 659.450448] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 659.459771] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 659.479532] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 659.487785] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 659.495886] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 659.504222] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 659.512439] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 659.520981] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 659.527452] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 659.535179] Interruptibility = 00000000 ActivityState = 00000000 [ 659.542715] *** Host State *** [ 659.545916] RIP = 0xffffffff81212b2e RSP = 0xffff880181b47350 [ 659.552012] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 659.558501] FSBase=00007f901f655700 GSBase=ffff8801daf00000 TRBase=fffffe0000034000 [ 659.566345] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 659.572321] CR0=0000000080050033 CR3=0000000184301000 CR4=00000000001426e0 [ 659.579513] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff87c013a0 [ 659.586610] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 659.592732] *** Control State *** [ 659.596211] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 659.602952] EntryControls=0000d1ff ExitControls=002fefff 03:39:48 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) r2 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x7fffffff, 0x80) ioctl$KVM_ASSIGN_PCI_DEVICE(r2, 0x8040ae69, &(0x7f00000002c0)={0x8, 0x1cc6, 0x9, 0x7, 0xb8d}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x1, 0x0) write$binfmt_elf32(r0, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x5c5) ioctl$EVIOCREVOKE(r5, 0x40044591, &(0x7f0000000100)=0x1a2ac00000000000) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_GET_REG_LIST(r5, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="050000000000000000010000000000000200000000000000000008000000000000000100000000000400000000000000"]) fcntl$getownex(r5, 0x10, &(0x7f0000000340)={0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x1f, 0x2, 0xd89, 0xe00, 0x0, 0x9a6a, 0x4, 0xc, 0x80, 0x80, 0xe901, 0x69d, 0x7fffffff, 0x6, 0x3f, 0x6, 0x0, 0x8, 0x2, 0x0, 0xf1b6, 0x80000001, 0x5, 0x20, 0x4, 0x1, 0x18eb, 0x7, 0x1, 0x5, 0x7, 0x3, 0x8, 0x3, 0x1, 0x1f, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000300), 0xc}, 0x0, 0x7, 0xb4, 0x5, 0x401, 0x3f, 0x800}, r6, 0xd, r5, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000180), &(0x7f0000000240)=0x10) 03:39:48 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty=0x11, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 659.608510] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 659.615459] VMEntry: intr_info=8000001e errcode=00000000 ilen=00000000 [ 659.622191] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 659.629540] reason=80000021 qualification=0000000000000000 [ 659.635849] IDTVectoring: info=00000000 errcode=00000000 [ 659.641356] TSC Offset = 0xfffffe9c902b8c3c [ 659.645693] TPR Threshold = 0x00 [ 659.649301] EPT pointer = 0x000000017efaf01e 03:39:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001fd, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() 03:39:48 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185568, &(0x7f0000000000)={0xa3}) 03:39:48 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x80085504, &(0x7f0000000000)={0xa3}) 03:39:48 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x271, 0x0, 0x0) [ 659.735131] IPVS: set_ctl: invalid protocol: 0 0.0.0.17:20002 [ 659.757567] IPVS: set_ctl: invalid protocol: 0 0.0.0.17:20002 03:39:49 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty=0x48, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:49 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x40087602, &(0x7f0000000000)={0xa3}) 03:39:49 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x4020940d, &(0x7f0000000000)={0xa3}) 03:39:49 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001dc, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() [ 659.807344] *** Guest State *** [ 659.826829] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 03:39:49 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x113, 0x0, 0x0) [ 659.874639] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 659.942182] CR3 = 0x0000000000000000 [ 659.953725] IPVS: set_ctl: invalid protocol: 0 0.0.0.72:20002 [ 659.962296] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 659.985700] IPVS: set_ctl: invalid protocol: 0 0.0.0.72:20002 03:39:49 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x8038550a, &(0x7f0000000000)={0xa3}) [ 659.985882] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 660.049555] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 660.078008] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 660.089222] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 660.097643] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 660.106445] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 660.122483] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 660.131639] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 660.139774] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 660.147912] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 660.155983] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 660.164890] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 660.179183] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 660.195245] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 660.203830] Interruptibility = 00000000 ActivityState = 00000000 [ 660.210598] *** Host State *** [ 660.213814] RIP = 0xffffffff81212b2e RSP = 0xffff88017ef67350 [ 660.219877] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 660.226302] FSBase=00007f901f655700 GSBase=ffff8801dae00000 TRBase=fffffe0000003000 [ 660.234391] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 660.240381] CR0=0000000080050033 CR3=00000001d8d8a000 CR4=00000000001426f0 [ 660.247415] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87c013a0 [ 660.254179] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 660.260470] *** Control State *** [ 660.263946] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 660.270747] EntryControls=0000d1ff ExitControls=002fefff [ 660.276218] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 660.283819] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 660.290539] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 660.297142] reason=80000021 qualification=0000000000000000 [ 660.303519] IDTVectoring: info=00000000 errcode=00000000 [ 660.309002] TSC Offset = 0xfffffe9c37c387e5 [ 660.313308] TPR Threshold = 0x01 [ 660.316669] EPT pointer = 0x00000001854be01e 03:39:49 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:39:49 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty=0x3000000, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:49 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0045878, &(0x7f0000000000)={0xa3}) 03:39:49 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000091, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() 03:39:49 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xc6, 0x0, 0x0) 03:39:49 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185504, &(0x7f0000000000)={0xa3}) 03:39:49 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x8008551d, &(0x7f0000000000)={0xa3}) 03:39:49 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty=0x4c000000, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 660.432855] IPVS: set_ctl: invalid protocol: 0 3.0.0.0:20002 [ 660.469136] IPVS: set_ctl: invalid protocol: 0 3.0.0.0:20002 03:39:49 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x5450, &(0x7f0000000000)={0xa3}) 03:39:49 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x100000000000015f, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() [ 660.524715] *** Guest State *** 03:39:49 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x2d3, 0x0, 0x0) [ 660.568773] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 03:39:49 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty=0x7a00, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 660.624297] IPVS: set_ctl: invalid protocol: 0 76.0.0.0:20002 [ 660.630683] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 660.680238] CR3 = 0x0000000000000000 [ 660.696970] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 660.725992] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 660.735290] IPVS: set_ctl: invalid protocol: 0 0.0.122.0:20002 [ 660.742790] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 660.749857] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 660.758732] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 660.766756] IPVS: set_ctl: invalid protocol: 0 0.0.122.0:20002 [ 660.773281] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 660.820934] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 660.832090] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 660.840670] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 660.852495] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 660.860756] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 660.868984] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 660.877000] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 660.885546] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 660.892022] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 660.899624] Interruptibility = 00000000 ActivityState = 00000000 [ 660.905849] *** Host State *** [ 660.909135] RIP = 0xffffffff81212b2e RSP = 0xffff880166177350 [ 660.915142] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 660.921683] FSBase=00007f901f655700 GSBase=ffff8801daf00000 TRBase=fffffe0000003000 [ 660.930229] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 660.936257] CR0=0000000080050033 CR3=00000001d8d8a000 CR4=00000000001426e0 [ 660.943509] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff87c013a0 [ 660.950257] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 660.956315] *** Control State *** [ 660.959835] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 660.966507] EntryControls=0000d1ff ExitControls=002fefff [ 660.972021] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 660.979012] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 660.985685] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 660.992303] reason=80000021 qualification=0000000000000000 [ 660.998744] IDTVectoring: info=00000000 errcode=00000000 [ 661.004196] TSC Offset = 0xfffffe9bd7feb2cc [ 661.008775] TPR Threshold = 0x00 [ 661.012586] EPT pointer = 0x0000000183d6601e [ 661.026604] *** Guest State *** [ 661.030175] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 661.039692] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 661.048789] CR3 = 0x0000000000000000 [ 661.052522] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 661.058743] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 661.064742] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 661.071553] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 661.079677] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 661.087671] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 661.095751] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 661.103795] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 661.111829] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 661.119856] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 661.127881] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 661.135897] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 661.143918] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 661.151939] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 661.158396] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 661.165857] Interruptibility = 00000000 ActivityState = 00000000 [ 661.172118] *** Host State *** [ 661.175332] RIP = 0xffffffff81212b2e RSP = 0xffff880166177350 [ 661.181602] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 661.188061] FSBase=00007f901f655700 GSBase=ffff8801daf00000 TRBase=fffffe0000034000 [ 661.195871] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 661.201862] CR0=0000000080050033 CR3=00000001d8d8a000 CR4=00000000001426e0 [ 661.208930] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff87c013a0 [ 661.215600] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 661.221696] *** Control State *** [ 661.225160] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 661.231863] EntryControls=0000d1ff ExitControls=002fefff [ 661.237319] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 661.244292] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 661.251010] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 661.257588] reason=80000021 qualification=0000000000000000 [ 661.263974] IDTVectoring: info=00000000 errcode=00000000 [ 661.269495] TSC Offset = 0xfffffe9b8f7a8f53 [ 661.273804] TPR Threshold = 0x00 03:39:50 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(r3, 0x4080aea2, &(0x7f0000000100)={[0x0, 0x100000, 0xd000, 0x6000], 0xaba3, 0x8, 0x1f}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2000000000) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$KVM_IRQ_LINE(r3, 0x4008ae61, &(0x7f0000000040)={0x0, 0x4406}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000000)) 03:39:50 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x40086602, &(0x7f0000000000)={0xa3}) 03:39:50 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185574, &(0x7f0000000000)={0xa3}) 03:39:50 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty=0x900, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:50 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000269, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() 03:39:50 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x1fd, 0x0, 0x0) [ 661.277155] EPT pointer = 0x0000000187c9301e 03:39:50 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty=0x8400, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 661.355705] IPVS: set_ctl: invalid protocol: 0 0.0.9.0:20002 03:39:50 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000000)={0xa3}) 03:39:50 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x4004550c, &(0x7f0000000000)={0xa3}) 03:39:50 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x600000, 0x10) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = dup(r4) connect$bt_rfcomm(r5, &(0x7f0000000080)={0x1f, {0x7, 0x3, 0x80000001, 0x10001, 0x7fff, 0xb4}}, 0xa) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x1a200}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000140)=0x7, 0x4) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000000)) 03:39:50 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x2ec, 0x0, 0x0) 03:39:50 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x100000000000008d, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() 03:39:50 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x5450, &(0x7f0000000000)={0xa3}) [ 661.593115] IPVS: set_ctl: invalid protocol: 0 0.0.132.0:20002 [ 661.627510] IPVS: set_ctl: invalid protocol: 0 0.0.132.0:20002 03:39:51 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x8108551b, &(0x7f0000000000)={0xa3}) 03:39:51 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty=0x3f00, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:51 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x551f, &(0x7f0000000000)={0xa3}) 03:39:51 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = dup(r0) write$UHID_DESTROY(r1, &(0x7f0000000100), 0x4) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000140)) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000240)={[{0x9, 0x2, 0x2, 0x7, 0x20, 0x9, 0x0, 0x6, 0x6, 0xfffffffffffffff8, 0x40, 0x5}, {0x3ff, 0x1, 0x100, 0x0, 0x40, 0x70dd, 0x8b2, 0x8, 0x4, 0x6, 0xfffffff800000000, 0x8000, 0xffff}, {0x1, 0x1f, 0x8, 0x2b80000, 0xf95, 0x4, 0x6, 0x1, 0x9, 0xfffffffffffffff8, 0xe19, 0x4, 0x3}], 0x3}) 03:39:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x10000000000000e8, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() 03:39:51 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x5460, &(0x7f0000000000)={0xa3}) 03:39:51 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045515, &(0x7f0000000000)={0xa3}) 03:39:51 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty=0x7400000000000000, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 661.856630] IPVS: set_ctl: invalid protocol: 0 0.0.63.0:20002 [ 661.895529] IPVS: set_ctl: invalid protocol: 0 0.0.63.0:20002 [ 661.954411] *** Guest State *** 03:39:51 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc00c5512, &(0x7f0000000000)={0xa3}) 03:39:51 