b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/4096, 0x1000}], 0x2, &(0x7f0000002bc0)=""/195, 0xc3}, 0x2}], 0x2, 0x40010121, &(0x7f0000004480)={0x0, 0x1c9c380}) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x40096102, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@mcast2, @in6=@loopback}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000000600)=0x29) 14:24:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) perf_event_open(&(0x7f0000000000)={0x2, 0xfffffffffffffdb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext={0x9}, 0x12ce9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x1e) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:24:44 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendmmsg(r0, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="7fc61b6d932dbc563145fefc191dbe34ca8e9ecdb27e56bc6ba8809e7cf04caace2b341d936860e16f71d90cf2a63ea103c29cc8aafd0c67226acce150360262eaae8207", 0x44}], 0x1}}], 0x40000a1, 0x0) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f0000001500)=[{0x0}, {&(0x7f0000000440)=""/150, 0x96}], 0x2}}], 0x300, 0x3, 0x0) 14:24:44 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000140)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) perf_event_open(&(0x7f0000000000)={0x0, 0xfffffffffffffdb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa, @perf_config_ext, 0x12ce9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:24:44 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="020b000007000000000021003f5403620500010001009a934dd520175e3b8f8886264fe600001000e0c99f3d653c00f0ff"], 0x31}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x20, 0x0) recvmmsg(r0, &(0x7f0000000140), 0x400000000000151, 0x2000000022, &(0x7f00000001c0)={0x77359400}) 14:24:45 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000800)='/dev/nullb0\x00', 0x802, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x882200}) socket$can_j1939(0x1d, 0x2, 0x7) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) recvmmsg(r1, &(0x7f0000004380)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)=""/110, 0x6e}], 0x1, &(0x7f0000000a80)=""/113, 0x71}, 0x8}, {{&(0x7f0000000b00)=@l2, 0x80, &(0x7f0000002b80)=[{&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/4096, 0x1000}], 0x2, &(0x7f0000002bc0)=""/195, 0xc3}, 0x2}], 0x2, 0x40010121, &(0x7f0000004480)={0x0, 0x1c9c380}) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x40096102, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@mcast2, @in6=@loopback}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000000600)=0x29) 14:24:45 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000800)='/dev/nullb0\x00', 0x802, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x882200}) socket$can_j1939(0x1d, 0x2, 0x7) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) recvmmsg(r1, &(0x7f0000004380)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)=""/110, 0x6e}], 0x1, &(0x7f0000000a80)=""/113, 0x71}, 0x8}, {{&(0x7f0000000b00)=@l2, 0x80, &(0x7f0000002b80)=[{&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/4096, 0x1000}], 0x2, &(0x7f0000002bc0)=""/195, 0xc3}, 0x2}], 0x2, 0x40010121, &(0x7f0000004480)={0x0, 0x1c9c380}) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x40096102, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@mcast2, @in6=@loopback}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000000600)=0x29) 14:24:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000140)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) perf_event_open(&(0x7f0000000000)={0x0, 0xfffffffffffffdb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa, @perf_config_ext, 0x12ce9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:24:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000140)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) perf_event_open(&(0x7f0000000000)={0x0, 0xfffffffffffffdb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa, @perf_config_ext, 0x12ce9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2435.906710][ T4827] QAT: failed to copy from user cfg_data. [ 2435.923633][ T4827] QAT: Invalid ioctl 14:24:47 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r7, r7, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r8) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r11, r11, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r12, 0x0) r13 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r13, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r14 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r14, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r14, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r7, r8, r11, r12, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r13, r14, 0x5}) getgroups(0x3, &(0x7f00000000c0)=[r12, r4, 0xee00]) r15 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) r16 = socket$inet_tcp(0x2, 0x1, 0x0) r17 = fcntl$dupfd(r15, 0x406, r16) getsockopt$sock_cred(r17, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r18, r18, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r19) r20 = socket$inet_tcp(0x2, 0x1, 0x0) r21 = fcntl$dupfd(r20, 0x0, r20) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r22, r22, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r24 = socket$inet_tcp(0x2, 0x1, 0x0) r25 = fcntl$dupfd(r24, 0x0, r24) getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r26, r26, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27) r28 = socket$inet_tcp(0x2, 0x1, 0x0) r29 = fcntl$dupfd(r28, 0x0, r28) getsockopt$sock_cred(r29, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r30, r30, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r31, 0x0) r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r33 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r33, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r33, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r30, r31, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r32, r33, 0x5}) getgroups(0x3, &(0x7f00000000c0)=[r31, r19, 0xee00]) r34 = socket$inet_tcp(0x2, 0x1, 0x0) r35 = fcntl$dupfd(r34, 0x0, r34) getsockopt$sock_cred(r35, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r37 = socket$inet_tcp(0x2, 0x1, 0x0) r38 = fcntl$dupfd(r37, 0x0, r37) getsockopt$sock_cred(r38, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r39, r39, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r40) r41 = socket$inet_tcp(0x2, 0x1, 0x0) r42 = fcntl$dupfd(r41, 0x0, r41) getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r43, r43, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r44, 0x0) r45 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r46 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r46, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r46, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r39, r40, r43, r44, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r45, r46, 0x5}) setresuid(r36, r36, r39) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r47) socket$inet_tcp(0x2, 0x1, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000380)='/dev/md0\x00', 0x208400, 0x0) r48 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r48, 0x40096102, 0x0) recvmmsg(r48, &(0x7f0000004380)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)=""/110, 0x6e}], 0x1, &(0x7f0000000a80)=""/113, 0x71}, 0x8}, {{&(0x7f0000000b00)=@l2, 0x80, &(0x7f0000002b80)=[{&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/4096, 0x1000}], 0x2, &(0x7f0000002bc0)=""/195, 0xc3}, 0x2}], 0x2, 0x40010121, &(0x7f0000004480)={0x0, 0x1c9c380}) ioctl$ASHMEM_GET_PIN_STATUS(r48, 0x7709, 0x0) syz_open_dev$mice(&(0x7f00000003c0)='/dev/input/mice\x00', 0x0, 0x502001) r49 = socket$nl_generic(0x10, 0x3, 0x10) r50 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r49, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r50, 0x400, 0x8000000, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}}, 0x0) r51 = dup(r49) ioctl$KDADDIO(r51, 0x4b34, 0xffffffffffffffff) r52 = socket$nl_generic(0x10, 0x3, 0x10) r53 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r52, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r53, 0x400, 0x8000000, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}}, 0x0) dup(r52) r54 = fcntl$dupfd(r51, 0x406, r52) getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r55, r55, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r56, 0x0) r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r57, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r36, r47, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5}) r59 = socket$inet_tcp(0x2, 0x1, 0x0) r60 = fcntl$dupfd(r59, 0x0, r59) getsockopt$sock_cred(r60, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r62, r62, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r63) r64 = socket$inet_tcp(0x2, 0x1, 0x0) r65 = fcntl$dupfd(r64, 0x0, r64) getsockopt$sock_cred(r65, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r66, r66, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r67, 0x0) r68 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r68, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r69 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r69, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r69, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r62, r63, r66, r67, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r68, r69, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r47, 0xffffffffffffffff, r67, 0x0, 0xee00]) setregid(r23, r70) r71 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r71, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r33, &(0x7f0000000500), 0x2, &(0x7f0000000280)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r18, r19, r22, r23, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r61, r71, 0x5}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r72) r73 = socket$inet_tcp(0x2, 0x1, 0x0) r74 = fcntl$dupfd(r73, 0x0, r73) getsockopt$sock_cred(r74, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r76 = socket$inet_tcp(0x2, 0x1, 0x0) r77 = fcntl$dupfd(r76, 0x0, r76) getsockopt$sock_cred(r77, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r78, r78, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r79) r80 = socket$inet_tcp(0x2, 0x1, 0x0) r81 = fcntl$dupfd(r80, 0x0, r80) getsockopt$sock_cred(r81, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r82, r82, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r83, 0x0) r84 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r85 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r85, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r85, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r78, r79, r82, r83, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r84, r85, 0x5}) setresuid(r75, r75, r78) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r86) r87 = socket$inet_tcp(0x2, 0x1, 0x0) r88 = fcntl$dupfd(r87, 0x0, r87) getsockopt$sock_cred(r88, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r89, r89, 0x0) stat(&(0x7f00000004c0)='./file1\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r90, 0x0) r91 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r91, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r92 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r92, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r92, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r75, r86, r89, r90, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r91, r92, 0x5}) r93 = socket$inet_tcp(0x2, 0x1, 0x0) r94 = fcntl$dupfd(r93, 0x0, r93) getsockopt$sock_cred(r94, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r95, r95, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r96) r97 = socket$inet_tcp(0x2, 0x1, 0x0) r98 = fcntl$dupfd(r97, 0x0, r97) getsockopt$sock_cred(r98, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r99, r99, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r100, 0x0) r101 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r101, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r102 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r102, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r102, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r95, r96, r99, r100, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r101, r102, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r86, 0xffffffffffffffff, r100, 0x0, 0xee00]) r103 = socket$inet_tcp(0x2, 0x1, 0x0) r104 = fcntl$dupfd(r103, 0x0, r103) getsockopt$sock_cred(r104, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r106 = socket$inet_tcp(0x2, 0x1, 0x0) r107 = fcntl$dupfd(r106, 0x0, r106) getsockopt$sock_cred(r107, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r108, r108, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r109) r110 = socket$inet_tcp(0x2, 0x1, 0x0) r111 = fcntl$dupfd(r110, 0x0, r110) getsockopt$sock_cred(r111, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r112, r112, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r113, 0x0) r114 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r115 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r115, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r115, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r108, r109, r112, r113, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r114, r115, 0x5}) setresuid(r105, r105, r108) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r116) r117 = socket$inet_tcp(0x2, 0x1, 0x0) r118 = fcntl$dupfd(r117, 0x0, r117) getsockopt$sock_cred(r118, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r119, r119, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r120, 0x0) r121 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r121, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r122 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r122, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r122, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r105, r116, r119, r120, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r121, r122, 0x5}) r123 = socket$inet_tcp(0x2, 0x1, 0x0) r124 = fcntl$dupfd(r123, 0x0, r123) getsockopt$sock_cred(r124, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r125, r125, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r126) r127 = socket$inet_tcp(0x2, 0x1, 0x0) r128 = fcntl$dupfd(r127, 0x0, r127) getsockopt$sock_cred(r128, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r129, r129, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r130, 0x0) r131 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r131, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r132 