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x14, 0x0, 0x0) [ 661.978273] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 03:39:51 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x80086601, &(0x7f0000000000)={0xa3}) [ 662.054334] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 662.066060] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:39:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000029, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() 03:39:51 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty=0x11000000, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 662.099125] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 662.103720] CR3 = 0x0000000000000000 [ 662.121485] RSP = 0x0000000000000000 RIP = 0x0000000000000000 03:39:51 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc020660b, &(0x7f0000000000)={0xa3}) [ 662.157781] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 03:39:51 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185508, &(0x7f0000000000)={0xa3}) [ 662.198299] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 662.237309] IPVS: set_ctl: invalid protocol: 0 17.0.0.0:20002 [ 662.243534] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 662.270061] IPVS: set_ctl: invalid protocol: 0 17.0.0.0:20002 [ 662.282985] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 662.326604] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 662.374106] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 662.382430] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 662.406870] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 662.415751] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 662.424504] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 662.432630] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 662.440711] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 662.448750] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 662.455156] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 662.462695] Interruptibility = 00000000 ActivityState = 00000000 [ 662.468991] *** Host State *** [ 662.472183] RIP = 0xffffffff81212b2e RSP = 0xffff880184b87350 [ 662.478247] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 662.484697] FSBase=00007f901f655700 GSBase=ffff8801dae00000 TRBase=fffffe0000003000 [ 662.492546] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 662.498515] CR0=0000000080050033 CR3=00000001c17db000 CR4=00000000001426f0 [ 662.505547] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87c013a0 [ 662.512281] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 662.518407] *** Control State *** [ 662.521871] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 662.529298] EntryControls=0000d1ff ExitControls=002fefff [ 662.534762] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 662.541732] VMEntry: intr_info=8000001e errcode=00000000 ilen=00000000 [ 662.548442] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 662.555023] reason=80000021 qualification=0000000000000000 [ 662.561397] IDTVectoring: info=00000000 errcode=00000000 [ 662.566874] TSC Offset = 0xfffffe9b112611d1 [ 662.571239] TPR Threshold = 0x00 [ 662.574617] EPT pointer = 0x00000001b95a901e 03:39:51 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x22013, r0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:39:51 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045510, &(0x7f0000000000)={0xa3}) 03:39:51 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty=0x7, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:51 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185507, &(0x7f0000000000)={0xa3}) 03:39:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x100000000000013c, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() 03:39:51 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xfe, 0x0, 0x0) 03:39:51 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x40049409, &(0x7f0000000000)={0xa3}) [ 662.652616] IPVS: set_ctl: invalid protocol: 0 0.0.0.7:20002 03:39:52 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045510, &(0x7f0000000000)={0xa3}) 03:39:52 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty=0x74, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 662.709989] IPVS: set_ctl: invalid protocol: 0 0.0.0.7:20002 [ 662.759535] audit: type=1400 audit(2000000392.047:117): avc: denied { map } for pid=2319 comm="syz-executor2" path="socket:[123129]" dev="sockfs" ino=123129 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=socket permissive=1 03:39:52 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x3a0, 0x0, 0x0) 03:39:52 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000189, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() 03:39:52 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x80086601, &(0x7f0000000000)={0xa3}) 03:39:52 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:39:52 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0189436, &(0x7f0000000000)={0xa3}) 03:39:52 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty=0x6, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 662.931173] IPVS: set_ctl: invalid protocol: 0 0.0.0.116:20002 03:39:52 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000191, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() 03:39:52 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty=0x20000000, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 663.046514] IPVS: set_ctl: invalid protocol: 0 0.0.0.6:20002 [ 663.074492] IPVS: set_ctl: invalid protocol: 0 0.0.0.6:20002 03:39:52 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0045878, &(0x7f0000000000)={0xa3}) 03:39:52 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xc9, 0x0, 0x0) [ 663.132545] *** Guest State *** [ 663.150830] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 03:39:52 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185505, &(0x7f0000000000)={0xa3}) [ 663.199437] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 03:39:52 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x342, 0x0, 0x0) [ 663.292693] CR3 = 0x0000000000000000 [ 663.302666] IPVS: set_ctl: invalid protocol: 0 32.0.0.0:20002 [ 663.320536] RSP = 0x0000000000000000 RIP = 0x0000000000000000 03:39:52 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty=0xff000000, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:52 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185548, &(0x7f0000000000)={0xa3}) [ 663.343614] IPVS: set_ctl: invalid protocol: 0 32.0.0.0:20002 [ 663.355743] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 663.397092] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 663.448649] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 03:39:52 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x100000000000007c, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() [ 663.492263] IPVS: set_ctl: invalid protocol: 0 255.0.0.0:20002 [ 663.503869] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 663.534029] IPVS: set_ctl: invalid protocol: 0 255.0.0.0:20002 [ 663.543118] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 663.597817] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 663.646288] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 663.671071] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 663.682728] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 663.692552] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 663.701012] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 663.709268] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 663.717391] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 663.724218] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 663.731876] Interruptibility = 00000000 ActivityState = 00000000 [ 663.738443] *** Host State *** [ 663.742925] RIP = 0xffffffff81212b2e RSP = 0xffff8801887d7350 [ 663.755968] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 663.766100] FSBase=00007f901f655700 GSBase=ffff8801dae00000 TRBase=fffffe0000003000 [ 663.774177] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 663.780321] CR0=0000000080050033 CR3=00000001b9e1b000 CR4=00000000001426f0 [ 663.787579] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87c013a0 [ 663.795717] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 663.808802] *** Control State *** [ 663.815852] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 663.831732] EntryControls=0000d1ff ExitControls=002fefff [ 663.842938] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 663.867818] VMEntry: intr_info=8000001e errcode=00000000 ilen=00000000 [ 663.874531] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 663.887743] reason=80000021 qualification=0000000000000000 [ 663.894073] IDTVectoring: info=00000000 errcode=00000000 [ 663.919774] TSC Offset = 0xfffffe9a6fd7c0df [ 663.924113] TPR Threshold = 0x00 [ 663.927483] EPT pointer = 0x00000001d4fb701e [ 663.988083] *** Guest State *** [ 663.991410] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 664.010692] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 664.029755] CR3 = 0x0000000000000000 [ 664.038778] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 664.051811] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 664.064647] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 664.071545] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 664.080518] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 664.088726] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 664.096807] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 664.105046] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 664.113197] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 664.122528] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 664.138515] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 664.146523] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 664.154830] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 664.163167] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 664.169639] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 664.177121] Interruptibility = 00000000 ActivityState = 00000000 [ 664.183568] *** Host State *** [ 664.186769] RIP = 0xffffffff81212b2e RSP = 0xffff88016636f350 [ 664.192793] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 664.199255] FSBase=00007f901f633700 GSBase=ffff8801dae00000 TRBase=fffffe0000034000 [ 664.207037] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 664.212983] CR0=0000000080050033 CR3=00000001b9e1b000 CR4=00000000001426f0 [ 664.220035] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff87c013a0 [ 664.226692] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 664.232775] *** Control State *** [ 664.236228] PinBased=0000003f CPUBased=b5a06dfe SecondaryExec=000000c3 [ 664.242966] EntryControls=0000d1ff ExitControls=002fefff [ 664.248478] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 664.255391] VMEntry: intr_info=8000001e errcode=00000000 ilen=00000000 [ 664.262094] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 664.268703] reason=80000021 qualification=0000000000000000 [ 664.275006] IDTVectoring: info=00000000 errcode=00000000 [ 664.280498] TSC Offset = 0xfffffe9a6fd7c0df [ 664.284816] TPR Threshold = 0x00 03:39:53 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x10107f, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:39:53 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000295, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() 03:39:53 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty=0x600, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:53 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x15, 0x0, 0x0) 03:39:53 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc018554c, &(0x7f0000000000)={0xa3}) 03:39:53 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc00c5512, &(0x7f0000000000)={0xa3}) [ 664.288272] EPT pointer = 0x00000001d4fb701e 03:39:53 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185506, &(0x7f0000000000)={0xa3}) 03:39:53 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001d2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() [ 664.397823] IPVS: set_ctl: invalid protocol: 0 0.0.6.0:20002 03:39:53 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty=0x2, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:53 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1}) [ 664.439047] IPVS: set_ctl: invalid protocol: 0 0.0.6.0:20002 [ 664.473569] *** Guest State *** [ 664.502966] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 03:39:53 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185504, &(0x7f0000000000)={0xa3}) 03:39:53 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty=0x4c, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 664.552909] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 664.574281] IPVS: set_ctl: invalid protocol: 0 0.0.0.2:20002 [ 664.585484] CR3 = 0x0000000000000000 [ 664.593710] usb usb9: usbfs: process 2478 (syz-executor5) did not claim interface 0 before use 03:39:53 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x357, 0x0, 0x0) [ 664.610119] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 664.638178] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 664.648252] usb usb9: usbfs: process 2482 (syz-executor5) did not claim interface 0 before use [ 664.658538] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 664.702306] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 664.714190] IPVS: set_ctl: invalid protocol: 0 0.0.0.76:20002 [ 664.733569] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 664.734462] IPVS: set_ctl: invalid protocol: 0 0.0.0.76:20002 [ 664.747306] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 664.756398] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 664.779042] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 664.792077] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 664.814958] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 664.828275] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 664.836426] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 664.847941] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 664.856241] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 664.862870] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 664.871637] Interruptibility = 00000000 ActivityState = 00000000 [ 664.878089] *** Host State *** [ 664.881413] RIP = 0xffffffff81212b2e RSP = 0xffff8801663cf350 [ 664.887501] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 664.894346] FSBase=00007f901f655700 GSBase=ffff8801daf00000 TRBase=fffffe0000003000 [ 664.902258] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 664.908235] CR0=0000000080050033 CR3=00000001c01d6000 CR4=00000000001426e0 [ 664.915251] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87c013a0 [ 664.922009] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 664.928114] *** Control State *** [ 664.931569] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 664.938288] EntryControls=0000d1ff ExitControls=002fefff [ 664.943760] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 664.950762] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 664.957442] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 03:39:54 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x200000000007, &(0x7f00000002c0)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000100)={'veth0_to_team\x00', 0x7}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 03:39:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000073, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() 03:39:54 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x2}) 03:39:54 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x80087601, &(0x7f0000000000)={0xa3}) 03:39:54 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty=0x4c00000000000000, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:54 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x2b8, 0x0, 0x0) [ 664.964718] reason=80000021 qualification=0000000000000000 [ 664.971114] IDTVectoring: info=00000000 errcode=00000000 [ 664.976562] TSC Offset = 0xfffffe99b7c4caed [ 664.980919] TPR Threshold = 0x00 [ 664.984285] EPT pointer = 0x00000001882bc01e 03:39:54 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x7a00000000000000}) 03:39:54 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty=0x6c00000000000000, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 665.076369] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 665.108956] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:39:54 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x550b, &(0x7f0000000000)={0xa3}) 03:39:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001b0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() [ 