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r132, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r132, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r125, r126, r129, r130, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r131, r132, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r116, 0xffffffffffffffff, r130, 0x0, 0xee00]) getgroups(0x9, &(0x7f00000000c0)=[0xffffffffffffffff, r19, 0xee00, r72, 0xffffffffffffffff, r86, r116, 0xffffffffffffffff, 0xee01]) getresgid(&(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000200)=0x0) r135 = getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r136) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r137) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r138) r139 = socket$inet_tcp(0x2, 0x1, 0x0) r140 = fcntl$dupfd(r139, 0x0, r139) getsockopt$sock_cred(r140, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r141, r141, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r142) r143 = socket$inet_tcp(0x2, 0x1, 0x0) r144 = fcntl$dupfd(r143, 0x0, r143) getsockopt$sock_cred(r144, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r145, r145, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r146, 0x0) r147 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r148 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r148, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r148, &(0x7f0000000580), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r141, r142, r145, r146, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r147, r148, 0x5}) setgroups(0x9, &(0x7f0000000240)=[r12, r133, r134, r135, r136, r137, r138, r146, 0xee00]) perf_event_open(&(0x7f0000000000)={0x2, 0xfffffffffffffdb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext={0x9}, 0x12ce9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 14:24:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) perf_event_open(&(0x7f0000000000)={0x2, 0xfffffffffffffdb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext={0x9}, 0x12ce9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet(0x10, 0x3, 0xc) sendmsg(r4, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000024000)=[{&(0x7f0000000100)="24000000100007031dff22946fa2830020200a0009000300001d85687f0000000400ff7e28000000000a43ba5d806055b6fdd80b40000000140001000029ec2400020cd37e99d69cda45a95e", 0x4c}], 0x1}, 0x0) r5 = dup2(r4, 0xffffffffffffffff) getsockopt$inet_mreqsrc(r5, 0x0, 0x25, 0x0, &(0x7f00000004c0)) getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f00000001c0)=0x0) write$FUSE_ENTRY(r5, &(0x7f0000000380)={0x90, 0x0, 0x8, {0x0, 0x1, 0x7, 0xfffffffffffffe01, 0x8001, 0x7fff, {0x6, 0x4, 0x6, 0x8, 0x4, 0x2, 0xffff, 0x7fffffff, 0x9, 0x10001, 0xea, r6, 0xffffffffffffffff, 0x20, 0x5}}}, 0x90) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:24:47 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000400)='s', 0x1, 0x8840, &(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendmmsg(r0, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="7fc61b6d932dbc563145fefc191dbe34ca8e9ecdb27e56bc6ba8809e7cf04caace2b341d936860e16f71d90cf2a63ea103c29cc8aafd0c67226acce150360262eaae8207", 0x44}], 0x1}}], 0x40000a1, 0x0) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f0000001500)=[{0x0}, {&(0x7f0000000440)=""/150, 0x96}], 0x2}}], 0x300, 0x3, 0x0) 14:24:47 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="020b000007000000000021003f5403620500010001009a934dd520175e3b8f8886264fe600001000e0c99f3d653c00f0ff"], 0x31}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x20, 0x0) recvmmsg(r0, &(0x7f0000000140), 0x400000000000151, 0x2000000022, &(0x7f00000001c0)={0x77359400}) 14:24:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000140)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) perf_event_open(&(0x7f0000000000)={0x0, 0xfffffffffffffdb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa, @perf_config_ext, 0x12ce9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:24:47 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000800)='/dev/nullb0\x00', 0x802, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x882200}) socket$can_j1939(0x1d, 0x2, 0x7) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) recvmmsg(r1, &(0x7f0000004380)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)=""/110, 0x6e}], 0x1, &(0x7f0000000a80)=""/113, 0x71}, 0x8}, {{&(0x7f0000000b00)=@l2, 0x80, &(0x7f0000002b80)=[{&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/4096, 0x1000}], 0x2, &(0x7f0000002bc0)=""/195, 0xc3}, 0x2}], 0x2, 0x40010121, &(0x7f0000004480)={0x0, 0x1c9c380}) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x40096102, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@mcast2, @in6=@loopback}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000000600)=0x29) [ 2437.470471][ T5321] syz-executor.1 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2437.539665][ T5321] CPU: 1 PID: 5321 Comm: syz-executor.1 Not tainted 5.5.0-rc1-syzkaller #0 [ 2437.549072][ T5321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2437.559315][ T5321] Call Trace: [ 2437.562639][ T5321] dump_stack+0x11d/0x181 [ 2437.567017][ T5321] dump_header+0xaa/0x39c [ 2437.571512][ T5321] oom_kill_process.cold+0x10/0x15 [ 2437.576653][ T5321] out_of_memory+0x231/0xa60 [ 2437.581315][ T5321] ? __rcu_read_unlock+0x66/0x3d0 [ 2437.586484][ T5321] mem_cgroup_out_of_memory+0x128/0x150 [ 2437.592125][ T5321] try_charge+0xb6c/0xbf0 [ 2437.596494][ T5321] ? __rcu_read_unlock+0x66/0x3d0 [ 2437.601537][ T5321] __memcg_kmem_charge_memcg+0x4a/0xe0 [ 2437.607143][ T5321] __memcg_kmem_charge+0xcf/0x1b0 [ 2437.612283][ T5321] __alloc_pages_nodemask+0x26c/0x310 [ 2437.617768][ T5321] alloc_pages_current+0xd1/0x170 [ 2437.623063][ T5321] __vmalloc_node_range+0x2d7/0x4c0 [ 2437.628302][ T5321] ? kvm_dev_ioctl+0x6de/0xcf0 [ 2437.633223][ T5321] __vmalloc_node_flags_caller+0x6b/0x90 [ 2437.638924][ T5321] ? kvm_dev_ioctl+0x6de/0xcf0 [ 2437.643721][ T5321] kvmalloc_node+0xea/0x100 [ 2437.648239][ T5321] kvm_dev_ioctl+0x6de/0xcf0 [ 2437.652943][ T5321] ? kvm_put_kvm+0x6a0/0x6a0 [ 2437.657716][ T5321] do_vfs_ioctl+0x84f/0xcf0 [ 2437.662401][ T5321] ? tomoyo_file_ioctl+0x34/0x40 [ 2437.667360][ T5321] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2437.673623][ T5321] ksys_ioctl+0xbd/0xe0 [ 2437.677839][ T5321] __x64_sys_ioctl+0x4c/0x60 [ 2437.682431][ T5321] do_syscall_64+0xcc/0x3a0 [ 2437.686962][ T5321] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2437.692866][ T5321] RIP: 0033:0x45b349 [ 2437.696839][ T5321] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2437.716487][ T5321] RSP: 002b:00007fedcbcd0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2437.724915][ T5321] RAX: ffffffffffffffda RBX: 00007fedcbcd16d4 RCX: 000000000045b349 14:24:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_genetlink_get_family_id$ipvs(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000140)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) perf_event_open(&(0x7f0000000000)={0x0, 0xfffffffffffffdb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa, @perf_config_ext, 0x12ce9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2437.733979][ T5321] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 2437.741964][ T5321] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2437.750059][ T5321] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2437.758050][ T5321] R13: 000000000000036e R14: 00000000004c49a1 R15: 000000000075bf2c [ 2437.760237][ C0] net_ratelimit: 22 callbacks suppressed [ 2437.760250][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2437.778116][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2437.925984][ T5321] memory: usage 307200kB, limit 307200kB, failcnt 5983 [ 2437.936624][ T5321] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2437.944301][ T5321] Memory cgroup stats for /syz1: [ 2437.944503][ T5321] anon 285425664 [ 2437.944503][ T5321] file 24576 [ 2437.944503][ T5321] kernel_stack 2433024 [ 2437.944503][ T5321] slab 7569408 [ 2437.944503][ T5321] sock 36864 [ 2437.944503][ T5321] shmem 0 [ 2437.944503][ T5321] file_mapped 135168 [ 2437.944503][ T5321] file_dirty 135168 [ 2437.944503][ T5321] file_writeback 0 [ 2437.944503][ T5321] anon_thp 268435456 [ 2437.944503][ T5321] inactive_anon 135168 [ 2437.944503][ T5321] active_anon 285339648 [ 2437.944503][ T5321] inactive_file 0 [ 2437.944503][ T5321] active_file 49152 [ 2437.944503][ T5321] unevictable 0 [ 2437.944503][ T5321] slab_reclaimable 1757184 [ 2437.944503][ T5321] slab_unreclaimable 5812224 [ 2437.944503][ T5321] pgfault 227271 [ 2437.944503][ T5321] pgmajfault 0 [ 2437.944503][ T5321] workingset_refault 0 [ 2437.944503][ T5321] workingset_activate 0 14:24:48 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000800)='/dev/nullb0\x00', 0x802, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x882200}) socket$can_j1939(0x1d, 0x2, 0x7) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) recvmmsg(r1, &(0x7f0000004380)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)=""/110, 0x6e}], 0x1, &(0x7f0000000a80)=""/113, 0x71}, 0x8}, {{&(0x7f0000000b00)=@l2, 0x80, &(0x7f0000002b80)=[{&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/4096, 0x1000}], 0x2, &(0x7f0000002bc0)=""/195, 0xc3}, 0x2}], 0x2, 0x40010121, &(0x7f0000004480)={0x0, 0x1c9c380}) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x40096102, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@mcast2, @in6=@loopback}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000000600)=0x29) [ 2437.944503][ T5321] workingset_nodereclaim 0 [ 2437.944503][ T5321] pgrefill 157 [ 2437.944503][ T5321] pgscan 22995 [ 2437.944503][ T5321] pgsteal 22610 [ 2438.059508][ T5321] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=8821,uid=0 [ 2438.120452][ T5321] Memory cgroup out of memory: Killed process 8821 (syz-executor.1) total-vm:72584kB, anon-rss:4252kB, file-rss:35764kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 2438.209804][ T929] oom_reaper: reaped process 8821 (syz-executor.1), now anon-rss:0kB, file-rss:34868kB, shmem-rss:0kB [ 2438.226846][ T5313] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 14:24:48 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000400)='s', 0x1, 0x8840, &(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendmmsg(r0, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="7fc61b6d932dbc563145fefc191dbe34ca8e9ecdb27e56bc6ba8809e7cf04caace2b341d936860e16f71d90cf2a63ea103c29cc8aafd0c67226acce150360262eaae8207", 0x44}], 0x1}}], 0x40000a1, 0x0) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f0000001500)=[{0x0}, {&(0x7f0000000440)=""/150, 0x96}], 0x2}}], 0x300, 0x3, 0x0) 14:24:48 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="020b000007000000000021003f5403620500010001009a934dd520175e3b8f8886264fe600001000e0c99f3d653c00f0ff"], 0x31}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x20, 0x0) recvmmsg(r0, &(0x7f0000000140), 0x400000000000151, 0x2000000022, &(0x7f00000001c0)={0x77359400}) [ 2438.330582][ T5313] CPU: 1 PID: 5313 Comm: syz-executor.1 Not tainted 5.5.0-rc1-syzkaller #0 [ 2438.339513][ T5313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2438.349705][ T5313] Call Trace: [ 2438.353019][ T5313] dump_stack+0x11d/0x181 [ 2438.357422][ T5313] dump_header+0xaa/0x39c [ 2438.361781][ T5313] oom_kill_process.cold+0x10/0x15 [ 2438.366933][ T5313] out_of_memory+0x231/0xa60 [ 2438.371653][ T5313] mem_cgroup_out_of_memory+0x128/0x150 [ 2438.377222][ T5313] try_charge+0x800/0xbf0 [ 2438.381669][ T5313] ? rcu_note_context_switch+0x720/0x760 [ 2438.387321][ T5313] mem_cgroup_try_charge+0xd2/0x260 [ 2438.392668][ T5313] mem_cgroup_try_charge_delay+0x3a/0x80 [ 2438.398611][ T5313] __handle_mm_fault+0x197f/0x2e00 [ 2438.403767][ T5313] handle_mm_fault+0x21b/0x530 [ 2438.408630][ T5313] __do_page_fault+0x456/0x8d0 [ 2438.413556][ T5313] do_page_fault+0x38/0x194 [ 2438.418272][ T5313] page_fault+0x34/0x40 [ 2438.422449][ T5313] RIP: 0033:0x412b3f [ 2438.426576][ T5313] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 2438.446345][ T5313] RSP: 002b:00007ffda533dbe0 EFLAGS: 00010206 [ 2438.453335][ T5313] RAX: 00007fedcbc90000 RBX: 0000000000020000 RCX: 000000000045b39a [ 2438.461644][ T5313] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 2438.469627][ T5313] RBP: 00007ffda533dcc0 R08: ffffffffffffffff R09: 0000000000000000 14:24:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_genetlink_get_family_id$ipvs(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000140)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) perf_event_open(&(0x7f0000000000)={0x0, 0xfffffffffffffdb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa, @perf_config_ext, 0x12ce9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2438.477634][ T5313] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffda533ddb0 [ 2438.481099][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2438.485955][ T5313] R13: 00007fedcbcb0700 R14: 0000000000000001 R15: 000000000075bfd4 [ 2438.502022][ C0] protocol 88fb is buggy, dev hsr_slave_1 14:24:49 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000800)='/dev/nullb0\x00', 0x802, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x882200}) socket$can_j1939(0x1d, 0x2, 0x7) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x40096102, 0x0) recvmmsg(r1, &(0x7f0000004380)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)=""/110, 0x6e}], 0x1, &(0x7f0000000a80)=""/113, 0x71}, 0x8}, {{&(0x7f0000000b00)=@l2, 0x80, &(0x7f0000002b80)=[{&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/4096, 0x1000}], 0x2, &(0x7f0000002bc0)=""/195, 0xc3}, 0x2}], 0x2, 0x40010121, &(0x7f0000004480)={0x0, 0x1c9c380}) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x40096102, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@mcast2, @in6=@loopback}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000000600)=0x29) [ 2438.640410][ T5313] memory: usage 302916kB, limit 307200kB, failcnt 5983 [ 2438.647327][ T5313] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2438.680513][ T5313] Memory cgroup stats for /syz1: [ 2438.680760][ T5313] anon 281030656 [ 2438.680760][ T5313] file 24576 [ 2438.680760][ T5313] kernel_stack 2396160 [ 2438.680760][ T5313] slab 7569408 [ 2438.680760][ T5313] sock 36864 [ 2438.680760][ T5313] shmem 0 [ 2438.680760][ T5313] file_mapped 135168 [ 2438.680760][ T5313] file_dirty 135168 [ 2438.680760][ T5313] file_writeback 0 [ 2438.680760][ T5313] anon_thp 264241152 [ 2438.680760][ T5313] inactive_anon 135168 [ 2438.680760][ T5313] active_anon 281030656 [ 2438.680760][ T5313] inactive_file 0 [ 2438.680760][ T5313] active_file 49152 [ 2438.680760][ T5313] unevictable 0 [ 2438.680760][ T5313] slab_reclaimable 1757184 [ 2438.680760][ T5313] slab_unreclaimable 5812224 [ 2438.680760][ T5313] pgfault 227271 [ 2438.680760][ T5313] pgmajfault 0 [ 2438.680760][ T5313] workingset_refault 0 [ 2438.680760][ T5313] workingset_activate 0 [ 2438.680760][ T5313] workingset_nodereclaim 0 [ 2438.680760][ T5313] pgrefill 157 [ 2438.680760][ T5313] pgscan 22995 [ 2438.680760][ T5313] pgsteal 22610 [ 2438.801091][ T5313] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=1363,uid=0 [ 2438.816995][ T5313] Memory cgroup out of memory: Killed process 1363 (syz-executor.1) total-vm:72716kB, anon-rss:4268kB, file-rss:35728kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 2438.838314][ T929] oom_reaper: reaped process 1363 (syz-executor.1), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB [ 2438.890645][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2438.896832][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2438.902993][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2438.908980][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2439.200217][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2439.206177][ C0] protocol 88fb is buggy, dev hsr_slave_1 14:24:50 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r7, r7, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r8) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r11, r11, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r12, 0x0) r13 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r13, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r14 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r14, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r14, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r7, r8, r11, r12, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r13, r14, 0x5}) getgroups(0x3, &(0x7f00000000c0)=[r12, r4, 0xee00]) r15 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) r16 = socket$inet_tcp(0x2, 0x1, 0x0) r17 = fcntl$dupfd(r15, 0x406, r16) getsockopt$sock_cred(r17, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r18, r18, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r19) r20 = socket$inet_tcp(0x2, 0x1, 0x0) r21 = fcntl$dupfd(r20, 0x0, r20) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r22, r22, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r24 = socket$inet_tcp(0x2, 0x1, 0x0) r25 = fcntl$dupfd(r24, 0x0, r24) getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r26, r26, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27) r28 = socket$inet_tcp(0x2, 0x1, 0x0) r29 = fcntl$dupfd(r28, 0x0, r28) getsockopt$sock_cred(r29, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r30, r30, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r31, 0x0) r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r33 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r33, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r33, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r30, r31, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r32, r33, 0x5}) getgroups(0x3, &(0x7f00000000c0)=[r31, r19, 0xee00]) r34 = socket$inet_tcp(0x2, 0x1, 0x0) r35 = fcntl$dupfd(r34, 0x0, r34) getsockopt$sock_cred(r35, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r37 = socket$inet_tcp(0x2, 0x1, 0x0) r38 = fcntl$dupfd(r37, 0x0, r37) getsockopt$sock_cred(r38, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r39, r39, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r40) r41 = socket$inet_tcp(0x2, 0x1, 0x0) r42 = fcntl$dupfd(r41, 0x0, r41) getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r43, r43, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r44, 0x0) r45 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r46 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r46, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r46, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r39, r40, r43, r44, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r45, r46, 0x5}) setresuid(r36, r36, r39) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r47) socket$inet_tcp(0x2, 0x1, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000380)='/dev/md0\x00', 0x208400, 0x0) r48 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r48, 0x40096102, 0x0) recvmmsg(r48, &(0x7f0000004380)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)=""/110, 0x6e}], 0x1, &(0x7f0000000a80)=""/113, 0x71}, 0x8}, {{&(0x7f0000000b00)=@l2, 0x80, &(0x7f0000002b80)=[{&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/4096, 0x1000}], 0x2, &(0x7f0000002bc0)=""/195, 0xc3}, 0x2}], 0x2, 0x40010121, &(0x7f0000004480)={0x0, 0x1c9c380}) ioctl$ASHMEM_GET_PIN_STATUS(r48, 0x7709, 0x0) syz_open_dev$mice(&(0x7f00000003c0)='/dev/input/mice\x00', 0x0, 0x502001) r49 = socket$nl_generic(0x10, 0x3, 0x10) r50 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r49, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r50, 0x400, 0x8000000, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}}, 0x0) r51 = dup(r49) ioctl$KDADDIO(r51, 0x4b34, 0xffffffffffffffff) r52 = socket$nl_generic(0x10, 0x3, 0x10) r53 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r52, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r53, 0x400, 0x8000000, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}}, 0x0) dup(r52) r54 = fcntl$dupfd(r51, 0x406, r52) getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r55, r55, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r56, 0x0) r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r57, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r36, r47, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5}) r59 = socket$inet_tcp(0x2, 0x1, 0x0) r60 = fcntl$dupfd(r59, 0x0, r59) getsockopt$sock_cred(r60, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r62, r62, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r63) r64 = socket$inet_tcp(0x2, 0x1, 0x0) r65 = fcntl$dupfd(r64, 0x0, r64) getsockopt$sock_cred(r65, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r66, r66, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r67, 0x0) r68 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r68, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r69 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r69, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r69, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r62, r63, r66, r67, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r68, r69, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r47, 0xffffffffffffffff, r67, 0x0, 0xee00]) setregid(r23, r70) r71 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r71, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r33, &(0x7f0000000500), 0x2, &(0x7f0000000280)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r18, r19, r22, r23, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r61, r71, 0x5}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r72) r73 = socket$inet_tcp(0x2, 0x1, 0x0) r74 = fcntl$dupfd(r73, 0x0, r73) getsockopt$sock_cred(r74, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r76 = socket$inet_tcp(0x2, 0x1, 0x0) r77 = fcntl$dupfd(r76, 0x0, r76) getsockopt$sock_cred(r77, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r78, r78, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r79) r80 = socket$inet_tcp(0x2, 0x1, 0x0) r81 = fcntl$dupfd(r80, 0x0, r80) getsockopt$sock_cred(r81, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r82, r82, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r83, 0x0) r84 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r85 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r85, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r85, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r78, r79, r82, r83, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r84, r85, 0x5}) setresuid(r75, r75, r78) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r86) r87 = socket$inet_tcp(0x2, 0x1, 0x0) r88 = fcntl$dupfd(r87, 0x0, r87) getsockopt$sock_cred(r88, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r89, r89, 0x0) stat(&(0x7f00000004c0)='./file1\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r90, 0x0) r91 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r91, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r92 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r92, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r92, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r75, r86, r89, r90, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r91, r92, 0x5}) r93 = socket$inet_tcp(0x2, 0x1, 0x0) r94 = fcntl$dupfd(r93, 0x0, r93) getsockopt$sock_cred(r94, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r95, r95, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r96) r97 = socket$inet_tcp(0x2, 0x1, 0x0) r98 = fcntl$dupfd(r97, 0x0, r97) getsockopt$sock_cred(r98, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r99, r99, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r100, 0x0) r101 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r101, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r102 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r102, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r102, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r95, r96, r99, r100, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r101, r102, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r86, 0xffffffffffffffff, r100, 0x0, 0xee00]) r103 = socket$inet_tcp(0x2, 0x1, 0x0) r104 = fcntl$dupfd(r103, 0x0, r103) getsockopt$sock_cred(r104, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r106 = socket$inet_tcp(0x2, 0x1, 0x0) r107 = fcntl$dupfd(r106, 0x0, r106) getsockopt$sock_cred(r107, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r108, r108, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r109) r110 = socket$inet_tcp(0x2, 0x1, 0x0) r111 = fcntl$dupfd(r110, 0x0, r110) getsockopt$sock_cred(r111, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r112, r112, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r113, 0x0) r114 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r115 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r115, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r115, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r108, r109, r112, r113, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r114, r115, 0x5}) setresuid(r105, r105, r108) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r116) r117 = socket$inet_tcp(0x2, 0x1, 0x0) r118 = fcntl$dupfd(r117, 0x0, r117) getsockopt$sock_cred(r118, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r119, r119, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r120, 0x0) r121 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r121, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r122 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r122, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r122, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r105, r116, r119, r120, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r121, r122, 0x5}) r123 = socket$inet_tcp(0x2, 0x1, 0x0) r124 = fcntl$dupfd(r123, 0x0, r123) getsockopt$sock_cred(r124, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r125, r125, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r126) r127 = socket$inet_tcp(0x2, 0x1, 0x0) r128 = fcntl$dupfd(r127, 0x0, r127) getsockopt$sock_cred(r128, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r129, r129, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r130, 0x0) r131 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r131, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r132 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r132, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r132, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r125, r126, r129, r130, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r131, r132, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r116, 0xffffffffffffffff, r130, 0x0, 0xee00]) getgroups(0x9, &(0x7f00000000c0)=[0xffffffffffffffff, r19, 0xee00, r72, 0xffffffffffffffff, r86, r116, 0xffffffffffffffff, 0xee01]) getresgid(&(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000200)=0x0) r135 = getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r136) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r137) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r138) r139 = socket$inet_tcp(0x2, 0x1, 0x0) r140 = fcntl$dupfd(r139, 0x0, r139) getsockopt$sock_cred(r140, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r141, r141, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r142) r143 = socket$inet_tcp(0x2, 0x1, 0x0) r144 = fcntl$dupfd(r143, 0x0, r143) getsockopt$sock_cred(r144, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r145, r145, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r146, 0x0) r147 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r148 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r148, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r148, &(0x7f0000000580), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r141, r142, r145, r146, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r147, r148, 0x5}) setgroups(0x9, &(0x7f0000000240)=[r12, r133, r134, r135, r136, r137, r138, r146, 0xee00]) perf_event_open(&(0x7f0000000000)={0x2, 0xfffffffffffffdb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext={0x9}, 0x12ce9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 14:24:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clock_gettime(0x1, &(0x7f0000000100)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc00, 0x4cb, 0x0, 0x4]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0xe402, 0x400000) sendmmsg$nfc_llcp(r3, &(0x7f00000034c0)=[{&(0x7f0000000200)={0x27, 0x1, 0x2, 0x3, 0x61, 0x1, "83173106c152204a91d5bf47159a819eed0a87d2924390e74ce767b2a71408cb6dc19b82c5e77eb41b6903c0619e57fdb769a3dae6480d59cfe60c79c62ef6", 0x35}, 0x60, &(0x7f0000000840)=[{&(0x7f0000000380)="631ef46212e6416827f2fefdead8b0f8b097e6461a1a4db7b6de68780111c0926b5ae10e370a96b7f2505fa387e7a9534a1b5dd42a90b64692c6be06501b178c86bb5a57c2d297f4d64c299bf697f23f9496598e", 0x54}, {&(0x7f0000000400)="cabd2cb7b6d35b921107695607605b5838529d105ca17e03d4efd47949bfe5681b630e99bfad27f640abc7635b3df7e64e29fb4678a60db2ed717f732bd2d0ce2ca3121221b72c2c05cbb92ede2d3968903982074f4619c5fd7bdbe9b8c5e9fdad710447abde473780e3322bd31830084a81376986e85f8270e8a3928d6a16417c7281f813ad99f859ff763eaabf0c750abb9d49fa36fb7adaa46a6dec42791473ee30c5d47a49d45a0978b7eefda31664d747053fe2b5740b5cda", 