665.173730] *** Guest State *** [ 665.189868] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 665.254292] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 665.254387] vhci_hcd: invalid port number 0 [ 665.275870] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 665.283407] vhci_hcd: invalid port number 0 [ 665.298696] CR3 = 0x0000000000000000 03:39:54 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x7000000}) [ 665.303063] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:39:54 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x252, 0x0, 0x0) [ 665.330207] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 665.383630] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 665.409451] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 665.430217] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 665.446695] vhci_hcd: invalid port number 0 [ 665.453395] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 665.457117] vhci_hcd: invalid port number 0 [ 665.470746] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 665.503518] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 665.514033] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 665.557926] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 665.572841] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 665.581232] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 665.589385] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 665.597368] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 665.605429] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 665.612095] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 665.620334] Interruptibility = 00000000 ActivityState = 00000000 [ 665.626563] *** Host State *** [ 665.629865] RIP = 0xffffffff81212b2e RSP = 0xffff88016637f350 [ 665.635853] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 665.642335] FSBase=00007f901f655700 GSBase=ffff8801dae00000 TRBase=fffffe0000003000 [ 665.650184] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 665.656097] CR0=0000000080050033 CR3=0000000185ba4000 CR4=00000000001426f0 [ 665.663226] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87c013a0 [ 665.669961] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 665.676019] *** Control State *** [ 665.679534] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 665.686214] EntryControls=0000d1ff ExitControls=002fefff [ 665.691767] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 665.698743] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 03:39:55 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'syz0\x00'}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:39:55 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty=0x2000000, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:55 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x5452, &(0x7f0000000000)={0xa3}) 03:39:55 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x100000000000008b, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() 03:39:55 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x26c, 0x0, 0x0) 03:39:55 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x48}) [ 665.705426] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 665.712064] reason=80000021 qualification=0000000000000000 [ 665.718410] IDTVectoring: info=00000000 errcode=00000000 [ 665.723855] TSC Offset = 0xfffffe9957bb445e [ 665.728240] TPR Threshold = 0x00 [ 665.731608] EPT pointer = 0x00000001bbd9601e 03:39:55 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000267, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() 03:39:55 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x3}) 03:39:55 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x41045508, &(0x7f0000000000)={0xa3}) [ 665.848461] vhci_hcd: invalid port number 72 [ 665.859078] IPVS: set_ctl: invalid protocol: 0 2.0.0.0:20002 [ 665.864839] vhci_hcd: invalid port number 72 03:39:55 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty=0x48000000, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 665.910497] IPVS: set_ctl: invalid protocol: 0 2.0.0.0:20002 [ 665.951087] *** Guest State *** [ 665.968409] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 03:39:55 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x2d5, 0x0, 0x0) [ 666.016166] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 666.069676] CR3 = 0x0000000000000000 [ 666.086673] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 666.104919] IPVS: set_ctl: invalid protocol: 0 72.0.0.0:20002 03:39:55 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x5421, &(0x7f0000000000)={0xa3}) [ 666.117179] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 666.130784] IPVS: set_ctl: invalid protocol: 0 72.0.0.0:20002 [ 666.148688] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 666.179607] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 666.189750] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 666.198622] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 666.230346] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 666.246246] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 666.254973] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 666.290342] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 666.300902] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 666.309112] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 666.322486] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 666.330666] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 666.337203] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 666.345069] Interruptibility = 00000000 ActivityState = 00000000 [ 666.352743] *** Host State *** [ 666.356152] RIP = 0xffffffff81212b2e RSP = 0xffff8801866a7350 [ 666.362411] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 666.369046] FSBase=00007f901f655700 GSBase=ffff8801dae00000 TRBase=fffffe0000003000 [ 666.377025] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 666.383128] CR0=0000000080050033 CR3=00000001801d1000 CR4=00000000001426f0 [ 666.390363] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87c013a0 [ 666.397106] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 666.403990] *** Control State *** [ 666.407435] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 666.414173] EntryControls=0000d1ff ExitControls=002fefff [ 666.419725] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 666.426666] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 666.433386] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 666.440030] reason=80000021 qualification=0000000000000000 [ 666.446363] IDTVectoring: info=00000000 errcode=00000000 [ 666.451855] TSC Offset = 0xfffffe98ec9971c1 [ 666.456188] TPR Threshold = 0x00 [ 666.459636] EPT pointer = 0x000000018548201e [ 666.470015] *** Guest State *** [ 666.473348] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 666.482361] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 666.491266] CR3 = 0x0000000000000000 [ 666.494988] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 666.501383] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 666.507355] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 666.514092] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 666.522189] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 666.530250] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 666.530268] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 666.546308] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 666.554372] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 666.562423] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 666.570435] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 666.578554] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 666.586542] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 666.594570] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 666.601030] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 666.608585] Interruptibility = 00000000 ActivityState = 00000000 [ 666.614935] *** Host State *** [ 666.618215] RIP = 0xffffffff81212b2e RSP = 0xffff8801866a7350 [ 666.624198] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 666.630642] FSBase=00007f901f655700 GSBase=ffff8801daf00000 TRBase=fffffe0000034000 [ 666.638479] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 666.644352] CR0=0000000080050033 CR3=00000001801d1000 CR4=00000000001426e0 [ 666.651435] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff87c013a0 [ 666.658146] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 666.664193] *** Control State *** [ 666.667635] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 666.674362] EntryControls=0000d1ff ExitControls=002fefff [ 666.679864] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 03:39:56 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = request_key(&(0x7f0000000080)='.request_key_auth\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)="7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9", 0x0) fsetxattr$security_capability(r1, &(0x7f0000000000)='security.capability\x00', &(0x7f0000000340)=@v1={0x1000000, [{0x7, 0x7fffffff}]}, 0xc, 0x3) r4 = add_key(&(0x7f0000000180)='ceph\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000540)="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", 0x1000, 0xfffffffffffffffb) keyctl$negate(0xd, r3, 0x1, r4) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) fcntl$notify(r2, 0x402, 0x8) add_key$user(&(0x7f0000000440)='user\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000300)="bef6d387c84d7874c18409cea4d47aa0ea250ba34fb48730f9455bca19", 0x1d, r4) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3], 0x0, 0x1a200}) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0x88000, 0x0) ioctl$ASHMEM_GET_NAME(r6, 0x81007702, &(0x7f0000001540)=""/113) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f00000002c0)) ioctl$KVM_RUN(r5, 0xae80, 0x0) add_key$user(&(0x7f0000000400)='user\x00', &(0x7f00000015c0)={'syz', 0x3}, &(0x7f0000001600)="2f5cd5319b8b163b8961b5340514b6b178eec3771164683c6d9bd3e05e0b09040391bfe136ce425d7d4fdc235cb8edc10651db710b11603e06f7205d53e1edb5ccf589287de26086d079597c46d5375320ac15cd682fcaa61b00e3f153693e9a939258cf30f156eaa7fa8562b795baff8d9ace4040275f7f754bcbc4a5f08396708293e63bcdfe4e6c3eea3ebb0cd80a62fba76be835c564ff646c148425a2187cd99ea24782b392017c854301ef9190550353fd740bf18687e8d12812e696ecccdc31db8f098b0a12fdcc", 0xcb, r4) 03:39:56 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty=0x9000000, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:56 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x400000000000000}) 03:39:56 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000150, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() 03:39:56 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x40086602, &(0x7f0000000000)={0xa3}) 03:39:56 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x32, 0x0, 0x0) [ 666.686779] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 666.693506] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 666.700126] reason=80000021 qualification=0000000000000000 [ 666.706617] IDTVectoring: info=00000000 errcode=00000000 [ 666.712154] TSC Offset = 0xfffffe98ec9971c1 [ 666.716507] TPR Threshold = 0x00 [ 666.719908] EPT pointer = 0x000000018548201e 03:39:56 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x4c00}) 03:39:56 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty=0x2000, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 666.813865] IPVS: set_ctl: invalid protocol: 0 9.0.0.0:20002 [ 666.814585] vhci_hcd: invalid port number 0 [ 666.825642] vhci_hcd: invalid port number 0 03:39:56 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x4008550c, &(0x7f0000000000)={0xa3}) 03:39:56 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000047, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() [ 666.919260] *** Guest State *** [ 666.932542] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 03:39:56 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x1a8, 0x0, 0x0) 03:39:56 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0xffffffffa0010000}) [ 666.984515] IPVS: set_ctl: invalid protocol: 0 0.0.32.0:20002 [ 667.012356] vhci_hcd: invalid port number 0 [ 667.012761] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 667.047081] IPVS: set_ctl: invalid protocol: 0 0.0.32.0:20002 [ 667.062787] CR3 = 0x0000000000000000 [ 667.078104] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 667.103832] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 667.113956] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 667.145592] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 667.191473] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 667.202307] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 667.216938] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 667.225244] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 667.233495] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 667.241774] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 667.254966] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 667.264482] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 667.273160] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 667.281579] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 667.288292] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 667.295738] Interruptibility = 00000000 ActivityState = 00000000 [ 667.302035] *** Host State *** [ 667.305235] RIP = 0xffffffff81212b2e RSP = 0xffff8801748c7350 [ 667.311265] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 667.317771] FSBase=00007f901f655700 GSBase=ffff8801daf00000 TRBase=fffffe0000003000 [ 667.325576] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 667.331560] CR0=0000000080050033 CR3=000000018e482000 CR4=00000000001426e0 [ 667.339315] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87c013a0 [ 667.345982] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 667.352096] *** Control State *** [ 667.355557] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 667.362280] EntryControls=0000d1ff ExitControls=002fefff [ 667.367824] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 667.374744] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 667.381448] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 03:39:56 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) statfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)=""/226) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) dup(r2) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x80800, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)={0x2, [0x0, 0x0]}, &(0x7f0000000180)=0xc) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000400)={r4, 0x1000200000, 0x81c5, [0x6, 0x7, 0x3]}, &(0x7f00000003c0)=0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:39:56 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty=0x4, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:56 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x5}) 03:39:56 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x100000000000010d, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() 03:39:56 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x36a, 0x0, 0x0) [ 667.388083] reason=80000021 qualification=0000000000000000 [ 667.394403] IDTVectoring: info=00000000 errcode=00000000 [ 667.399889] TSC Offset = 0xfffffe986a1ba371 [ 667.404224] TPR Threshold = 0x00 [ 667.407581] EPT pointer = 0x00000001d288001e 03:39:56 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty=0x68, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 667.503826] IPVS: set_ctl: invalid protocol: 0 0.0.0.4:20002 03:39:56 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000129, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() 03:39:56 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x10000000000000}) [ 667.625978] *** Guest State *** [ 667.662136] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 667.691568] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 667.700534] IPVS: set_ctl: invalid protocol: 0 0.0.0.104:20002 [ 667.713953] CR3 = 0x0000000000000000 [ 667.718801] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 667.732379] vhci_hcd: invalid port number 0 [ 667.736957] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 667.746982] vhci_hcd: invalid port number 0 [ 667.748968] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 667.765740] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 667.792217] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 03:39:57 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x40085511, &(0x7f0000000000)={0xa3}) 03:39:57 