0xbb}, {&(0x7f00000004c0)="3c10d2da6eb0d193f93ff33191aa07db14df6e4b51eef16e4e24c8797c09a33e6b44cedd674a12d487a8cfa703e0ea9cf68ac60fec3dc1a1cc6040c8c3b0468f5b998cadc759dc9bf11979454dc9bc869a93aaa7f41e4ff8cdea1abcf48cbbd72c136af9bc85bdf0055914e2410d0ac4add7697a76ea6056182113b881bc06eb8156b3cf7c5fa869c55ad07080e0add22cc61db08ca7ea39cb934cf631c11bfe9238245d32230a84df2b6907175682d1b7fd760731a47385951811adc9a4d9a53455e1d3a6390ea79d997a2be1ea5eb70346c0427ea1d633509443e1d9c9b2fa36f5366087f9163ff0a6225e8ee4328c7db41fc5056b", 0xf6}, {&(0x7f00000005c0)="005b634308afa381ba476a98992589748b345271742b7ee44797a56cb141b8dfe1a7a6d8a6b2d249d67bf011396da689b72889da1a61a1f5d5e8a8c3b0586ba46eb5496e31d773598bc523e978b0b7c920c35ebd26c22dd1c4c07fabc544b44ceac9102c94e3d6d45249890f6d1f61b95f56759e02c4c56ee305ba595f0ca49959a42f4015379b7bf36930387d3b7b6da5a8cf12d97ed982762c00f817553f5b05ee67c90fe9f88ef6834968427a46cbdc9ab64d38217757ca8bc16e8fc48987b31b3d8161166839d36184", 0xcb}, {&(0x7f00000006c0)="9a7bd5c4d91025e2d08c827fdd1a1fe01b5a8b0af99f0cbc2e862fe9d255a05903605560fd0fb8f7eb63c62eb867d63f2f05ee22fe4747a91c892a26230cb04a0e1f4ce38e8e1621dfabcc3c7fd41f82840c", 0x52}, {&(0x7f0000000740)="e4ffdf41c060ba199e805edbb139e01de58365bf475392193a0b706820645c92f6c75ddab569c4186e982aa140fe782e005c2f7a89be630d29295b662bd47d9e079d1cff3da39e2e307d583ef3401b5bba336ff7b6429e9b7801db6e8581d9d27f414030093cc06d056b33944d6801a70f2bb22d254103566ef91e08dbad6e6b7f5968da720f23f459d5b34759d44a3c308596838c399d7867b83a4830e6998e4309104d8ac1c447472b7fcae29b965d4a8b26c33fa34dd86f01466bbc8f8e4695171164273f51fb3dc289a5762bfb8bda4cdee8f5a3df", 0xd7}], 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="c8000000000000000e010000080000008923872461dc725a1e5b6ef63a54c9186119ff3257c78036df2731f9ad3368bc55358d9fe3b9e3c7201e861055c243b7e288819b39bb75b4af70f51ab9e7977d9cb47eb31912504b610f42c2eb762953da8fd42ec9843580f6a29b62bc36af00b034d029fca74eb2d0f26027ef12331c0146d4490be07136381f9ae7f3016d05b9ce3233afd5e5a76526ad0ab3ece0e23605f2e5841d5dd7d80303b270d8e79e0cb9eb65edcf1eb1e8299f0b2b9142863a9e338fcfba0000"], 0xc8, 0x10814}, {&(0x7f00000009c0)={0x27, 0x0, 0x1, 0x5, 0x5, 0x80, "8655ab7db411645ea01f14f094da543f4a139302e5aa6492c59ac3446ddf79ed48b8f486a50131639acbe0a20e53ae4992f0a1fbe2d276ab779c6b3251357b", 0x13}, 0x60, &(0x7f0000000bc0)=[{&(0x7f0000000a40)="153848d7b46ab90399ff22ab2880af627f713e117153f8d914781405d0f22972de83e063e2371bf05280504f32400a322045dc05b5f83b7ace449f42862af0d2578fab7c7050fd1b29d3bfb566370ceff175dd6100ede78b3f4ce77100b8cc76672c4d0c604b6dbb464dc7c9833f017a49bb98a0ca0a531d48ff17d77b31b2cd076127ca1cf88e162a85dcbda63d13c9ae42c3dd3d62c04d13dc7d404d7ea0a9400b13ac74713aaec1f59e758159da79d138d8bbf1fe8189dae81d81252eda0225af4ce3bb00428074b359627fd0defa88ee63", 0xd3}, {&(0x7f0000000b40)="991fc7da5bbaf5a1c34a3047d1a67cf15500f33cb78b9abfa6a3db2d2dcf17f690be6f6bde7d68d3f603c22f71f48353f4d58d85d8414332a021e479608728b0a77b8c3f754da7b45a", 0x49}], 0x2, 0x0, 0x0, 0x20040045}, {&(0x7f0000000c00)={0x27, 0x0, 0x2, 0x5, 0x4, 0x5, "acc4381b5409e1e349f145c5bcfa4fa7d4fd5e0439a85c3feebcdc8bbaa063f403e0cbc07a5dbd06a75d0a8c6eb62bcd234a6dcf938e899d3ea1b339376862", 0x4}, 0x60, &(0x7f0000001e80)=[{&(0x7f0000000c80)="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", 0x1000}, {&(0x7f0000001c80)="519916adb78399fb943cd340c65761ff37959b86fc631086595bf14e3a9028dab87054e2450c1eccbf3190252dc3b72e12056d0a35c32ac4b34b21572a108deb87412d686e74d19ca25905a97aa9e9088a38eee56f2a411e049512fbd114021e7e9952f40b6a2f8c", 0x68}, {&(0x7f0000001d00)="bda8a214ef3bef4976ebb5963a4136932144022013cfd048692921b588a3801ca945fe4d1bc94826a2ae2d3fc175e4e0c436d4713395021e74738f08674264f08bb5d5dc6199e09aaf50c6cfca3edbb54fe1fce715b7ee63f5946faba889d94ec5c974ee3d878404eae3677d", 0x6c}, {&(0x7f0000001d80)="a286bd55707e3d65ca5a32e129d21be8d63a03ed48f5df1f6e5b79b933819ede83d8567b05ea58ab83296d54c3aff3a1d6954536e0d2eec88e485b2dff1bcf5c4d73d8d6a395e6edfc881bab5746a5d3a1f1008246876003", 0x58}, {&(0x7f0000001e00)="0397356450f51503c39c53c781d8733f9df9c17abc06d48e01b7c17df28feaad90e4f979864ef13a1ee85ac7105cf8b9db86fa373d2c7d564b6f365f8a842834c41455762935e559f2500a0c5d7f16e93f6939790c44", 0x56}], 0x5, &(0x7f0000001f00)={0x30, 0x109, 0x8, "0cf23182fe1e772b81d1af93e5f435303e211ce5b27a9bb0edb0"}, 0x30, 0x8004}, {&(0x7f0000001f40)={0x27, 0x0, 0x0, 0x6, 0x80, 0x5d, "32db219f8719d6cfbf2994021e8018a5f3ca5ad1573d10bf6d262a1c17c226a728c4999a05b134a02a5a99d28e323468176e684ab9526de362ec81c5efa51b", 0x33}, 0x60, &(0x7f0000003280)=[{&(0x7f0000001fc0)="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", 0x1000}, {&(0x7f0000002fc0)="e0a675de7d26addea08765eef094df4c611ae172357c70c6c4b6c58e4835400b30468d7a2072fcde1a28985aaa71fe24d857e4863906077c88a8ebb9421b2196c918b1ec0908716c5a1a15cc186007990ded5a59c1f5e0f68d53ab59e4dbaa6ee19c58ffa7ca2536a7773980b084f839031f2e165fb272f173c244121230e327083fc14345c20973cb09cf925736581b70", 0x91}, {&(0x7f0000003080)="4153dfe027957293011139e2338a6691e2134e076bec8f1a53e5153e7a27b4b7a86e552a61bcde9d34bdb1cba2af56c3bae0f9ac1f1127eb98a29ea341db2e7e1c2877b58614", 0x46}, {&(0x7f0000003100)="66843f4ace7fcec623c84ba0a274d92ead8c3de2eac3ca5ce5b289a0906f858e07824c0103219ca7f53fc5459af36e26f5d7b214a4191aa68df276a9e007aa66d6b92d94b86f8aa52d5b8b8575", 0x4d}, {&(0x7f0000003180)="88170fafbb70917f48d09a9cb20f04761f677aa55cc2c4b03e05031fdd6f61d9e7e033a0fb70b3df7478d853aad7789c2a2b5254268799858da3df57b9aaa7efb64db44bc39485e4f9caa41558da69208d659175b6483a3e6d7fe4d306019b979270ce16ba138e44e947176db4a0351c98da4e601c767de406ee902f249453eee7842ee36e2fdd8c76841ba282a1d9f1557f4420d93c8dca8f", 0x99}, {&(0x7f0000003240)="1dbab58d2b23baa86caae3d4526f8e44b5dd903b61d4c9c6f3", 0x19}], 0x6, &(0x7f0000003300)={0xb8, 0x3a, 0x55, "4202c545fa9d853830a1387662b50d3ebc794c69d30ba7ce1a3c7cd560628c3ca987a1271629d94d07efc3dbc75c296d3f8062f4928ac92db8c1631bea9ce2eb8b0ef632a886ed1a1034214191deca223d1ced3a609ed5ec3fb8ff6b0d22fa37f6122bfbf77ea149fec8f26cc05e78c0d915d9eeda8c53195fb899c80d7b778c6c3598bd15f55367961c48f3dd30c27efad83eb5f7e0d7e4ccadb284db1eb23ee8"}, 0xb8, 0x855}, {&(0x7f00000033c0)={0x27, 0x1, 0x1, 0x6, 0x9, 0x2, "92dc03525dea8e82644fef9c3f3c80b3375e30cce671532bf969aff0a6dec63b98134734c6937c4512a93a0074da4042b9f4193b08d95a032ba893a85949a4", 0x6}, 0x60, &(0x7f0000003480)=[{&(0x7f0000003440)="098bf9dab193122e2fec004a5b0810d6f85f2fda5c7d65ff6a496dfe7e1c09404f413004b0816fdb2db90adcbc5670d28ebd840e50ef", 0x36}], 0x1, 0x0, 0x0, 0x80}], 0x5, 0x20002800) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r5, 0x400, 0x8000000, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}}, 0x0) r6 = dup(r4) ioctl$KDADDIO(r6, 0x4b34, 0xffffffffffffffff) ioctl$INOTIFY_IOC_SETNEXTWD(r6, 0x40044900, 0x10001) r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r7, 0x4, 0x42000) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f00000000c0), 0x9}, 0x0, 0x0, 0x80, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) 14:24:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_genetlink_get_family_id$ipvs(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000140)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) perf_event_open(&(0x7f0000000000)={0x0, 0xfffffffffffffdb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa, @perf_config_ext, 0x12ce9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:24:50 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000800)='/dev/nullb0\x00', 0x802, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x882200}) socket$can_j1939(0x1d, 0x2, 0x7) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x40096102, 0x0) recvmmsg(r1, &(0x7f0000004380)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)=""/110, 0x6e}], 0x1, &(0x7f0000000a80)=""/113, 0x71}, 0x8}, {{&(0x7f0000000b00)=@l2, 0x80, &(0x7f0000002b80)=[{&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/4096, 0x1000}], 0x2, &(0x7f0000002bc0)=""/195, 0xc3}, 0x2}], 0x2, 0x40010121, &(0x7f0000004480)={0x0, 0x1c9c380}) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x40096102, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@mcast2, @in6=@loopback}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000000600)=0x29) 14:24:50 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="020b000007000000000021003f5403620500010001009a934dd520175e3b8f8886264fe600001000e0c99f3d653c00f0ff9da499df"], 0x35}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x20, 0x0) recvmmsg(r0, &(0x7f0000000140), 0x400000000000151, 0x2000000022, &(0x7f00000001c0)={0x77359400}) 14:24:50 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000400)='s', 0x1, 0x8840, &(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendmmsg(r0, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="7fc61b6d932dbc563145fefc191dbe34ca8e9ecdb27e56bc6ba8809e7cf04caace2b341d936860e16f71d90cf2a63ea103c29cc8aafd0c67226acce150360262eaae8207", 0x44}], 0x1}}], 0x40000a1, 0x0) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f0000001500)=[{0x0}, {&(0x7f0000000440)=""/150, 0x96}], 0x2}}], 0x300, 0x3, 0x0) 14:24:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000140)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) perf_event_open(&(0x7f0000000000)={0x0, 0xfffffffffffffdb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa, @perf_config_ext, 0x12ce9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:24:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r7, r7, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r8) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r11, r11, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r12, 0x0) r13 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r13, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r14 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r14, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r14, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r7, r8, r11, r12, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r13, r14, 0x5}) getgroups(0x3, &(0x7f00000000c0)=[r12, r4, 0xee00]) r15 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) r16 = socket$inet_tcp(0x2, 0x1, 0x0) r17 = fcntl$dupfd(r15, 0x406, r16) getsockopt$sock_cred(r17, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r18, r18, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r19) r20 = socket$inet_tcp(0x2, 0x1, 0x0) r21 = fcntl$dupfd(r20, 0x0, r20) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r22, r22, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r24 = socket$inet_tcp(0x2, 0x1, 0x0) r25 = fcntl$dupfd(r24, 0x0, r24) getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r26, r26, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27) r28 = socket$inet_tcp(0x2, 0x1, 0x0) r29 = fcntl$dupfd(r28, 0x0, r28) getsockopt$sock_cred(r29, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r30, r30, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r31, 0x0) r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r33 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r33, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r33, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r30, r31, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r32, r33, 0x5}) getgroups(0x3, &(0x7f00000000c0)=[r31, r19, 0xee00]) r34 = socket$inet_tcp(0x2, 0x1, 0x0) r35 = fcntl$dupfd(r34, 0x0, r34) getsockopt$sock_cred(r35, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r37 = socket$inet_tcp(0x2, 0x1, 0x0) r38 = fcntl$dupfd(r37, 0x0, r37) getsockopt$sock_cred(r38, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r39, r39, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r40) r41 = socket$inet_tcp(0x2, 0x1, 0x0) r42 = fcntl$dupfd(r41, 0x0, r41) getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r43, r43, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r44, 0x0) r45 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r46 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r46, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r46, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r39, r40, r43, r44, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r45, r46, 0x5}) setresuid(r36, r36, r39) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r47) socket$inet_tcp(0x2, 0x1, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000380)='/dev/md0\x00', 0x208400, 0x0) r48 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r48, 0x40096102, 0x0) recvmmsg(r48, &(0x7f0000004380)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)=""/110, 0x6e}], 0x1, &(0x7f0000000a80)=""/113, 0x71}, 0x8}, {{&(0x7f0000000b00)=@l2, 0x80, &(0x7f0000002b80)=[{&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/4096, 0x1000}], 0x2, &(0x7f0000002bc0)=""/195, 0xc3}, 0x2}], 0x2, 0x40010121, &(0x7f0000004480)={0x0, 0x1c9c380}) ioctl$ASHMEM_GET_PIN_STATUS(r48, 0x7709, 0x0) syz_open_dev$mice(&(0x7f00000003c0)='/dev/input/mice\x00', 0x0, 0x502001) r49 = socket$nl_generic(0x10, 0x3, 0x10) r50 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r49, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r50, 0x400, 0x8000000, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}}, 0x0) r51 = dup(r49) ioctl$KDADDIO(r51, 0x4b34, 0xffffffffffffffff) r52 = socket$nl_generic(0x10, 0x3, 0x10) r53 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r52, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r53, 0x400, 0x8000000, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}}, 0x0) dup(r52) r54 = fcntl$dupfd(r51, 0x406, r52) getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r55, r55, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r56, 0x0) r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r57, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r36, r47, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5}) r59 = socket$inet_tcp(0x2, 0x1, 0x0) r60 = fcntl$dupfd(r59, 0x0, r59) getsockopt$sock_cred(r60, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r62, r62, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r63) r64 = socket$inet_tcp(0x2, 0x1, 0x0) r65 = fcntl$dupfd(r64, 0x0, r64) getsockopt$sock_cred(r65, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r66, r66, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r67, 0x0) r68 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r68, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r69 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r69, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r69, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r62, r63, r66, r67, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r68, r69, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r47, 0xffffffffffffffff, r67, 0x0, 0xee00]) setregid(r23, r70) r71 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r71, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r33, &(0x7f0000000500), 0x2, &(0x7f0000000280)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r18, r19, r22, r23, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r61, r71, 0x5}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r72) r73 = socket$inet_tcp(0x2, 0x1, 0x0) r74 = fcntl$dupfd(r73, 0x0, r73) getsockopt$sock_cred(r74, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r76 = socket$inet_tcp(0x2, 0x1, 0x0) r77 = fcntl$dupfd(r76, 0x0, r76) getsockopt$sock_cred(r77, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r78, r78, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r79) r80 = socket$inet_tcp(0x2, 0x1, 0x0) r81 = fcntl$dupfd(r80, 0x0, r80) getsockopt$sock_cred(r81, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r82, r82, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r83, 0x0) r84 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r85 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r85, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r85, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r78, r79, r82, r83, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r84, r85, 0x5}) setresuid(r75, r75, r78) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r86) r87 = socket$inet_tcp(0x2, 0x1, 0x0) r88 = fcntl$dupfd(r87, 0x0, r87) getsockopt$sock_cred(r88, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r89, r89, 0x0) stat(&(0x7f00000004c0)='./file1\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r90, 0x0) r91 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r91, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r92 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r92, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r92, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r75, r86, r89, r90, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r91, r92, 0x5}) r93 = socket$inet_tcp(0x2, 0x1, 0x0) r94 = fcntl$dupfd(r93, 0x0, r93) getsockopt$sock_cred(r94, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r95, r95, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r96) r97 = socket$inet_tcp(0x2, 0x1, 0x0) r98 = fcntl$dupfd(r97, 0x0, r97) getsockopt$sock_cred(r98, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r99, r99, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r100, 0x0) r101 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r101, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r102 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r102, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r102, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r95, r96, r99, r100, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r101, r102, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r86, 0xffffffffffffffff, r100, 0x0, 0xee00]) r103 = socket$inet_tcp(0x2, 0x1, 0x0) r104 = fcntl$dupfd(r103, 0x0, r103) getsockopt$sock_cred(r104, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r106 = socket$inet_tcp(0x2, 0x1, 0x0) r107 = fcntl$dupfd(r106, 0x0, r106) getsockopt$sock_cred(r107, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r108, r108, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r109) r110 = socket$inet_tcp(0x2, 0x1, 0x0) r111 = fcntl$dupfd(r110, 0x0, r110) getsockopt$sock_cred(r111, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r112, r112, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r113, 0x0) r114 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r115 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r115, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r115, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r108, r109, r112, r113, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r114, r115, 0x5}) setresuid(r105, r105, r108) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r116) r117 = socket$inet_tcp(0x2, 0x1, 0x0) r118 = fcntl$dupfd(r117, 0x0, r117) getsockopt$sock_cred(r118, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r119, r119, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r120, 0x0) r121 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r121, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r122 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r122, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r122, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r105, r116, r119, r120, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r121, r122, 0x5}) r123 = socket$inet_tcp(0x2, 0x1, 0x0) r124 = fcntl$dupfd(r123, 0x0, r123) getsockopt$sock_cred(r124, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r125, r125, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r126) r127 = socket$inet_tcp(0x2, 0x1, 0x0) r128 = fcntl$dupfd(r127, 0x0, r127) getsockopt$sock_cred(r128, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r129, r129, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r130, 0x0) r131 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r131, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r132 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r132, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r132, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r125, r126, r129, r130, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r131, r132, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r116, 0xffffffffffffffff, r130, 0x0, 0xee00]) getgroups(0x9, &(0x7f00000000c0)=[0xffffffffffffffff, r19, 0xee00, r72, 0xffffffffffffffff, r86, r116, 0xffffffffffffffff, 0xee01]) getresgid(&(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000200)=0x0) r135 = getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r136) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r137) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r138) r139 = socket$inet_tcp(0x2, 0x1, 0x0) r140 = fcntl$dupfd(r139, 0x0, r139) getsockopt$sock_cred(r140, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r141, r141, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r142) r143 = socket$inet_tcp(0x2, 0x1, 0x0) r144 = fcntl$dupfd(r143, 0x0, r143) getsockopt$sock_cred(r144, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r145, r145, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r146, 0x0) r147 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r148 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r148, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r148, &(0x7f0000000580), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r141, r142, r145, r146, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r147, r148, 0x5}) setgroups(0x9, &(0x7f0000000240)=[r12, r133, r134, r135, r136, r137, r138, r146, 0xee00]) perf_event_open(&(0x7f0000000000)={0x2, 0xfffffffffffffdb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext={0x9}, 0x12ce9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 14:24:50 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000800)='/dev/nullb0\x00', 0x802, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x882200}) socket$can_j1939(0x1d, 0x2, 0x7) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x40096102, 0x0) recvmmsg(r1, &(0x7f0000004380)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)=""/110, 0x6e}], 0x1, &(0x7f0000000a80)=""/113, 0x71}, 0x8}, {{&(0x7f0000000b00)=@l2, 0x80, &(0x7f0000002b80)=[{&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/4096, 0x1000}], 0x2, &(0x7f0000002bc0)=""/195, 0xc3}, 0x2}], 0x2, 0x40010121, &(0x7f0000004480)={0x0, 0x1c9c380}) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x40096102, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@mcast2, @in6=@loopback}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000000600)=0x29) 14:24:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000140)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) perf_event_open(&(0x7f0000000000)={0x0, 0xfffffffffffffdb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa, @perf_config_ext, 0x12ce9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:24:51 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) sendto$inet(r0, &(0x7f0000000400)='s', 0x1, 0x8840, &(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendmmsg(r0, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="7fc61b6d932dbc563145fefc191dbe34ca8e9ecdb27e56bc6ba8809e7cf04caace2b341d936860e16f71d90cf2a63ea103c29cc8aafd0c67226acce150360262eaae8207", 0x44}], 0x1}}], 0x40000a1, 0x0) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f0000001500)=[{0x0}, {&(0x7f0000000440)=""/150, 0x96}], 0x2}}], 0x300, 0x3, 0x0) 14:24:51 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="020b000007000000000021003f5403620500010001009a934dd520175e3b8f8886264fe600001000e0c99f3d653c00f0ff9da499df"], 0x35}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x20, 0x0) recvmmsg(r0, &(0x7f0000000140), 0x400000000000151, 0x2000000022, &(0x7f00000001c0)={0x77359400}) [ 2441.252790][ T5814] QAT: failed to copy from user cfg_data. [ 2441.285216][ T5762] QAT: Invalid ioctl [ 2441.840483][ T5830] QAT: failed to copy from user cfg_data. [ 2441.849905][ T5830] QAT: Invalid ioctl 14:24:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0xfffffffffffffdb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext={0x9}, 0x12ce9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f00000000c0)={0x4, 0x7, 0x80000000, 0x33b, 0x7, 0x5}) 14:24:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000140)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) perf_event_open(&(0x7f0000000000)={0x0, 0xfffffffffffffdb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa, @perf_config_ext, 0x12ce9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:24:53 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) sendto$inet(r0, &(0x7f0000000400)='s', 0x1, 0x8840, &(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendmmsg(r0, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="7fc61b6d932dbc563145fefc191dbe34ca8e9ecdb27e56bc6ba8809e7cf04caace2b341d936860e16f71d90cf2a63ea103c29cc8aafd0c67226acce150360262eaae8207", 0x44}], 0x1}}], 0x40000a1, 0x0) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f0000001500)=[{0x0}, {&(0x7f0000000440)=""/150, 0x96}], 0x2}}], 0x300, 0x3, 0x0) 14:24:53 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="020b000007000000000021003f5403620500010001009a934dd520175e3b8f8886264fe600001000e0c99f3d653c00f0ff9da499df"], 0x35}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x20, 0x0) recvmmsg(r0, &(0x7f0000000140), 0x400000000000151, 0x2000000022, &(0x7f00000001c0)={0x77359400}) [ 2443.040193][ C1] net_ratelimit: 18 callbacks suppressed [ 2443.040203][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2443.051851][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2443.057644][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2443.063428][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:24:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r7, r7, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r8) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r11, r11, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r12, 0x0) r13 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r13, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r14 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r14, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r14, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r7, r8, r11, r12, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r13, r14, 0x5}) getgroups(0x3, &(0x7f00000000c0)=[r12, r4, 0xee00]) r15 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) r16 = socket$inet_tcp(0x2, 0x1, 0x0) r17 = fcntl$dupfd(r15, 0x406, r16) getsockopt$sock_cred(r17, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r18, r18, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r19) r20 = socket$inet_tcp(0x2, 0x1, 0x0) r21 = fcntl$dupfd(r20, 0x0, r20) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r22, r22, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r24 = socket$inet_tcp(0x2, 0x1, 0x0) r25 = fcntl$dupfd(r24, 0x0, r24) getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r26, r26, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27) r28 = socket$inet_tcp(0x2, 0x1, 0x0) r29 = fcntl$dupfd(r28, 0x0, r28) getsockopt$sock_cred(r29, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r30, r30, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r31, 0x0) r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r33 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r33, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r33, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r30, r31, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r32, r33, 0x5}) getgroups(0x3, &(0x7f00000000c0)=[r31, r19, 0xee00]) r34 = socket$inet_tcp(0x2, 0x1, 0x0) r35 = fcntl$dupfd(r34, 0x0, r34) getsockopt$sock_cred(r35, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r37 = socket$inet_tcp(0x2, 0x1, 0x0) r38 = fcntl$dupfd(r37, 0x0, r37) getsockopt$sock_cred(r38, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r39, r39, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r40) r41 = socket$inet_tcp(0x2, 0x1, 0x0) r42 = fcntl$dupfd(r41, 0x0, r41) getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r43, r43, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r44, 0x0) r45 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r46 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r46, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r46, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r39, r40, r43, r44, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r45, r46, 0x5}) setresuid(r36, r36, r39) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r47) socket$inet_tcp(0x2, 0x1, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000380)='/dev/md0\x00', 0x208400, 0x0) r48 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r48, 0x40096102, 0x0) recvmmsg(r48, &(0x7f0000004380)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)=""/110, 0x6e}], 0x1, &(0x7f0000000a80)=""/113, 0x71}, 0x8}, {{&(0x7f0000000b00)=@l2, 0x80, &(0x7f0000002b80)=[{&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/4096, 0x1000}], 0x2, &(0x7f0000002bc0)=""/195, 0xc3}, 0x2}], 0x2, 0x40010121, &(0x7f0000004480)={0x0, 0x1c9c380}) ioctl$ASHMEM_GET_PIN_STATUS(r48, 0x7709, 0x0) syz_open_dev$mice(&(0x7f00000003c0)='/dev/input/mice\x00', 0x0, 0x502001) r49 = socket$nl_generic(0x10, 0x3, 0x10) r50 