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x70, 0x0, 0x0) 03:39:57 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty=0x3f00000000000000, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:57 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x2000000}) [ 667.817797] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 667.825826] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 667.834551] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 667.860984] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 667.880870] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 667.892707] vhci_hcd: invalid port number 0 [ 667.904650] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 667.909068] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 667.977988] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 667.986025] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 668.009530] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 668.015985] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 668.023884] Interruptibility = 00000000 ActivityState = 00000000 [ 668.030502] *** Host State *** [ 668.033717] RIP = 0xffffffff81212b2e RSP = 0xffff8801748df350 [ 668.040172] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 668.046606] FSBase=00007f901f655700 GSBase=ffff8801dae00000 TRBase=fffffe0000034000 [ 668.054752] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 668.061120] CR0=0000000080050033 CR3=00000001d349a000 CR4=00000000001426f0 [ 668.068245] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff87c013a0 [ 668.074946] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 668.081078] *** Control State *** [ 668.084540] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 668.091271] EntryControls=0000d1ff ExitControls=002fefff [ 668.096730] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 668.103736] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 668.110470] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 668.117048] reason=80000021 qualification=0000000000000000 [ 668.123441] IDTVectoring: info=00000000 errcode=00000000 [ 668.128974] TSC Offset = 0xfffffe98076eee7a [ 668.133295] TPR Threshold = 0x01 [ 668.136645] EPT pointer = 0x0000000189e7801e [ 668.154637] *** Guest State *** [ 668.159460] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 668.168465] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 668.177317] CR3 = 0x0000000000000000 [ 668.181127] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 668.187116] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 668.193203] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 668.200101] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 668.208151] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 668.216137] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 668.224191] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 668.232210] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 668.240252] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 668.248265] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 668.256225] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 668.264239] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 668.272251] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 668.280258] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 668.286680] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 668.294220] Interruptibility = 00000000 ActivityState = 00000000 [ 668.300525] *** Host State *** [ 668.303726] RIP = 0xffffffff81212b2e RSP = 0xffff8801748df350 [ 668.309787] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 668.316201] FSBase=00007f901f655700 GSBase=ffff8801dae00000 TRBase=fffffe0000034000 [ 668.324037] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 668.329974] CR0=0000000080050033 CR3=00000001d349a000 CR4=00000000001426f0 [ 668.337001] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff87c013a0 [ 668.343911] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 668.350051] *** Control State *** [ 668.353513] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 668.360215] EntryControls=0000d1ff ExitControls=002fefff [ 668.365679] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 668.372690] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 03:39:57 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000340)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) r4 = fcntl$getown(0xffffffffffffff9c, 0x9) r5 = socket(0x10, 0x3, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r5, &(0x7f00000006c0)={&(0x7f0000000200), 0xc, &(0x7f0000000680)={&(0x7f0000000280)={0x14, r6, 0x101}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) getresuid(&(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140)=0x0) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={r4, r7, r8}, 0xc) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:39:57 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x6800}) 03:39:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x10000000000000c8, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() 03:39:57 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty=0x7a00000000000000, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:57 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045503, &(0x7f0000000000)={0xa3}) 03:39:57 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x36f, 0x0, 0x0) [ 668.379427] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 668.386001] reason=80000021 qualification=0000000000000000 [ 668.392381] IDTVectoring: info=00000000 errcode=00000000 [ 668.397864] TSC Offset = 0xfffffe97beb58742 [ 668.402186] TPR Threshold = 0x01 [ 668.405671] EPT pointer = 0x000000018e48301e 03:39:57 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x60}) [ 668.455424] vhci_hcd: invalid port number 0 03:39:57 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0105500, &(0x7f0000000000)={0xa3}) 03:39:57 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x63, 0x0, 'dh\x00'}, 0x2c) 03:39:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000265, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() [ 668.538013] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 668.615090] vhci_hcd: invalid port number 96 03:39:57 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x200000000000000}) [ 668.639629] vhci_hcd: invalid port number 96 03:39:58 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0xa, 0x0, 'dh\x00'}, 0x2c) [ 668.670730] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:99 [ 668.685213] *** Guest State *** [ 668.700448] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:99 [ 668.710574] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 668.771026] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 668.794867] vhci_hcd: invalid port number 0 [ 668.810877] CR3 = 0x0000000000000000 [ 668.814988] vhci_hcd: invalid port number 0 [ 668.829898] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 668.839293] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:10 [ 668.846969] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 668.862457] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 668.871985] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:10 [ 668.880354] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 668.924257] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 668.933607] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 668.942374] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 668.950570] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 668.959632] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 668.967606] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 668.975679] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 668.983711] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 668.991765] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 668.999804] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 669.006200] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 669.013720] Interruptibility = 00000000 ActivityState = 00000000 [ 669.019996] *** Host State *** [ 669.023214] RIP = 0xffffffff81212b2e RSP = 0xffff88014df0f350 [ 669.029264] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 669.035702] FSBase=00007f901f655700 GSBase=ffff8801daf00000 TRBase=fffffe0000003000 [ 669.043558] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 669.049525] CR0=0000000080050033 CR3=00000001bdd93000 CR4=00000000001426e0 [ 669.056564] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87c013a0 [ 669.063339] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 669.069465] *** Control State *** [ 669.072928] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 669.079685] EntryControls=0000d1ff ExitControls=002fefff [ 669.085149] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 669.092811] VMEntry: intr_info=8000009e errcode=00000000 ilen=00000000 [ 669.099553] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 669.106154] reason=80000021 qualification=0000000000000000 [ 669.112530] IDTVectoring: info=00000000 errcode=00000000 [ 669.118041] TSC Offset = 0xfffffe97793faa19 03:39:58 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={r0, 0x2, 0x1, 0x40, &(0x7f0000000540)=[0x0, 0x0], 0x2}, 0x20) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_open_dev$dspn(&(0x7f00000003c0)='/dev/dsp#\x00', 0x9, 0x240000) ioctl$SG_GET_TIMEOUT(r4, 0x2202, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) r5 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$sock_ifreq(r0, 0x8967, &(0x7f0000000340)={'eql\x00', @ifru_ivalue}) ioctl$PPPIOCGMRU(r4, 0x80047453, &(0x7f0000000400)) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') write$P9_RSTAT(r5, &(0x7f00000005c0)={0xd0, 0x7d, 0x1, {0x0, 0xc9, 0x5, 0x3, {0x2, 0x3, 0x6}, 0x80000, 0x6, 0x100, 0xfffffffffffffff8, 0x2c, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9", 0x25, '^@eth0$[keyringuservmnet1mime_type[#-', 0x19, '/selinux/avc/cache_stats\x00', 0x2c, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}}, 0xd0) sendmsg$IPVS_CMD_GET_INFO(r5, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x84, r6, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x20, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x8}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6c}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0x84}, 0x1, 0x0, 0x0, 0x40488c0}, 0x20000000) setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0x3, &(0x7f0000000440)=0x80000000, 0x4) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000180)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:39:58 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x4020940d, &(0x7f0000000000)={0xa3}) [ 669.122399] TPR Threshold = 0x00 [ 669.125753] EPT pointer = 0x00000001891e501e 03:39:58 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x1b7, 0x0, 0x0) 03:39:58 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x1a0ffffffff}) 03:39:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000025, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() 03:39:58 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x5f5e0ff, 0x0, 'dh\x00'}, 0x2c) 03:39:58 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc018554c, &(0x7f0000000000)={0xa3}) 03:39:58 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:39:58 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x4c00000000000000}) [ 669.218264] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:57599 03:39:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x100000000000027a, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() [ 669.352919] *** Guest State *** 03:39:58 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x95, 0x0, 0x0) [ 669.398690] vhci_hcd: invalid port number 0 [ 669.398789] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 669.428613] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 669.438277] vhci_hcd: invalid port number 0 03:39:58 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 669.444510] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 669.471463] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 669.499858] CR3 = 0x0000000000000000 [ 669.513297] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 669.545753] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 669.552227] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 669.567152] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 669.580947] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 669.596929] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 669.618348] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 669.635253] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 669.639442] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 669.664000] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 669.679192] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 669.690832] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 669.699215] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 669.707187] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 669.715818] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 669.723930] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 669.730488] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 669.738022] Interruptibility = 00000000 ActivityState = 00000000 [ 669.744249] *** Host State *** [ 669.747430] RIP = 0xffffffff81212b2e RSP = 0xffff88014df0f350 [ 669.753512] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 669.759986] FSBase=00007f901f655700 GSBase=ffff8801daf00000 TRBase=fffffe0000034000 [ 669.767848] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 669.773742] CR0=0000000080050033 CR3=00000001bc5e9000 CR4=00000000001426e0 [ 669.780829] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff87c013a0 [ 669.787522] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 669.793676] *** Control State *** [ 669.797142] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 669.803872] EntryControls=0000d1ff ExitControls=002fefff [ 669.809398] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 669.816314] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 669.823138] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 669.829763] reason=80000021 qualification=0000000000000000 [ 669.836070] IDTVectoring: info=00000000 errcode=00000000 [ 669.841554] TSC Offset = 0xfffffe971bf3c301 [ 669.845876] TPR Threshold = 0x00 [ 669.849284] EPT pointer = 0x00000001bc5e801e [ 669.866393] *** Guest State *** [ 669.869792] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 669.878726] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 669.887574] CR3 = 0x0000000000000000 [ 669.891363] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 669.897350] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 669.903436] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 669.910263] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 669.918302] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 669.918331] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 669.934346] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 669.934366] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 669.950423] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 669.958510] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 669.966505] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 669.974549] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 669.982598] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 669.990627] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 669.997043] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 670.004641] Interruptibility = 00000000 ActivityState = 00000000 [ 670.010905] *** Host State *** [ 670.014088] RIP = 0xffffffff81212b2e RSP = 0xffff88014df77350 [ 670.020178] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 670.026720] FSBase=00007f901f633700 GSBase=ffff8801daf00000 TRBase=fffffe0000034000 [ 670.034600] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 670.040912] CR0=0000000080050033 CR3=00000001bc5e9000 CR4=00000000001426e0 [ 670.048010] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff87c013a0 [ 670.054707] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 670.060797] *** Control State *** [ 670.064253] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 670.070991] EntryControls=0000d1ff ExitControls=002fefff [ 670.076468] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 670.083435] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 670.090173] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 03:39:59 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x1d2) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000100)={r0, r4}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:39:59 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x4b47, &(0x7f0000000000)={0xa3}) 03:39:59 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0xffffff7f00000000}) 03:39:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000132, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() 03:39:59 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x32a, 0x0, 0x0) 03:39:59 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 670.096739] reason=80000021 qualification=0000000000000000 [ 670.103452] IDTVectoring: info=00000000 errcode=00000000 [ 670.108975] TSC Offset = 0xfffffe96d3b8e032 [ 670.113295] TPR Threshold = 0x00 [ 670.116645] EPT pointer = 0x00000001ba95901e 03:39:59 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x8004551a, &(0x7f0000000000)={0xa3}) 03:39:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x100000000000021a, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() 03:39:59 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x8}) 03:39:59 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 670.184366] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 670.191796] vhci_hcd: invalid port number 0 [ 670.204974] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:39:59 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x551f, &(0x7f0000000000)={0xa3}) [ 670.341541] *** Guest State *** 03:39:59 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x8038550a, &(0x7f0000000000)={0xa3}) [ 670.368580] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 670.372381] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 670.406573] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 670.437401] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 670.490644] CR3 = 0x0000000000000000 [ 670.509823] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 670.533105] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 670.547312] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 670.554505] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 670.562925] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 670.571906] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 670.580487] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 670.589132] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 670.597211] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 670.605816] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 670.613919] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 670.622105] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 670.630212] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 670.638273] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 670.644692] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 670.652320] Interruptibility = 00000000 ActivityState = 00000000 [ 670.658648] *** Host State *** [ 670.661846] RIP = 0xffffffff81212b2e RSP = 0xffff88014dee7350 [ 670.667948] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 670.674362] FSBase=00007f901f655700 GSBase=ffff8801dae00000 TRBase=fffffe0000034000 [ 670.682255] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 670.688192] CR0=0000000080050033 CR3=00000001bfff9000 CR4=00000000001426f0 [ 670.695196] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff87c013a0 [ 670.702182] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 670.708274] *** Control State *** [ 670.711714] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 670.718434] EntryControls=0000d1ff ExitControls=002fefff [ 670.723889] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 670.730848] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 670.737832] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 670.744396] reason=80000021 qualification=0000000000000000 [ 670.750799] IDTVectoring: info=00000000 errcode=00000000 [ 670.756258] TSC Offset = 0xfffffe9694aef22e [ 670.760619] TPR Threshold = 0x01 [ 670.763990] EPT pointer = 0x0000000189c0501e [ 670.807934] *** Guest State *** [ 670.811214] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 670.820340] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 670.829356] CR3 = 0x0000000000000000 [ 670.833082] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 670.833095] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 670.833110] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 670.833127] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 670.859871] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 670.867957] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 670.875953] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 670.884011] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 670.892050] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 670.900076] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 670.908103] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 670.916062] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 670.924175] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 670.932764] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 670.939262] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 670.946711] Interruptibility = 00000000 ActivityState = 00000000 [ 670.952989] *** Host State *** [ 670.956189] RIP = 0xffffffff81212b2e RSP = 0xffff88017fa0f350 [ 670.962225] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 670.968679] FSBase=00007f901f612700 GSBase=ffff8801dae00000 TRBase=fffffe0000003000 [ 670.976464] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 670.982409] CR0=0000000080050033 CR3=00000001bfff9000 CR4=00000000001426f0 [ 670.989469] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87c013a0 [ 670.996126] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 671.002216] *** Control State *** [ 671.005674] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 671.012386] EntryControls=0000d1ff ExitControls=002fefff [ 671.017887] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 671.024799] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 671.031510] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 671.038116] reason=80000021 qualification=0000000000000000 [ 671.044446] IDTVectoring: info=00000000 errcode=00000000 [ 671.049929] TSC Offset = 0xfffffe9694aef22e [ 671.054254] TPR Threshold = 0x01 03:40:00 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") setrlimit(0x5, &(0x7f0000000080)={0x3, 0x200}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:40:00 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x800000000000000}) 03:40:00 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x3bb, 0x0, 0x0) 03:40:00 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 671.057603] EPT pointer = 0x0000000189c0501e 03:40:00 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc018557a, &(0x7f0000000000)={0xa3}) 03:40:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000216, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() 03:40:00 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x60000000}) [ 671.094780] vhci_hcd: invalid port number 0 03:40:00 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045515, &(0x7f0000000000)={0xa3}) 03:40:00 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 671.171301] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:40:00 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0xffffff7f}) 03:40:00 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x8008551d, &(0x7f0000000000)={0xa3}) 03:40:00 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x8000000}) [ 671.317825] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 671.386967] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:40:00 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000240)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:40:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000281, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() 03:40:00 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x334, 0x0, 0x0) 03:40:00 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:40:00 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x4800}) 03:40:00 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1}) [ 671.483211] vhci_hcd: invalid port number 0 [ 671.559231] usb usb9: usbfs: process 2985 (syz-executor1) did not claim interface 0 before use [ 671.569542] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:40:00 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:40:00 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x10000000000000}) [ 671.600308] vhci_hcd: invalid port number 0 [ 671.608976] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 671.623306] vhci_hcd: invalid port number 0 [ 671.704513] *** Guest State *** 03:40:01 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x300}) 03:40:01 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x38a, 0x0, 0x0) [ 671.724761] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 671.754880] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:40:01 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:40:01 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x7a}) [ 671.792648] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 671.802133] vhci_hcd: invalid port number 0 [ 671.811191] vhci_hcd: invalid port number 0 [ 671.815791] CR3 = 0x0000000000000000 [ 671.821694] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 671.823828] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 671.828173] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 671.884076] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 671.903672] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 671.921359] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 671.929762] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 671.941344] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 671.944294] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 671.956410] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 671.964639] vhci_hcd: invalid port number 122 [ 671.972301] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 671.987372] vhci_hcd: invalid port number 122 [ 671.996062] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 672.016466] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 672.034860] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 672.050898] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 672.064826] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 672.071779] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 672.079574] Interruptibility = 00000000 ActivityState = 00000000 [ 672.085907] *** Host State *** [ 672.089371] RIP = 0xffffffff81212b2e RSP = 0xffff88017a9ff350 [ 672.095472] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 672.102707] FSBase=00007f901f655700 GSBase=ffff8801dae00000 TRBase=fffffe0000003000 [ 672.110745] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 672.116649] CR0=0000000080050033 CR3=00000001845f1000 CR4=00000000001426f0 [ 672.123780] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87c013a0 [ 672.130551] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 672.136608] *** Control State *** [ 672.140133] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 672.146825] EntryControls=0000d1ff ExitControls=002fefff [ 672.152402] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 672.159389] VMEntry: intr_info=8000009e errcode=00000000 ilen=00000000 [ 672.166059] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 672.172707] reason=80000021 qualification=0000000000000000 [ 672.179084] IDTVectoring: info=00000000 errcode=00000000 [ 672.184537] TSC Offset = 0xfffffe95d8f3e559 [ 672.188903] TPR Threshold = 0x00 [ 672.192282] EPT pointer = 0x00000001d2e1201e [ 672.237988] *** Guest State *** [ 672.241292] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 672.253449] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 672.262433] CR3 = 0x0000000000000000 [ 672.266159] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 672.272218] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 672.278258] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 672.284928] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 672.292967] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 672.301654] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 672.309714] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 672.317737] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 672.325733] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 672.333755] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 672.341768] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 672.349903] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 672.357944] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 672.365938] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 672.372408] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 672.379908] Interruptibility = 00000000 ActivityState = 00000000 [ 672.386163] *** Host State *** [ 672.389449] RIP = 0xffffffff81212b2e RSP = 0xffff880185247350 [ 672.395561] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 672.402027] FSBase=00007f901f612700 GSBase=ffff8801daf00000 TRBase=fffffe0000034000 [ 672.409871] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 672.415747] CR0=0000000080050033 CR3=00000001845f1000 CR4=00000000001426e0 [ 672.422820] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff87c013a0 [ 672.429526] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 672.435572] *** Control State *** [ 672.439082] PinBased=0000003f CPUBased=b5a06dfe SecondaryExec=000000c3 [ 672.445752] EntryControls=0000d1ff ExitControls=002fefff [ 672.451248] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 672.458266] VMEntry: intr_info=8000009e errcode=00000000 ilen=00000000 [ 672.464930] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 672.471585] reason=80000021 qualification=0000000000000000 [ 672.477946] IDTVectoring: info=00000000 errcode=00000000 [ 672.483394] TSC Offset = 0xfffffe95d8f3e559 03:40:01 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, &(0x7f0000000100)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 03:40:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x100000000000012e, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() 03:40:01 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x4000000}) 03:40:01 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x100000000000000}) 03:40:01 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:40:01 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x85, 0x0, 0x0) [ 672.487762] TPR Threshold = 0x00 [ 672.491152] EPT pointer = 0x00000001d2e1201e 03:40:01 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:40:01 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0xa000000}) 03:40:01 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x6c000000}) [ 672.544102] vhci_hcd: invalid port number 0 [ 672.551199] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 672.563985] vhci_hcd: invalid port number 0 03:40:02 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x20000000}) 03:40:02 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x10000000000000d5, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() [ 672.674608] *** Guest State *** [ 672.687277] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 672.693586] vhci_hcd: invalid port number 0 [ 672.699313] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 03:40:02 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 672.747146] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 672.771004] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 672.824651] CR3 = 0x0000000000000000 [ 672.839722] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 672.854136] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 672.864156] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 672.872244] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 672.877121] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 672.891620] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 672.900439] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 672.910026] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 672.924026] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 672.945711] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 672.953867] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 672.962089] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 672.970405] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 672.978669] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 672.986637] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 672.994699] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 673.001152] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 