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r49, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r50, 0x400, 0x8000000, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}}, 0x0) r51 = dup(r49) ioctl$KDADDIO(r51, 0x4b34, 0xffffffffffffffff) r52 = socket$nl_generic(0x10, 0x3, 0x10) r53 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r52, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r53, 0x400, 0x8000000, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}}, 0x0) dup(r52) r54 = fcntl$dupfd(r51, 0x406, r52) getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r55, r55, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r56, 0x0) r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r57, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r36, r47, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5}) r59 = socket$inet_tcp(0x2, 0x1, 0x0) r60 = fcntl$dupfd(r59, 0x0, r59) getsockopt$sock_cred(r60, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r62, r62, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r63) r64 = socket$inet_tcp(0x2, 0x1, 0x0) r65 = fcntl$dupfd(r64, 0x0, r64) getsockopt$sock_cred(r65, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r66, r66, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r67, 0x0) r68 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r68, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r69 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r69, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r69, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r62, r63, r66, r67, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r68, r69, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r47, 0xffffffffffffffff, r67, 0x0, 0xee00]) setregid(r23, r70) r71 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r71, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r33, &(0x7f0000000500), 0x2, &(0x7f0000000280)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r18, r19, r22, r23, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r61, r71, 0x5}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r72) r73 = socket$inet_tcp(0x2, 0x1, 0x0) r74 = fcntl$dupfd(r73, 0x0, r73) getsockopt$sock_cred(r74, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r76 = socket$inet_tcp(0x2, 0x1, 0x0) r77 = fcntl$dupfd(r76, 0x0, r76) getsockopt$sock_cred(r77, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r78, r78, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r79) r80 = socket$inet_tcp(0x2, 0x1, 0x0) r81 = fcntl$dupfd(r80, 0x0, r80) getsockopt$sock_cred(r81, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r82, r82, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r83, 0x0) r84 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r85 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r85, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r85, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r78, r79, r82, r83, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r84, r85, 0x5}) setresuid(r75, r75, r78) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r86) r87 = socket$inet_tcp(0x2, 0x1, 0x0) r88 = fcntl$dupfd(r87, 0x0, r87) getsockopt$sock_cred(r88, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r89, r89, 0x0) stat(&(0x7f00000004c0)='./file1\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r90, 0x0) r91 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r91, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r92 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r92, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r92, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r75, r86, r89, r90, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r91, r92, 0x5}) r93 = socket$inet_tcp(0x2, 0x1, 0x0) r94 = fcntl$dupfd(r93, 0x0, r93) getsockopt$sock_cred(r94, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r95, r95, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r96) r97 = socket$inet_tcp(0x2, 0x1, 0x0) r98 = fcntl$dupfd(r97, 0x0, r97) getsockopt$sock_cred(r98, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r99, r99, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r100, 0x0) r101 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r101, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r102 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r102, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r102, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r95, r96, r99, r100, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r101, r102, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r86, 0xffffffffffffffff, r100, 0x0, 0xee00]) r103 = socket$inet_tcp(0x2, 0x1, 0x0) r104 = fcntl$dupfd(r103, 0x0, r103) getsockopt$sock_cred(r104, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r106 = socket$inet_tcp(0x2, 0x1, 0x0) r107 = fcntl$dupfd(r106, 0x0, r106) getsockopt$sock_cred(r107, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r108, r108, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r109) r110 = socket$inet_tcp(0x2, 0x1, 0x0) r111 = fcntl$dupfd(r110, 0x0, r110) getsockopt$sock_cred(r111, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r112, r112, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r113, 0x0) r114 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r115 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r115, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r115, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r108, r109, r112, r113, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r114, r115, 0x5}) setresuid(r105, r105, r108) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r116) r117 = socket$inet_tcp(0x2, 0x1, 0x0) r118 = fcntl$dupfd(r117, 0x0, r117) getsockopt$sock_cred(r118, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r119, r119, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r120, 0x0) r121 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r121, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r122 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r122, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r122, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r105, r116, r119, r120, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r121, r122, 0x5}) r123 = socket$inet_tcp(0x2, 0x1, 0x0) r124 = fcntl$dupfd(r123, 0x0, r123) getsockopt$sock_cred(r124, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r125, r125, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r126) r127 = socket$inet_tcp(0x2, 0x1, 0x0) r128 = fcntl$dupfd(r127, 0x0, r127) getsockopt$sock_cred(r128, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r129, r129, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r130, 0x0) r131 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r131, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r132 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r132, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r132, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r125, r126, r129, r130, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r131, r132, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r116, 0xffffffffffffffff, r130, 0x0, 0xee00]) getgroups(0x9, &(0x7f00000000c0)=[0xffffffffffffffff, r19, 0xee00, r72, 0xffffffffffffffff, r86, r116, 0xffffffffffffffff, 0xee01]) getresgid(&(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000200)=0x0) r135 = getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r136) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r137) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r138) r139 = socket$inet_tcp(0x2, 0x1, 0x0) r140 = fcntl$dupfd(r139, 0x0, r139) getsockopt$sock_cred(r140, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r141, r141, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r142) r143 = socket$inet_tcp(0x2, 0x1, 0x0) r144 = fcntl$dupfd(r143, 0x0, r143) getsockopt$sock_cred(r144, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r145, r145, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r146, 0x0) r147 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r148 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r148, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r148, &(0x7f0000000580), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r141, r142, r145, r146, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r147, r148, 0x5}) setgroups(0x9, &(0x7f0000000240)=[r12, r133, r134, r135, r136, r137, r138, r146, 0xee00]) perf_event_open(&(0x7f0000000000)={0x2, 0xfffffffffffffdb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext={0x9}, 0x12ce9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 14:24:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000140)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) perf_event_open(&(0x7f0000000000)={0x0, 0xfffffffffffffdb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa, @perf_config_ext, 0x12ce9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2443.360791][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2443.367442][ C0] protocol 88fb is buggy, dev hsr_slave_1 14:24:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0xfffffffffffffdb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext={0x9}, 0x12ce9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f00000000c0)={0x4, 0x7, 0x80000000, 0x33b, 0x7, 0x5}) 14:24:54 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r7, r7, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r8) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r11, r11, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r12, 0x0) r13 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r13, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r14 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r14, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r14, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r7, r8, r11, r12, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r13, r14, 0x5}) getgroups(0x3, &(0x7f00000000c0)=[r12, r4, 0xee00]) r15 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) r16 = socket$inet_tcp(0x2, 0x1, 0x0) r17 = fcntl$dupfd(r15, 0x406, r16) getsockopt$sock_cred(r17, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r18, r18, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r19) r20 = socket$inet_tcp(0x2, 0x1, 0x0) r21 = fcntl$dupfd(r20, 0x0, r20) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r22, r22, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r24 = socket$inet_tcp(0x2, 0x1, 0x0) r25 = fcntl$dupfd(r24, 0x0, r24) getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r26, r26, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27) r28 = socket$inet_tcp(0x2, 0x1, 0x0) r29 = fcntl$dupfd(r28, 0x0, r28) getsockopt$sock_cred(r29, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r30, r30, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r31, 0x0) r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r33 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r33, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r33, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r30, r31, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r32, r33, 0x5}) getgroups(0x3, &(0x7f00000000c0)=[r31, r19, 0xee00]) r34 = socket$inet_tcp(0x2, 0x1, 0x0) r35 = fcntl$dupfd(r34, 0x0, r34) getsockopt$sock_cred(r35, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r37 = socket$inet_tcp(0x2, 0x1, 0x0) r38 = fcntl$dupfd(r37, 0x0, r37) getsockopt$sock_cred(r38, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r39, r39, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r40) r41 = socket$inet_tcp(0x2, 0x1, 0x0) r42 = fcntl$dupfd(r41, 0x0, r41) getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r43, r43, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r44, 0x0) r45 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r46 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r46, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r46, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r39, r40, r43, r44, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r45, r46, 0x5}) setresuid(r36, r36, r39) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r47) socket$inet_tcp(0x2, 0x1, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000380)='/dev/md0\x00', 0x208400, 0x0) r48 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r48, 0x40096102, 0x0) recvmmsg(r48, &(0x7f0000004380)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)=""/110, 0x6e}], 0x1, &(0x7f0000000a80)=""/113, 0x71}, 0x8}, {{&(0x7f0000000b00)=@l2, 0x80, &(0x7f0000002b80)=[{&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/4096, 0x1000}], 0x2, &(0x7f0000002bc0)=""/195, 0xc3}, 0x2}], 0x2, 0x40010121, &(0x7f0000004480)={0x0, 0x1c9c380}) ioctl$ASHMEM_GET_PIN_STATUS(r48, 0x7709, 0x0) syz_open_dev$mice(&(0x7f00000003c0)='/dev/input/mice\x00', 0x0, 0x502001) r49 = socket$nl_generic(0x10, 0x3, 0x10) r50 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r49, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r50, 0x400, 0x8000000, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}}, 0x0) r51 = dup(r49) ioctl$KDADDIO(r51, 0x4b34, 0xffffffffffffffff) r52 = socket$nl_generic(0x10, 0x3, 0x10) r53 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r52, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r53, 0x400, 0x8000000, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}}, 0x0) dup(r52) r54 = fcntl$dupfd(r51, 0x406, r52) getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r55, r55, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r56, 0x0) r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r57, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r36, r47, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5}) r59 = socket$inet_tcp(0x2, 0x1, 0x0) r60 = fcntl$dupfd(r59, 0x0, r59) getsockopt$sock_cred(r60, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r62, r62, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r63) r64 = socket$inet_tcp(0x2, 0x1, 0x0) r65 = fcntl$dupfd(r64, 0x0, r64) getsockopt$sock_cred(r65, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r66, r66, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r67, 0x0) r68 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r68, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r69 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r69, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r69, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r62, r63, r66, r67, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r68, r69, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r47, 