673.008720] Interruptibility = 00000000 ActivityState = 00000000 [ 673.014965] *** Host State *** [ 673.018237] RIP = 0xffffffff81212b2e RSP = 0xffff880183ac7350 [ 673.024223] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 673.030716] FSBase=00007f901f655700 GSBase=ffff8801daf00000 TRBase=fffffe0000034000 [ 673.039739] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 673.045647] CR0=0000000080050033 CR3=00000001ca161000 CR4=00000000001426e0 [ 673.052752] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff87c013a0 [ 673.059456] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 673.065507] *** Control State *** [ 673.069042] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 673.075723] EntryControls=0000d1ff ExitControls=002fefff [ 673.081267] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 673.088245] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 673.094915] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 673.101554] reason=80000021 qualification=0000000000000000 [ 673.107940] IDTVectoring: info=00000000 errcode=00000000 [ 673.113380] TSC Offset = 0xfffffe955378ebcb [ 673.117748] TPR Threshold = 0x01 [ 673.121122] EPT pointer = 0x00000001b40e101e [ 673.138967] *** Guest State *** [ 673.142284] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 673.153104] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 673.162180] CR3 = 0x0000000000000000 [ 673.165905] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 673.171938] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 673.178070] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 673.184796] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 673.192876] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 673.200928] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 673.208998] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 673.216975] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 673.225016] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 673.233062] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 673.241080] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 673.249087] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 673.257053] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 673.265762] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 673.272228] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 673.279712] Interruptibility = 00000000 ActivityState = 00000000 [ 673.285926] *** Host State *** [ 673.289156] RIP = 0xffffffff81212b2e RSP = 0xffff880183ac7350 [ 673.295163] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 673.301622] FSBase=00007f901f655700 GSBase=ffff8801daf00000 TRBase=fffffe0000003000 [ 673.309477] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 673.315355] CR0=0000000080050033 CR3=00000001ca161000 CR4=00000000001426e0 [ 673.322419] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87c013a0 [ 673.329151] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 673.335213] *** Control State *** [ 673.338723] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 673.345406] EntryControls=0000d1ff ExitControls=002fefff [ 673.350928] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 673.357904] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 673.364573] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 673.371187] reason=80000021 qualification=0000000000000000 [ 673.377510] IDTVectoring: info=00000000 errcode=00000000 [ 673.383019] TSC Offset = 0xfffffe951367b2cd 03:40:02 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x100000000000003) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r1, 0xc004ae02, &(0x7f0000000080)=ANY=[@ANYBLOB="06000000000000000000000000000000000008000000000000000000"]) 03:40:02 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x246, 0x0, 0x0) 03:40:02 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0xa00}) 03:40:02 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:40:02 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000016, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() 03:40:02 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x3f00}) [ 673.387351] TPR Threshold = 0x01 [ 673.391485] EPT pointer = 0x00000001d3b8401e 03:40:02 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x500}) 03:40:02 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x7a}) [ 673.442407] vhci_hcd: invalid port number 0 [ 673.449685] vhci_hcd: invalid port number 0 [ 673.455827] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 673.468008] vhci_hcd: invalid port number 0 [ 673.479736] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:40:02 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:40:02 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000039, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() 03:40:02 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x6000000000000000}) [ 673.586097] vhci_hcd: invalid port number 0 [ 673.620029] vhci_hcd: invalid port number 122 03:40:02 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x13f, 0x0, 0x0) 03:40:03 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x2, 0x80000, 0x4, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9", 0xfffffffffffeffff}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:40:03 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x1000000}) [ 673.706245] vhci_hcd: invalid port number 0 [ 673.709706] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:40:03 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x3}) 03:40:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x100000000000028a, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() 03:40:03 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 673.757954] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 673.868874] *** Guest State *** [ 673.875610] vhci_hcd: invalid port number 0 [ 673.877255] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 673.901141] vhci_hcd: invalid port number 0 03:40:03 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x48}) [ 673.915997] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 673.932427] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 673.944494] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 673.945178] CR3 = 0x0000000000000000 [ 673.954792] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 673.961194] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 03:40:03 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x2c7, 0x0, 0x0) 03:40:03 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:40:03 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x6000}) 03:40:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x10000000000000d9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() [ 673.970513] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 673.999718] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 674.056559] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 674.081441] vhci_hcd: invalid port number 72 [ 674.100912] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 674.108938] vhci_hcd: invalid port number 0 [ 674.115419] vhci_hcd: invalid port number 72 [ 674.125381] vhci_hcd: invalid port number 0 [ 674.127116] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:40:03 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 674.151036] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 03:40:03 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x40000000}) [ 674.186410] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 674.233108] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 674.265033] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 674.277862] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 674.296639] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 674.313195] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 674.332908] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 674.348247] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 674.356238] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 674.364424] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 674.372341] Interruptibility = 00000000 ActivityState = 00000000 [ 674.378717] *** Host State *** [ 674.381919] RIP = 0xffffffff81212b2e RSP = 0xffff880174bdf350 [ 674.388093] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 674.394534] FSBase=00007f901f655700 GSBase=ffff8801dae00000 TRBase=fffffe0000034000 [ 674.402527] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 674.408508] CR0=0000000080050033 CR3=000000018bde8000 CR4=00000000001426f0 [ 674.415539] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff87c013a0 [ 674.422267] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 674.428386] *** Control State *** [ 674.431840] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 674.438577] EntryControls=0000d1ff ExitControls=002fefff [ 674.444030] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 674.451027] VMEntry: intr_info=8000001e errcode=00000000 ilen=00000000 [ 674.457737] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 674.464339] reason=80000021 qualification=0000000000000000 [ 674.470727] IDTVectoring: info=00000000 errcode=00000000 [ 674.476186] TSC Offset = 0xfffffe94af4a8891 [ 674.480573] TPR Threshold = 0x00 [ 674.483947] EPT pointer = 0x000000014b0c701e [ 674.494831] *** Guest State *** [ 674.498713] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 674.507561] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 674.516472] CR3 = 0x0000000000000000 [ 674.520253] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 674.526232] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 674.532273] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 674.539056] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 674.547069] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 674.555114] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 674.563161] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 674.563181] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 674.579463] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 674.587438] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 674.595495] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 674.603554] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 674.611616] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 674.619631] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 674.626030] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 674.633554] Interruptibility = 00000000 ActivityState = 00000000 [ 674.639831] *** Host State *** [ 674.643023] RIP = 0xffffffff81212b2e RSP = 0xffff880174bdf350 [ 674.649061] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 674.655475] FSBase=00007f901f655700 GSBase=ffff8801daf00000 TRBase=fffffe0000034000 [ 674.663335] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 674.669272] CR0=0000000080050033 CR3=000000018bde8000 CR4=00000000001426e0 [ 674.676293] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff87c013a0 [ 674.683024] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 674.689114] *** Control State *** [ 674.692555] PinBased=0000003f CPUBased=b5a06dfe SecondaryExec=000000c3 [ 674.699458] EntryControls=0000d1ff ExitControls=002fefff [ 674.704921] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 674.711926] VMEntry: intr_info=8000001e errcode=00000000 ilen=00000000 [ 674.718650] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 674.725227] reason=80000021 qualification=0000000000000000 03:40:04 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x20000000000007, &(0x7f0000000100)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:40:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x100000000000005d, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() 03:40:04 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0xa00}) 03:40:04 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:40:04 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x5}) 03:40:04 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x94, 0x0, 0x0) [ 674.731596] IDTVectoring: info=00000000 errcode=00000000 [ 674.737055] TSC Offset = 0xfffffe94af4a8891 [ 674.741468] TPR Threshold = 0x00 [ 674.744848] EPT pointer = 0x000000014b0c701e 03:40:04 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 674.803246] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 674.806619] vhci_hcd: invalid port number 0 03:40:04 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0xffffffff00000000}) 03:40:04 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0xffffffffa0008000}) 03:40:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x10000000000000a6, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() [ 674.865069] vhci_hcd: invalid port number 0 [ 674.877241] *** Guest State *** [ 674.916592] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 674.943217] vhci_hcd: invalid port number 0 03:40:04 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x124, 0x0, 0x0) [ 674.968459] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 674.984183] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 675.004872] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:40:04 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x48000000}) [ 675.039993] CR3 = 0x0000000000000000 [ 675.072578] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 675.101897] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 675.119722] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 675.130215] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 675.164100] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 675.190509] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 675.207884] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 675.226821] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 675.235052] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 675.243688] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 675.252088] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 675.260163] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 675.268217] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 675.276191] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 675.283418] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 675.290963] Interruptibility = 00000000 ActivityState = 00000000 [ 675.297199] *** Host State *** [ 675.300478] RIP = 0xffffffff81212b2e RSP = 0xffff8801745f7350 [ 675.306484] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 675.312962] FSBase=00007f901f655700 GSBase=ffff8801dae00000 TRBase=fffffe0000003000 [ 675.320826] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 675.326718] CR0=0000000080050033 CR3=0000000190a0a000 CR4=00000000001426f0 [ 675.333793] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87c013a0 [ 675.340531] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 675.346632] *** Control State *** [ 675.350183] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 675.356898] EntryControls=0000d1ff ExitControls=002fefff [ 675.362412] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 675.369379] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 675.376043] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 675.382671] reason=80000021 qualification=0000000000000000 [ 675.389122] IDTVectoring: info=00000000 errcode=00000000 [ 675.394559] TSC Offset = 0xfffffe9425965380 [ 675.398947] TPR Threshold = 0x00 [ 675.402316] EPT pointer = 0x000000018831501e [ 675.448045] *** Guest State *** [ 675.451363] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 675.463521] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 675.472444] CR3 = 0x0000000000000000 [ 675.476171] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 675.482213] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 675.488249] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 675.494923] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 675.503037] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 675.511709] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 675.519759] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 675.527810] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 675.535785] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 675.544925] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 675.553222] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 675.561275] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 675.569302] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 675.577265] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 675.583710] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 675.591232] Interruptibility = 00000000 ActivityState = 00000000 [ 675.597467] *** Host State *** [ 675.600728] RIP = 0xffffffff81212b2e RSP = 0xffff88017458f350 [ 675.606744] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 675.613216] FSBase=00007f901f612700 GSBase=ffff8801dae00000 TRBase=fffffe0000034000 [ 675.621224] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 675.627102] CR0=0000000080050033 CR3=0000000190a0a000 CR4=00000000001426f0 [ 675.634172] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff87c013a0 [ 675.640891] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 675.646936] *** Control State *** [ 675.650429] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 675.657100] EntryControls=0000d1ff ExitControls=002fefff [ 675.662618] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 675.669608] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 675.676261] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 675.682884] reason=80000021 qualification=0000000000000000 [ 675.689244] IDTVectoring: info=00000000 errcode=00000000 [ 675.694679] TSC Offset = 0xfffffe9425965380 03:40:05 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) userfaultfd(0x800) 03:40:05 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:40:05 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x7a00000000000000}) 03:40:05 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000228, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() 03:40:05 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x8000a0}) 03:40:05 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x314, 0x0, 0x0) [ 675.699029] TPR Threshold = 0x00 [ 675.702396] EPT pointer = 0x000000018831501e 03:40:05 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 675.752008] vhci_hcd: invalid port number 0 [ 675.759987] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 675.769893] vhci_hcd: invalid port number 160 [ 675.810963] vhci_hcd: invalid port number 160 03:40:05 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x6c000000}) 03:40:05 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000053, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() [ 675.844968] *** Guest State *** 03:40:05 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x4c000000}) [ 675.883663] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 675.915244] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:40:05 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:40:05 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x21d, 0x0, 0x0) [ 675.952505] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 675.963805] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 676.028411] CR3 = 0x0000000000000000 [ 676.051054] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 676.059881] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 676.063534] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 676.106036] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 676.128057] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 676.134754] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 676.143533] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 676.152808] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 676.162614] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 676.170906] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 676.179116] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 676.187111] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 676.195215] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 676.203237] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 676.211293] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 676.219335] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 676.225771] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 676.233271] Interruptibility = 00000000 ActivityState = 00000000 [ 676.240086] *** Host State *** [ 676.243317] RIP = 0xffffffff81212b2e RSP = 0xffff88017458f350 [ 676.249380] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 676.255804] FSBase=00007f901f655700 GSBase=ffff8801daf00000 TRBase=fffffe0000003000 [ 676.263670] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 676.269596] CR0=0000000080050033 CR3=0000000188315000 CR4=00000000001426e0 [ 676.276623] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87c013a0 [ 676.283357] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 676.289448] *** Control State *** [ 676.292889] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 676.299584] EntryControls=0000d1ff ExitControls=002fefff [ 676.305053] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 676.312020] VMEntry: intr_info=8000001e errcode=00000000 ilen=00000000 [ 676.318709] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 676.325277] reason=80000021 qualification=0000000000000000 [ 676.331645] IDTVectoring: info=00000000 errcode=00000000 [ 676.337100] TSC Offset = 0xfffffe93a0b9c240 [ 676.341486] TPR Threshold = 0x00 [ 676.344859] EPT pointer = 0x00000001899ab01e [ 676.387915] *** Guest State *** [ 676.391201] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 676.403088] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 676.412022] CR3 = 0x0000000000000000 [ 676.415785] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 676.421836] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 676.427846] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 676.434508] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 676.442549] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 676.451351] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 676.459418] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 676.467401] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 676.475429] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 676.483478] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 676.491514] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 676.499563] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 676.507525] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 676.516207] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 676.522706] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 676.530192] Interruptibility = 00000000 ActivityState = 00000000 [ 676.536421] *** Host State *** [ 676.539772] RIP = 0xffffffff81212b2e RSP = 0xffff88018664f350 [ 676.545785] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 676.552275] FSBase=00007f901f612700 GSBase=ffff8801dae00000 TRBase=fffffe0000003000 [ 676.560185] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 676.566073] CR0=0000000080050033 CR3=0000000188315000 CR4=00000000001426f0 [ 676.573127] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87c013a0 [ 676.579970] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 676.586046] *** Control State *** [ 676.589567] PinBased=0000003f CPUBased=b5a06dfe SecondaryExec=000000c3 [ 676.596265] EntryControls=0000d1ff ExitControls=002fefff [ 676.601762] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 676.608783] VMEntry: intr_info=8000001e errcode=00000000 ilen=00000000 [ 676.615454] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 676.622070] reason=80000021 qualification=0000000000000000 [ 676.628423] IDTVectoring: info=00000000 errcode=00000000 [ 676.633879] TSC Offset = 0xfffffe93a0b9c240 03:40:05 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x300000000000000}) 03:40:05 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000212, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() 03:40:05 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x48000000}) 03:40:05 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:40:05 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) r4 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x6, 0x802) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000540)={{0xa, 0x2, 0x1f, 0x74b, '\x00', 0x6}, 0x0, [0x800, 0x8000, 0xa2, 0x8, 0x10001, 0xe8ca, 0x2, 0x1, 0x8, 0x8, 0x28, 0x20000000000, 0x80000000, 0x8a7, 0x7, 0x8, 0x9, 0x4e9c, 0x5, 0x9, 0x6, 0x7e0, 0xfffffffffffffff7, 0x81, 0x1, 0x1, 0x6, 0x80000001, 0x4, 0x8, 0x4, 0xc72c, 0x9, 0xb2, 0x4, 0x1, 0xca6f, 0x3, 0x7, 0x7, 0x200, 0x401, 0x7ff, 0x6, 0x3220, 0x81, 0xfff, 0x8, 0x1000, 0x15a, 0x7, 0x3f, 0x6, 0x9, 0x7ff, 0x1ff, 0x3, 0x0, 0xfffffffffffffc01, 0xac74, 0x9, 0x1000, 0x2, 0x2, 0x4, 0x94, 0xfffffffffffffffa, 0x8, 0x0, 0x8, 0x401, 0x1, 0x81, 0x3, 0x70, 0xf, 0x20, 0x1, 0x3, 0x8, 0x5, 0x8000, 0x6a3f, 0x4, 0x8be, 0x7fffffff, 0x5, 0x40, 0x9, 0xae8, 0xc0000, 0x76d3, 0x748, 0x6, 0xfffffffffffffffb, 0x100000000, 0x1, 0xb, 0x80000000, 0x92, 0x0, 0x1, 0x3, 0x7, 0x5, 0x62f, 0x7, 0x1, 0x6f21, 0x80000000, 0x112, 0xff, 0x1, 0xfff, 0x8000, 0x101, 0x9, 0x0, 0x100000000, 0x1, 0x2, 0x0, 0x6, 0x101, 0xffffffffffffffff, 0x0, 0x9, 0xd37], {0x77359400}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$UI_SET_FFBIT(r4, 0x4004556b, 0x2d) 03:40:05 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x2ad, 0x0, 0x0) [ 676.638633] TPR Threshold = 0x00 [ 676.642114] EPT pointer = 0x00000001899ab01e 03:40:06 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x3f000000}) 03:40:06 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x4000}) 03:40:06 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 676.709419] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 676.715778] vhci_hcd: invalid port number 0 [ 676.729884] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:40:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000190, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() 03:40:06 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x300}) [ 676.836617] *** Guest State *** [ 676.851627] vhci_hcd: invalid port number 0 [ 676.859238] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 676.878509] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:40:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000082, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() 03:40:06 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x10}) 03:40:06 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x195, 0x0, 0x0) [ 676.906542] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 676.930296] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 676.936266] CR3 = 0x0000000000000000 [ 676.940489] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 676.946743] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 03:40:06 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 676.953177] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 676.960205] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 676.968920] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 676.987896] vhci_hcd: invalid port number 0 [ 676.999382] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 03:40:06 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x2000000000000000}) [ 677.030659] vhci_hcd: invalid port number 16 [ 677.050257] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 677.082071] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 677.096869] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 677.128897] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 677.147615] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 677.155895] vhci_hcd: invalid port number 0 [ 677.176285] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 677.189924] vhci_hcd: invalid port number 0 [ 677.204665] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 677.213857] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 677.222716] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 677.230827] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 677.242251] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 677.250931] Interruptibility = 00000000 ActivityState = 00000000 [ 677.257190] *** Host State *** [ 677.261514] RIP = 0xffffffff81212b2e RSP = 0xffff880148517350 [ 677.267515] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 677.274063] FSBase=00007f901f655700 GSBase=ffff8801dae00000 TRBase=fffffe0000003000 [ 677.281945] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 677.288753] CR0=0000000080050033 CR3=00000001d3b85000 CR4=00000000001426f0 [ 677.295762] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87c013a0 [ 677.302488] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 677.308615] *** Control State *** [ 677.312059] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 677.318809] EntryControls=0000d1ff ExitControls=002fefff [ 677.324286] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 677.331293] VMEntry: intr_info=8000001e errcode=00000000 ilen=00000000 [ 677.338019] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 677.344626] reason=80000021 qualification=0000000000000000 [ 677.351002] IDTVectoring: info=00000000 errcode=00000000 [ 677.356476] TSC Offset = 0xfffffe93192ee56a [ 677.360858] TPR Threshold = 0x00 [ 677.364245] EPT pointer = 0x0000000186b2301e [ 677.407971] *** Guest State *** [ 677.411334] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 677.421419] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 677.430365] CR3 = 0x0000000000000000 [ 677.434128] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 677.440192] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 677.446183] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 677.452924] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 677.460977] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 677.469066] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 677.477079] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 677.485175] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 677.493211] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 677.501262] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 677.509306] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 677.517363] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 677.525498] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 677.533543] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 677.540807] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 677.549983] Interruptibility = 00000000 ActivityState = 00000000 [ 677.556254] *** Host State *** [ 677.559649] RIP = 0xffffffff81212b2e RSP = 0xffff880148607350 [ 677.565739] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 677.572262] FSBase=00007f901f612700 GSBase=ffff8801dae00000 TRBase=fffffe0000034000 [ 677.580116] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 677.586007] CR0=0000000080050033 CR3=00000001d3b85000 CR4=00000000001426f0 [ 677.593141] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff87c013a0 [ 677.599859] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 677.605948] *** Control State *** [ 677.609516] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 677.616190] EntryControls=0000d1ff ExitControls=002fefff [ 677.621726] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 677.628816] VMEntry: intr_info=8000001e errcode=00000000 ilen=00000000 [ 677.635471] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 677.642544] reason=80000021 qualification=0000000000000000 [ 677.648924] IDTVectoring: info=00000000 errcode=00000000 [ 677.654377] TSC Offset = 0xfffffe93192ee56a 03:40:06 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:40:06 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x7a00}) 03:40:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x100000000000019d, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() 03:40:06 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:40:06 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x74}) 03:40:06 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x2c9, 0x0, 0x0) [ 677.658749] TPR Threshold = 0x01 [ 677.662121] EPT pointer = 0x0000000186b2301e 03:40:07 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x6}) 03:40:07 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 677.721333] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 677.727963] vhci_hcd: invalid port number 116 [ 677.731175] vhci_hcd: invalid port number 0 [ 677.748749] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:40:07 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x4}) 03:40:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0xfffffffffffffebd, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000283, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x0, 0x3}}, 0x20) gettid() 03:40:07 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x68}) 03:40:07 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) [ 677.886615] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 677.923567] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 03:40:07 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) ioctl(r0, 0x4000000008912, &(0x7f00000000c0)="153f6234418dd25d766070") r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001980)=ANY=[@ANYRES64=r3, @ANYBLOB="e56717e027712af0f5d3960888572a8f38f10a8a37edb288f81605d4fe3a08d8221d2af26ff15d472cfc5347f7ab3d607c4eb7b517c2bfcee6e827645925126a6da19cacce32659d98", @ANYPTR=&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYPTR=&(0x7f0000000540)=ANY=[@ANYRES16, @ANYBLOB="0a237e7f2b9270b13e877461d8c296ff1b267e241829e47de6b77bef5f7232ef33359366036a61fe9faacba29ef9b61d7e6e4560ed58c0f3f491efb22234699630c2ed067751af287e78ac09673768a5baf13094d06fc402384142e20124f58678cd82e03f766204c1f8a44b62559c20145e85f383af205a6fa1353f0154d99422acafb19893e0fb3a0480710d6c14dd356efcecb50d728ab6110f82cb400f33fb024ac025f60f6a41ccfc28f955cc419f0255d0f59ee8b6e8a170dd9bb49007545401cca85ec0ba2304ff65b3064f4515b3c82a463abf5f8a803c1459a19a8718ea752f199a0a6e7f0fb430", @ANYBLOB="73e705eb5df2c19e65b57ce743e0c039e80c9700057cc2c159d07235a37d935983496c712165dab257fb37848f6b3b51d8783713946287ee81790f98d3ee0300f35af1ceedca5df414826f9e7577d0", @ANYBLOB="5436fc5f3102f30930483aa6da3cc519572270b0e44c2896347927815d95f04546c6e6801d52a19ae1c170ea5c23342ae15bacc185bf2349db623cd38c44d10a14acf505d852ac00f25fdca62fb2"], @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRESDEC=r3, @ANYRES16=r3, @ANYBLOB="23329c7789f72431cb015da7d57b91df61398ecfb7c31722e293c10753f6f452a9b66d6b37fb504fd530d151346477deb3eb73402ff24ee1dd2ed680082a883c86cba3f18f2abed12ba67be677809d6e1683f232bbee7f5a502f13ec6b9f0652da0d6e32839a74d7ecc04d0047df7977e710b8d9aa08067a3200e4d6360104e1", @ANYRESDEC=r0, @ANYRES32=r3, @ANYPTR64], @ANYRESHEX=r0], @ANYPTR=&(0x7f0000001840)=ANY=[@ANYRES32=r2, @ANYRESHEX=0x0, @ANYPTR=&(0x7f00000003c0)=ANY=[@ANYRESDEC], @ANYPTR64=&(0x7f0000001740)=ANY=[@ANYRESOCT, @ANYBLOB="6fd00cb65e51e6e9ac90fe75d5d76536b7f6baa89750c746e997d64d0321968bb00b9552ea175cb116c36adf10649b385816d020e31d4b5769be485f1623835ece147d00358aa9c23f4f749a4dc5cc473df0a481110fc5e2c1dcf94468f9b4436fda9236295526de24cc0c5a67e8330342a089d7a08665da0610b0f63a7927a48b6652b64b9073bd15f35ebaaa71aa44d1069035b8", @ANYRESOCT=r0, @ANYPTR64, @ANYPTR64], @ANYPTR64=&(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYRESHEX=r0, @ANYRES64, @ANYPTR64, @ANYPTR64, @ANYRESHEX=r0, @ANYPTR64, @ANYRESOCT]], @ANYRES16=r1, @ANYPTR], &(0x7f0000000380)=0x6) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400000, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x20, 0x10001, 0x2f, 0x4, 0xe1, 0x9, 0x6b33aa38, {0x0, @in={{0x2, 0x4e22, @broadcast}}, 0x0, 0x3, 0xddfd, 0x20000, 0x3}}, &(0x7f0000000240)=0xb0) setsockopt$inet6_MRT6_DEL_MFC(r4, 0x29, 0xcd, &(0x7f0000001880)={{0xa, 0x4e24, 0x5, @mcast1, 0x2}, {0xa, 0x4e22, 0x1ff, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1b}}}, 0x8, [0x9, 0x8fba, 0x7, 0x6, 0x40, 0x69a, 0x80, 0x20]}, 0x5c) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000280)={r5, 0x1f80000000000}, 0x8) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r7, 0xae80, 0x0) 03:40:07 executing program 4: r0 = socket$inet(0x2, 0x200000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0x44, 0x0, 0x0) 03:40:07 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x4}) [ 678.029536] vhci_hcd: invalid port number 104 03:40:07 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x500000000000000}) 03:40:07 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x0, 'dh\x00'}, 0x2c) 03:40:07 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x4c}) [ 678.095287] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 678.125433] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 678.172653] *** Guest State *** [ 678.191208] vhci_hcd: invalid port number 0 [ 678.195625] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 678.246879] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 678.273228] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 678.276404] vhci_hcd: invalid port number 76 [ 678.294904] ================================================================== [ 678.302598] BUG: KASAN: slab-out-of-bounds in vhci_hub_control+0x1b6d/0x1be0 [ 678.302675] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 678.309791] Read of size 4 at addr ffff8801cdea03bc by task syz-executor5/3484 [ 678.309800] [ 678.309819] CPU: 0 PID: 3484 Comm: syz-executor5 Not tainted 4.19.0-rc8+ #65 [ 678.309829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 678.309835] Call Trace: [ 678.309860] dump_stack+0x1c4/0x2b4 [ 678.309885] ? dump_stack_print_info.cold.2+0x52/0x52 [ 678.309903] ? printk+0xa7/0xcf [ 678.309925] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 678.323814] vhci_hcd: invalid port number 76 [ 678.324855] print_address_description.cold.8+0x9/0x1ff [ 678.324877] kasan_report.cold.9+0x242/0x309 [ 678.324893] ? vhci_hub_control+0x1b6d/0x1be0 [ 678.324915] __asan_report_load4_noabort+0x14/0x20 [ 678.349260] CR3 = 0x0000000000000000 [ 678.352866] vhci_hub_control+0x1b6d/0x1be0 [ 678.352894] ? vhci_hcd_probe+0x240/0x240 [ 678.352927] ? rcu_read_lock_sched_held+0x108/0x120 [ 678.352948] ? __kmalloc+0x5de/0x760 [ 678.369098] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 678.370737] ? kasan_check_write+0x14/0x20 [ 678.370759] ? do_raw_spin_lock+0xc1/0x200 [ 678.370780] ? usb_hcd_submit_urb+0x6fc/0x20a0 [ 678.370807] usb_hcd_submit_urb+0x17bb/0x20a0 [ 678.429012] ? vhci_hcd_probe+0x240/0x240 [ 678.433187] ? usb_create_hcd+0x40/0x40 [ 678.437171] ? do_syscall_64+0x1b9/0x820 [ 678.441240] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 678.446650] ? __x64_sys_ioctl+0x73/0xb0 [ 678.450736] ? do_syscall_64+0x1b9/0x820 [ 678.454800] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 678.460174] ? find_held_lock+0x36/0x1c0 [ 678.464462] ? __lockdep_init_map+0x105/0x590 [ 678.468963] ? __lockdep_init_map+0x105/0x590 [ 678.473491] usb_submit_urb+0x893/0x14e0 [ 678.477558] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 678.482870] usb_start_wait_urb+0x13d/0x370 [ 678.487198] ? sg_clean+0x240/0x240 [ 678.490872] usb_control_msg+0x332/0x4e0 [ 678.494944] ? usb_start_wait_urb+0x370/0x370 [ 678.499455] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 678.505037] proc_control+0x99b/0xef0 [ 678.508854] ? proc_bulk+0xa70/0xa70 [ 678.512584] usbdev_do_ioctl+0x1eb8/0x3b50 [ 678.516833] ? processcompl_compat+0x680/0x680 [ 678.521423] ? futex_wait+0x5ec/0xa50 [ 678.525239] ? mark_held_locks+0x130/0x130 [ 678.529493] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 678.534693] ? graph_lock+0x170/0x170 [ 678.538520] ? drop_futex_key_refs.isra.15+0x6d/0xe0 [ 678.543638] ? futex_wake+0x304/0x760 [ 678.547477] ? find_held_lock+0x36/0x1c0 [ 678.551554] ? avc_has_extended_perms+0x8cb/0x15a0 [ 678.556508] ? lock_downgrade+0x900/0x900 [ 678.560670] ? check_preemption_disabled+0x48/0x200 [ 678.565701] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 678.571503] ? kasan_check_read+0x11/0x20 [ 678.575660] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 678.580943] ? rcu_bh_qs+0xc0/0xc0 [ 678.584488] ? rcu_bh_qs+0xc0/0xc0 [ 678.588043] ? unwind_dump+0x190/0x190 [ 678.591945] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 678.597502] ? avc_has_extended_perms+0xab2/0x15a0 [ 678.602489] ? avc_ss_reset+0x190/0x190 [ 678.606484] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 678.612286] ? kasan_check_read+0x11/0x20 [ 678.616442] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 678.621726] ? rcu_bh_qs+0xc0/0xc0 [ 678.625318] ? ___might_sleep+0x1ed/0x300 [ 678.629486] ? arch_local_save_flags+0x40/0x40 [ 678.634071] ? __might_fault+0x12b/0x1e0 [ 678.638149] ? lock_downgrade+0x900/0x900 [ 678.642314] usbdev_ioctl+0x25/0x30 [ 678.645970] ? usbdev_compat_ioctl+0x30/0x30 [ 678.650399] do_vfs_ioctl+0x1de/0x1720 [ 678.654300] ? ioctl_preallocate+0x300/0x300 [ 678.658725] ? selinux_file_mprotect+0x620/0x620 [ 678.663504] ? __rhashtable_walk_find_next+0x910/0xe60 [ 678.668793] ? __sanitizer_cov_trace_cmp8+0xb/0x20 [ 678.673727] ? put_timespec64+0x10f/0x1b0 [ 678.677895] ? nsecs_to_jiffies+0x30/0x30 [ 678.682054] ? do_syscall_64+0x9a/0x820 [ 678.686035] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 678.691575] ? security_file_ioctl+0x94/0xc0 [ 678.695992] ksys_ioctl+0xa9/0xd0 [ 678.699630] __x64_sys_ioctl+0x73/0xb0 [ 678.703535] do_syscall_64+0x1b9/0x820 [ 678.707431] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 678.712816] ? syscall_return_slowpath+0x5e0/0x5e0 [ 678.717749] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 678.722601] ? trace_hardirqs_on_caller+0x310/0x310 [ 678.727622] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 678.732651] ? prepare_exit_to_usermode+0x291/0x3b0 [ 678.737686] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 678.742539] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 678.747734] RIP: 0033:0x457569 [ 678.750934] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 678.769838] RSP: 002b:00007f92727a3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 678.777563] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569 [ 678.784836] RDX: 0000000020000000 RSI: 00000000c0185500 RDI: 0000000000000003 [ 678.792122] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 678.799394] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f92727a46d4 [ 678.806669] R13: 00000000004bf6ac R14: 00000000004cf598 R15: 00000000ffffffff [ 678.813958] [ 678.815586] Allocated by task 5499: [ 678.819218] save_stack+0x43/0xd0 [ 678.822683] kasan_kmalloc+0xc7/0xe0 [ 678.826412] kasan_slab_alloc+0x12/0x20 [ 678.830419] kmem_cache_alloc+0x12e/0x730 [ 678.834572] getname_flags+0xd0/0x5a0 [ 678.838370] user_path_at_empty+0x2d/0x50 [ 678.842519] do_readlinkat+0x156/0x410 [ 678.846403] __x64_sys_readlink+0x78/0xb0 [ 678.850555] do_syscall_64+0x1b9/0x820 [ 678.854461] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 678.859643] [ 678.861282] Freed by task 5499: [ 678.864561] save_stack+0x43/0xd0 [ 678.868013] __kasan_slab_free+0x102/0x150 [ 678.872263] kasan_slab_free+0xe/0x10 [ 678.876067] kmem_cache_free+0x83/0x290 [ 678.880037] putname+0xf2/0x130 [ 678.883313] filename_lookup+0x39a/0x520 [ 678.887403] user_path_at_empty+0x40/0x50 [ 678.891564] do_readlinkat+0x156/0x410 [ 678.895451] __x64_sys_readlink+0x78/0xb0 [ 678.899605] do_syscall_64+0x1b9/0x820 [ 678.903493] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 678.908676] [ 678.910304] The buggy address belongs to the object at ffff8801cdea0980 [ 678.910304] which belongs to the cache names_cache of size 4096 [ 678.923059] The buggy address is located 1476 bytes to the left of [ 678.923059] 4096-byte region [ffff8801cdea0980, ffff8801cdea1980) [ 678.935565] The buggy address belongs to the page: [ 678.940494] page:ffffea000737a800 count:1 mapcount:0 mapping:ffff8801da978dc0 index:0x0 compound_mapcount: 0 [ 678.950468] flags: 0x2fffc0000008100(slab|head) [ 678.955160] raw: 02fffc0000008100 ffffea0005f74f08 ffffea0006196208 ffff8801da978dc0 [ 678.963064] raw: 0000000000000000 ffff8801cdea0980 0000000100000001 0000000000000000 [ 678.970940] page dumped because: kasan: bad access detected [ 678.976639] [ 678.978269] Memory state around the buggy address: [ 678.983197] ffff8801cdea0280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 678.990557] ffff8801cdea0300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 678.997933] >ffff8801cdea0380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 679.005290] ^ [ 679.010524] ffff8801cdea0400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 679.017886] ffff8801cdea0480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 679.025237] ================================================================== [ 679.032588] Disabling lock debugging due to kernel taint [ 679.038034] Kernel panic - not syncing: panic_on_warn set ... [ 679.038034] [ 679.045403] CPU: 0 PID: 3484 Comm: syz-executor5 Tainted: G B 4.19.0-rc8+ #65 [ 679.053985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 679.063339] Call Trace: [ 679.065939] dump_stack+0x1c4/0x2b4 [ 679.069575] ? dump_stack_print_info.cold.2+0x52/0x52 [ 679.074767] ? lock_downgrade+0x900/0x900 [ 679.078920] panic+0x238/0x4e7 [ 679.082136] ? add_taint.cold.5+0x16/0x16 [ 679.086287] ? add_taint.cold.5+0x5/0x16 [ 679.090355] ? trace_hardirqs_off+0xaf/0x310 [ 679.094769] kasan_end_report+0x47/0x4f [ 679.098739] kasan_report.cold.9+0x76/0x309 [ 679.103062] ? vhci_hub_control+0x1b6d/0x1be0 [ 679.107555] __asan_report_load4_noabort+0x14/0x20 [ 679.112483] vhci_hub_control+0x1b6d/0x1be0 [ 679.116807] ? vhci_hcd_probe+0x240/0x240 [ 679.120978] ? rcu_read_lock_sched_held+0x108/0x120 [ 679.125993] ? __kmalloc+0x5de/0x760 [ 679.129719] ? kasan_check_write+0x14/0x20 [ 679.133962] ? do_raw_spin_lock+0xc1/0x200 [ 679.138216] ? usb_hcd_submit_urb+0x6fc/0x20a0 [ 679.142803] usb_hcd_submit_urb+0x17bb/0x20a0 [ 679.147300] ? vhci_hcd_probe+0x240/0x240 [ 679.151466] ? usb_create_hcd+0x40/0x40 [ 679.155446] ? do_syscall_64+0x1b9/0x820 [ 679.159505] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 679.164873] ? __x64_sys_ioctl+0x73/0xb0 [ 679.168937] ? do_syscall_64+0x1b9/0x820 [ 679.173019] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 679.178386] ? find_held_lock+0x36/0x1c0 [ 679.182468] ? __lockdep_init_map+0x105/0x590 [ 679.186978] ? __lockdep_init_map+0x105/0x590 [ 679.191493] usb_submit_urb+0x893/0x14e0 [ 679.195555] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 679.200853] usb_start_wait_urb+0x13d/0x370 [ 679.205174] ? sg_clean+0x240/0x240 [ 679.208830] usb_control_msg+0x332/0x4e0 [ 679.212900] ? usb_start_wait_urb+0x370/0x370 [ 679.217514] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 679.223062] proc_control+0x99b/0xef0 [ 679.226871] ? proc_bulk+0xa70/0xa70 [ 679.230594] usbdev_do_ioctl+0x1eb8/0x3b50 [ 679.234841] ? processcompl_compat+0x680/0x680 [ 679.239426] ? futex_wait+0x5ec/0xa50 [ 679.243251] ? mark_held_locks+0x130/0x130 [ 679.247489] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 679.252681] ? graph_lock+0x170/0x170 [ 679.256481] ? drop_futex_key_refs.isra.15+0x6d/0xe0 [ 679.261589] ? futex_wake+0x304/0x760 [ 679.265409] ? find_held_lock+0x36/0x1c0 [ 679.269478] ? avc_has_extended_perms+0x8cb/0x15a0 [ 679.274425] ? lock_downgrade+0x900/0x900 [ 679.278578] ? check_preemption_disabled+0x48/0x200 [ 679.283611] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 679.289401] ? kasan_check_read+0x11/0x20 [ 679.293550] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 679.298824] ? rcu_bh_qs+0xc0/0xc0 [ 679.302362] ? rcu_bh_qs+0xc0/0xc0 [ 679.305900] ? unwind_dump+0x190/0x190 [ 679.309790] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 679.315351] ? avc_has_extended_perms+0xab2/0x15a0 [ 679.320371] ? avc_ss_reset+0x190/0x190 [ 679.324357] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 679.330149] ? kasan_check_read+0x11/0x20 [ 679.334309] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 679.339620] ? rcu_bh_qs+0xc0/0xc0 [ 679.343171] ? ___might_sleep+0x1ed/0x300 [ 679.347341] ? arch_local_save_flags+0x40/0x40 [ 679.351919] ? __might_fault+0x12b/0x1e0 [ 679.355982] ? lock_downgrade+0x900/0x900 [ 679.360152] usbdev_ioctl+0x25/0x30 [ 679.363781] ? usbdev_compat_ioctl+0x30/0x30 [ 679.368189] do_vfs_ioctl+0x1de/0x1720 [ 679.372097] ? ioctl_preallocate+0x300/0x300 [ 679.376513] ? selinux_file_mprotect+0x620/0x620 [ 679.381266] ? __rhashtable_walk_find_next+0x910/0xe60 [ 679.386541] ? __sanitizer_cov_trace_cmp8+0xb/0x20 [ 679.391487] ? put_timespec64+0x10f/0x1b0 [ 679.395634] ? nsecs_to_jiffies+0x30/0x30 [ 679.399790] ? do_syscall_64+0x9a/0x820 [ 679.403768] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 679.409317] ? security_file_ioctl+0x94/0xc0 [ 679.413753] ksys_ioctl+0xa9/0xd0 [ 679.417210] __x64_sys_ioctl+0x73/0xb0 [ 679.421097] do_syscall_64+0x1b9/0x820 [ 679.424994] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 679.430372] ? syscall_return_slowpath+0x5e0/0x5e0 [ 679.435299] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 679.440147] ? trace_hardirqs_on_caller+0x310/0x310 [ 679.445161] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 679.450195] ? prepare_exit_to_usermode+0x291/0x3b0 [ 679.455214] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 679.460072] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 679.465262] RIP: 0033:0x457569 [ 679.468461] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 679.487369] RSP: 002b:00007f92727a3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 679.495083] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569 [ 679.502356] RDX: 0000000020000000 RSI: 00000000c0185500 RDI: 0000000000000003 [ 679.509627] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 679.516898] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f92727a46d4 [ 679.524165] R13: 00000000004bf6ac R14: 00000000004cf598 R15: 00000000ffffffff [ 680.705975] Shutting down cpus with NMI [ 680.710942] Kernel Offset: disabled [ 680.714568] Rebooting in 86400 seconds..