0xffffffffffffffff, r67, 0x0, 0xee00]) setregid(r23, r70) r71 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r71, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r33, &(0x7f0000000500), 0x2, &(0x7f0000000280)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r18, r19, r22, r23, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r61, r71, 0x5}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r72) r73 = socket$inet_tcp(0x2, 0x1, 0x0) r74 = fcntl$dupfd(r73, 0x0, r73) getsockopt$sock_cred(r74, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r76 = socket$inet_tcp(0x2, 0x1, 0x0) r77 = fcntl$dupfd(r76, 0x0, r76) getsockopt$sock_cred(r77, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r78, r78, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r79) r80 = socket$inet_tcp(0x2, 0x1, 0x0) r81 = fcntl$dupfd(r80, 0x0, r80) getsockopt$sock_cred(r81, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r82, r82, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r83, 0x0) r84 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r85 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r85, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r85, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r78, r79, r82, r83, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r84, r85, 0x5}) setresuid(r75, r75, r78) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r86) r87 = socket$inet_tcp(0x2, 0x1, 0x0) r88 = fcntl$dupfd(r87, 0x0, r87) getsockopt$sock_cred(r88, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r89, r89, 0x0) stat(&(0x7f00000004c0)='./file1\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r90, 0x0) r91 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r91, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r92 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r92, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r92, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r75, r86, r89, r90, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r91, r92, 0x5}) r93 = socket$inet_tcp(0x2, 0x1, 0x0) r94 = fcntl$dupfd(r93, 0x0, r93) getsockopt$sock_cred(r94, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r95, r95, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r96) r97 = socket$inet_tcp(0x2, 0x1, 0x0) r98 = fcntl$dupfd(r97, 0x0, r97) getsockopt$sock_cred(r98, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r99, r99, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r100, 0x0) r101 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r101, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r102 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r102, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r102, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r95, r96, r99, r100, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r101, r102, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r86, 0xffffffffffffffff, r100, 0x0, 0xee00]) r103 = socket$inet_tcp(0x2, 0x1, 0x0) r104 = fcntl$dupfd(r103, 0x0, r103) getsockopt$sock_cred(r104, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r106 = socket$inet_tcp(0x2, 0x1, 0x0) r107 = fcntl$dupfd(r106, 0x0, r106) getsockopt$sock_cred(r107, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r108, r108, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r109) r110 = socket$inet_tcp(0x2, 0x1, 0x0) r111 = fcntl$dupfd(r110, 0x0, r110) getsockopt$sock_cred(r111, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r112, r112, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r113, 0x0) r114 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r115 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r115, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r115, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r108, r109, r112, r113, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r114, r115, 0x5}) setresuid(r105, r105, r108) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r116) r117 = socket$inet_tcp(0x2, 0x1, 0x0) r118 = fcntl$dupfd(r117, 0x0, r117) getsockopt$sock_cred(r118, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r119, r119, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r120, 0x0) r121 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r121, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r122 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r122, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r122, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r105, r116, r119, r120, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r121, r122, 0x5}) r123 = socket$inet_tcp(0x2, 0x1, 0x0) r124 = fcntl$dupfd(r123, 0x0, r123) getsockopt$sock_cred(r124, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r125, r125, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r126) r127 = socket$inet_tcp(0x2, 0x1, 0x0) r128 = fcntl$dupfd(r127, 0x0, r127) getsockopt$sock_cred(r128, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r129, r129, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r130, 0x0) r131 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r131, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r132 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r132, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r132, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r125, r126, r129, r130, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r131, r132, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r116, 0xffffffffffffffff, r130, 0x0, 0xee00]) getgroups(0x9, &(0x7f00000000c0)=[0xffffffffffffffff, r19, 0xee00, r72, 0xffffffffffffffff, r86, r116, 0xffffffffffffffff, 0xee01]) getresgid(&(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000200)=0x0) r135 = getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r136) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r137) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r138) r139 = socket$inet_tcp(0x2, 0x1, 0x0) r140 = fcntl$dupfd(r139, 0x0, r139) getsockopt$sock_cred(r140, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r141, r141, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r142) r143 = socket$inet_tcp(0x2, 0x1, 0x0) r144 = fcntl$dupfd(r143, 0x0, r143) getsockopt$sock_cred(r144, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r145, r145, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r146, 0x0) r147 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r148 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r148, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r148, &(0x7f0000000580), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r141, r142, r145, r146, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r147, r148, 0x5}) setgroups(0x9, &(0x7f0000000240)=[r12, r133, r134, r135, r136, r137, r138, r146, 0xee00]) perf_event_open(&(0x7f0000000000)={0x2, 0xfffffffffffffdb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext={0x9}, 0x12ce9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2443.760188][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2443.765971][ C0] protocol 88fb is buggy, dev hsr_slave_1 14:24:54 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) sendto$inet(r0, &(0x7f0000000400)='s', 0x1, 0x8840, &(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendmmsg(r0, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="7fc61b6d932dbc563145fefc191dbe34ca8e9ecdb27e56bc6ba8809e7cf04caace2b341d936860e16f71d90cf2a63ea103c29cc8aafd0c67226acce150360262eaae8207", 0x44}], 0x1}}], 0x40000a1, 0x0) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f0000001500)=[{0x0}, {&(0x7f0000000440)=""/150, 0x96}], 0x2}}], 0x300, 0x3, 0x0) [ 2444.000198][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2444.005990][ C0] protocol 88fb is buggy, dev hsr_slave_1 14:24:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000140)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) perf_event_open(&(0x7f0000000000)={0x0, 0xfffffffffffffdb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa, @perf_config_ext, 0x12ce9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:24:54 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0xfffffffffffffdb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext={0x9}, 0x12ce9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f00000000c0)={0x4, 0x7, 0x80000000, 0x33b, 0x7, 0x5}) 14:24:54 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="020b000007000000000021003f5403620500010001009a934dd520175e3b8f8886264fe600001000e0c99f3d653c00f0ff9da499df0005"], 0x37}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x20, 0x0) recvmmsg(r0, &(0x7f0000000140), 0x400000000000151, 0x2000000022, &(0x7f00000001c0)={0x77359400}) 14:24:55 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000140)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) perf_event_open(&(0x7f0000000000)={0x0, 0xfffffffffffffdb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa, @perf_config_ext, 0x12ce9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2444.659147][ T6010] QAT: failed to copy from user cfg_data. [ 2444.742990][ T6010] QAT: Invalid ioctl 14:24:55 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) sendto$inet(r0, &(0x7f0000000400)='s', 0x1, 0x8840, &(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendmmsg(r0, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="7fc61b6d932dbc563145fefc191dbe34ca8e9ecdb27e56bc6ba8809e7cf04caace2b341d936860e16f71d90cf2a63ea103c29cc8aafd0c67226acce150360262eaae8207", 0x44}], 0x1}}], 0x40000a1, 0x0) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f0000001500)=[{0x0}, {&(0x7f0000000440)=""/150, 0x96}], 0x2}}], 0x300, 0x3, 0x0) 14:24:55 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000140)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) perf_event_open(&(0x7f0000000000)={0x0, 0xfffffffffffffdb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa, @perf_config_ext, 0x12ce9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:24:55 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="020b000007000000000021003f5403620500010001009a934dd520175e3b8f8886264fe600001000e0c99f3d653c00f0ff9da499df0005"], 0x37}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x20, 0x0) recvmmsg(r0, &(0x7f0000000140), 0x400000000000151, 0x2000000022, &(0x7f00000001c0)={0x77359400}) [ 2445.700959][ T6124] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2445.764983][ T6124] CPU: 1 PID: 6124 Comm: syz-executor.1 Not tainted 5.5.0-rc1-syzkaller #0 [ 2445.773706][ T6124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2445.783780][ T6124] Call Trace: [ 2445.787139][ T6124] dump_stack+0x11d/0x181 [ 2445.791534][ T6124] dump_header+0xaa/0x39c [ 2445.795884][ T6124] oom_kill_process.cold+0x10/0x15 [ 2445.801030][ T6124] out_of_memory+0x231/0xa60 [ 2445.805713][ T6124] ? __rcu_read_unlock+0x66/0x3d0 [ 2445.810859][ T6124] mem_cgroup_out_of_memory+0x128/0x150 [ 2445.816519][ T6124] try_charge+0xb6c/0xbf0 [ 2445.821678][ T6124] ? rcu_note_context_switch+0x720/0x760 [ 2445.827330][ T6124] mem_cgroup_try_charge+0xd2/0x260 [ 2445.832583][ T6124] mem_cgroup_try_charge_delay+0x3a/0x80 [ 2445.838242][ T6124] wp_page_copy+0x322/0x1040 [ 2445.842916][ T6124] ? __read_once_size+0x41/0xe0 [ 2445.847786][ T6124] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 2445.853726][ T6124] do_wp_page+0x192/0xeb0 [ 2445.858159][ T6124] ? record_times+0x16/0x90 [ 2445.862678][ T6124] __handle_mm_fault+0x1d16/0x2e00 [ 2445.867956][ T6124] ? try_to_free_mem_cgroup_pages+0x258/0x4d0 [ 2445.874255][ T6124] handle_mm_fault+0x21b/0x530 [ 2445.879038][ T6124] __do_page_fault+0x456/0x8d0 [ 2445.883830][ T6124] do_page_fault+0x38/0x194 [ 2445.888346][ T6124] page_fault+0x34/0x40 [ 2445.892513][ T6124] RIP: 0033:0x410350 [ 2445.896471][ T6124] Code: 89 f8 89 c6 81 e6 ff 1f 00 00 8b 14 b5 00 00 73 00 41 39 d0 74 23 85 d2 74 58 83 c0 01 41 39 c1 75 e0 48 89 f8 25 ff 1f 00 00 <89> 3c 85 00 00 73 00 83 c5 01 e8 a1 18 ff ff 41 83 c7 01 45 39 7c [ 2445.916373][ T6124] RSP: 002b:00007ffda533dc00 EFLAGS: 00010202 [ 2445.922470][ T6124] RAX: 0000000000001458 RBX: 00000000a7e91b49 RCX: 0000001b30620000 [ 2445.930452][ T6124] RDX: 0000000039a1745b RSI: 000000000000145b RDI: ffffffff3716d458 [ 2445.938431][ T6124] RBP: 000000000000000c R08: 000000003716d458 R09: 000000003716d45c [ 2445.946414][ T6124] R10: 00007ffda533dda0 R11: 0000000000000246 R12: 000000000075bfa8 [ 2445.954575][ T6124] R13: 0000000080000000 R14: 00007fedcdcd2008 R15: 0000000000000049 [ 2446.004975][ T6124] memory: usage 307200kB, limit 307200kB, failcnt 6040 [ 2446.024101][ T6124] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2446.035619][ T6124] Memory cgroup stats for /syz1: [ 2446.035888][ T6124] anon 283729920 [ 2446.035888][ T6124] file 24576 [ 2446.035888][ T6124] kernel_stack 2506752 [ 2446.035888][ T6124] slab 7872512 [ 2446.035888][ T6124] sock 36864 [ 2446.035888][ T6124] shmem 0 [ 2446.035888][ T6124] file_mapped 135168 [ 2446.035888][ T6124] file_dirty 135168 [ 2446.035888][ T6124] file_writeback 0 [ 2446.035888][ T6124] anon_thp 264241152 [ 2446.035888][ T6124] inactive_anon 135168 [ 2446.035888][ T6124] active_anon 283701248 [ 2446.035888][ T6124] inactive_file 0 [ 2446.035888][ T6124] active_file 49152 [ 2446.035888][ T6124] unevictable 0 [ 2446.035888][ T6124] slab_reclaimable 1757184 [ 2446.035888][ T6124] slab_unreclaimable 6115328 [ 2446.035888][ T6124] pgfault 228459 [ 2446.035888][ T6124] pgmajfault 0 [ 2446.035888][ T6124] workingset_refault 0 [ 2446.035888][ T6124] workingset_activate 0 [ 2446.035888][ T6124] workingset_nodereclaim 0 [ 2446.035888][ T6124] pgrefill 157 [ 2446.035888][ T6124] pgscan 22995 [ 2446.035888][ T6124] pgsteal 22610 [ 2446.162255][ T6124] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=3903,uid=0 [ 2446.178228][ T6124] Memory cgroup out of memory: Killed process 3903 (syz-executor.1) total-vm:73112kB, anon-rss:4296kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:1000 [ 2446.667965][ T6372] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2446.680652][ T6372] CPU: 1 PID: 6372 Comm: syz-executor.1 Not tainted 5.5.0-rc1-syzkaller #0 [ 2446.689242][ T6372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2446.699456][ T6372] Call Trace: [ 2446.702759][ T6372] dump_stack+0x11d/0x181 [ 2446.707165][ T6372] dump_header+0xaa/0x39c [ 2446.711695][ T6372] oom_kill_process.cold+0x10/0x15 [ 2446.716835][ T6372] out_of_memory+0x231/0xa60 [ 2446.721443][ T6372] ? __rcu_read_unlock+0x66/0x3d0 [ 2446.726547][ T6372] mem_cgroup_out_of_memory+0x128/0x150 [ 2446.732129][ T6372] try_charge+0xb6c/0xbf0 [ 2446.736614][ T6372] ? __rcu_read_unlock+0x66/0x3d0 [ 2446.742315][ T6372] __memcg_kmem_charge_memcg+0x4a/0xe0 [ 2446.747803][ T6372] __memcg_kmem_charge+0xcf/0x1b0 [ 2446.752931][ T6372] __alloc_pages_nodemask+0x26c/0x310 [ 2446.758452][ T6372] alloc_pages_current+0xd1/0x170 [ 2446.763501][ T6372] __get_free_pages+0xc/0x40 [ 2446.768115][ T6372] pgd_alloc+0x34/0x220 [ 2446.772369][ T6372] mm_init+0x377/0x560 [ 2446.776519][ T6372] dup_mm+0x98/0xba0 [ 2446.780599][ T6372] ? delay_tsc+0x8f/0xc0 [ 2446.784857][ T6372] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2446.791212][ T6372] ? __hrtimer_init+0x12f/0x1a0 [ 2446.796139][ T6372] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 2446.802064][ T6372] copy_process+0x3138/0x3c40 [ 2446.806792][ T6372] ? delayacct_end+0xa1/0xb0 [ 2446.811489][ T6372] _do_fork+0xfe/0x7a0 [ 2446.815685][ T6372] __do_sys_clone3+0x1bd/0x260 [ 2446.820483][ T6372] ? blkcg_maybe_throttle_current+0x23d/0x580 [ 2446.826573][ T6372] ? percpu_ref_put_many+0x63/0xa0 [ 2446.831711][ T6372] ? mem_cgroup_handle_over_high+0x50/0x180 [ 2446.837635][ T6372] ? up_read+0x45/0xa0 [ 2446.841757][ T6372] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2446.848049][ T6372] ? debug_smp_processor_id+0x43/0x137 [ 2446.853554][ T6372] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2446.859942][ T6372] __x64_sys_clone3+0x3a/0x50 [ 2446.864652][ T6372] do_syscall_64+0xcc/0x3a0 [ 2446.869260][ T6372] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2446.875173][ T6372] RIP: 0033:0x45b349 [ 2446.879092][ T6372] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2446.898885][ T6372] RSP: 002b:00007fedcbc8ec78 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2446.907372][ T6372] RAX: ffffffffffffffda RBX: 00007fedcbc8f6d4 RCX: 000000000045b349 [ 2446.915531][ T6372] RDX: 0000000000000000 RSI: 0000000000000040 RDI: 0000000020001680 [ 2446.923518][ T6372] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 2446.931528][ T6372] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2446.939553][ T6372] R13: 0000000000000071 R14: 00000000004c1bca R15: 000000000075c07c [ 2446.954898][ T6372] memory: usage 307200kB, limit 307200kB, failcnt 6071 [ 2446.973857][ T6372] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2446.989306][ T6372] Memory cgroup stats for /syz1: [ 2446.989591][ T6372] anon 283729920 [ 2446.989591][ T6372] file 24576 [ 2446.989591][ T6372] kernel_stack 2543616 [ 2446.989591][ T6372] slab 7872512 [ 2446.989591][ T6372] sock 36864 [ 2446.989591][ T6372] shmem 0 [ 2446.989591][ T6372] file_mapped 135168 [ 2446.989591][ T6372] file_dirty 135168 [ 2446.989591][ T6372] file_writeback 0 [ 2446.989591][ T6372] anon_thp 264241152 [ 2446.989591][ T6372] inactive_anon 135168 [ 2446.989591][ T6372] active_anon 283701248 [ 2446.989591][ T6372] inactive_file 0 [ 2446.989591][ T6372] active_file 49152 [ 2446.989591][ T6372] unevictable 0 [ 2446.989591][ T6372] slab_reclaimable 1757184 [ 2446.989591][ T6372] slab_unreclaimable 6115328 [ 2446.989591][ T6372] pgfault 228492 [ 2446.989591][ T6372] pgmajfault 0 [ 2446.989591][ T6372] workingset_refault 0 [ 2446.989591][ T6372] workingset_activate 0 [ 2446.989591][ T6372] workingset_nodereclaim 0 [ 2446.989591][ T6372] pgrefill 157 [ 2446.989591][ T6372] pgscan 22995 [ 2446.989591][ T6372] pgsteal 22610 [ 2447.090258][ T6372] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=3897,uid=0 [ 2447.106023][ T6372] Memory cgroup out of memory: Killed process 3897 (syz-executor.1) total-vm:73112kB, anon-rss:4296kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:1000 [ 2447.125801][ T929] oom_reaper: reaped process 3897 (syz-executor.1), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 2447.138519][ T6124] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2447.148901][ T6124] CPU: 0 PID: 6124 Comm: syz-executor.1 Not tainted 5.5.0-rc1-syzkaller #0 [ 2447.157487][ T6124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2447.167695][ T6124] Call Trace: [ 2447.171055][ T6124] dump_stack+0x11d/0x181 [ 2447.175389][ T6124] dump_header+0xaa/0x39c [ 2447.179869][ T6124] oom_kill_process.cold+0x10/0x15 [ 2447.184988][ T6124] out_of_memory+0x231/0xa60 [ 2447.189592][ T6124] mem_cgroup_out_of_memory+0x128/0x150 [ 2447.195142][ T6124] try_charge+0x800/0xbf0 [ 2447.199465][ T6124] ? rcu_note_context_switch+0x720/0x760 [ 2447.205175][ T6124] mem_cgroup_try_charge+0xd2/0x260 [ 2447.210399][ T6124] mem_cgroup_try_charge_delay+0x3a/0x80 [ 2447.216212][ T6124] wp_page_copy+0x322/0x1040 [ 2447.221141][ T6124] ? __read_once_size+0x41/0xe0 [ 2447.226058][ T6124] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 2447.231972][ T6124] do_wp_page+0x192/0xeb0 [ 2447.236378][ T6124] __handle_mm_fault+0x1d16/0x2e00 [ 2447.241719][ T6124] ? try_to_free_mem_cgroup_pages+0x258/0x4d0 [ 2447.247982][ T6124] handle_mm_fault+0x21b/0x530 [ 2447.253265][ T6124] __do_page_fault+0x456/0x8d0 [ 2447.258151][ T6124] do_page_fault+0x38/0x194 [ 2447.262679][ T6124] page_fault+0x34/0x40 [ 2447.266969][ T6124] RIP: 0033:0x40dd48 [ 2447.270872][ T6124] Code: d9 48 8b 47 78 48 83 f8 ff 0f 84 0b 01 00 00 48 8b 73 18 48 83 fe ff 74 29 48 81 fe e7 03 00 00 0f 87 67 01 00 00 48 c1 e6 04 86 80 80 75 00 01 48 89 86 88 80 75 00 66 2e 0f 1f 84 00 00 00 [ 2447.291239][ T6124] RSP: 002b:00007ffda533dca0 EFLAGS: 00010202 [ 2447.297390][ T6124] RAX: 00000000000029ac RBX: 000000000075bfc8 RCX: 0000000000000001 [ 2447.305428][ T6124] RDX: 0000000000000001 RSI: 00000000000002d0 RDI: 000000000075bfc8 [ 2447.313422][ T6124] RBP: 000000000075c9a0 R08: ffffffffffffffff R09: ffffffffffffffff [ 2447.321407][ T6124] R10: 00007ffda533dda0 R11: 0000000000000246 R12: 000000000075c070 [ 2447.329535][ T6124] R13: 0000000000255516 R14: 0000000000255543 R15: 000000000075c07c [ 2447.338374][ T6124] memory: usage 306976kB, limit 307200kB, failcnt 6077 [ 2447.345282][ T6124] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2447.352822][ T6124] Memory cgroup stats for /syz1: [ 2447.353094][ T6124] anon 283729920 [ 2447.353094][ T6124] file 24576 [ 2447.353094][ T6124] kernel_stack 2543616 [ 2447.353094][ T6124] slab 7872512 [ 2447.353094][ T6124] sock 36864 14:24:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r7, r7, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r8) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r11, r11, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r12, 0x0) r13 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r13, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r14 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r14, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r14, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r7, r8, r11, r12, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r13, r14, 0x5}) getgroups(0x3, &(0x7f00000000c0)=[r12, r4, 0xee00]) r15 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) r16 = socket$inet_tcp(0x2, 0x1, 0x0) r17 = fcntl$dupfd(r15, 0x406, r16) getsockopt$sock_cred(r17, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r18, r18, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r19) r20 = socket$inet_tcp(0x2, 0x1, 0x0) r21 = fcntl$dupfd(r20, 0x0, r20) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r22, r22, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r24 = socket$inet_tcp(0x2, 0x1, 0x0) r25 = fcntl$dupfd(r24, 0x0, r24) getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r26, r26, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27) r28 = socket$inet_tcp(0x2, 0x1, 0x0) r29 = fcntl$dupfd(r28, 0x0, r28) getsockopt$sock_cred(r29, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r30, r30, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r31, 0x0) r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r33 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r33, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r33, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r30, r31, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r32, r33, 0x5}) getgroups(0x3, &(0x7f00000000c0)=[r31, r19, 0xee00]) r34 = socket$inet_tcp(0x2, 0x1, 0x0) r35 = fcntl$dupfd(r34, 0x0, r34) getsockopt$sock_cred(r35, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r37 = socket$inet_tcp(0x2, 0x1, 0x0) r38 = fcntl$dupfd(r37, 0x0, r37) getsockopt$sock_cred(r38, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r39, r39, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r40) r41 = socket$inet_tcp(0x2, 0x1, 0x0) r42 = fcntl$dupfd(r41, 0x0, r41) getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r43, r43, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r44, 0x0) r45 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r46 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r46, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r46, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r39, r40, r43, r44, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r45, r46, 0x5}) setresuid(r36, r36, r39) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r47) socket$inet_tcp(0x2, 0x1, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000380)='/dev/md0\x00', 0x208400, 0x0) r48 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r48, 0x40096102, 0x0) recvmmsg(r48, &(0x7f0000004380)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)=""/110, 0x6e}], 0x1, &(0x7f0000000a80)=""/113, 0x71}, 0x8}, {{&(0x7f0000000b00)=@l2, 0x80, &(0x7f0000002b80)=[{&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/4096, 0x1000}], 0x2, &(0x7f0000002bc0)=""/195, 0xc3}, 0x2}], 0x2, 0x40010121, &(0x7f0000004480)={0x0, 0x1c9c380}) ioctl$ASHMEM_GET_PIN_STATUS(r48, 0x7709, 0x0) syz_open_dev$mice(&(0x7f00000003c0)='/dev/input/mice\x00', 0x0, 0x502001) r49 = socket$nl_generic(0x10, 0x3, 0x10) r50 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r49, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r50, 0x400, 0x8000000, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}}, 0x0) r51 = dup(r49) ioctl$KDADDIO(r51, 0x4b34, 0xffffffffffffffff) r52 = socket$nl_generic(0x10, 0x3, 0x10) r53 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r52, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r53, 0x400, 0x8000000, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}}, 0x0) dup(r52) r54 = fcntl$dupfd(r51, 0x406, r52) getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r55, r55, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r56, 0x0) r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r57, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r36, r47, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5}) r59 = socket$inet_tcp(0x2, 0x1, 0x0) r60 = fcntl$dupfd(r59, 0x0, r59) getsockopt$sock_cred(r60, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r62, r62, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r63) r64 = socket$inet_tcp(0x2, 0x1, 0x0) r65 = fcntl$dupfd(r64, 0x0, r64) getsockopt$sock_cred(r65, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r66, r66, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r67, 0x0) r68 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r68, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r69 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r69, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r69, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r62, r63, r66, r67, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r68, r69, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r47, 0xffffffffffffffff, r67, 0x0, 0xee00]) setregid(r23, r70) r71 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r71, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r33, &(0x7f0000000500), 0x2, &(0x7f0000000280)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r18, r19, r22, r23, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r61, r71, 0x5}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r72) r73 = socket$inet_tcp(0x2, 0x1, 0x0) r74 = fcntl$dupfd(r73, 0x0, r73) getsockopt$sock_cred(r74, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r76 = socket$inet_tcp(0x2, 0x1, 0x0) r77 = fcntl$dupfd(r76, 0x0, r76) getsockopt$sock_cred(r77, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r78, r78, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r79) r80 = socket$inet_tcp(0x2, 0x1, 0x0) r81 = fcntl$dupfd(r80, 0x0, r80) getsockopt$sock_cred(r81, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r82, r82, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r83, 0x0) r84 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r85 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r85, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r85, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r78, r79, r82, r83, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r84, r85, 0x5}) setresuid(r75, r75, r78) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r86) r87 = socket$inet_tcp(0x2, 0x1, 0x0) r88 = fcntl$dupfd(r87, 0x0, r87) getsockopt$sock_cred(r88, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r89, r89, 0x0) stat(&(0x7f00000004c0)='./file1\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r90, 0x0) r91 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r91, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r92 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r92, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r92, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r75, r86, r89, r90, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r91, r92, 0x5}) r93 = socket$inet_tcp(0x2, 0x1, 0x0) r94 = fcntl$dupfd(r93, 0x0, r93) getsockopt$sock_cred(r94, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r95, r95, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r96) r97 = socket$inet_tcp(0x2, 0x1, 0x0) r98 = fcntl$dupfd(r97, 0x0, r97) getsockopt$sock_cred(r98, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r99, r99, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r100, 0x0) r101 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r101, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r102 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r102, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r102, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r95, r96, r99, r100, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r101, r102, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r86, 0xffffffffffffffff, r100, 0x0, 0xee00]) r103 = socket$inet_tcp(0x2, 0x1, 0x0) r104 = fcntl$dupfd(r103, 0x0, r103) getsockopt$sock_cred(r104, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r106 = socket$inet_tcp(0x2, 0x1, 0x0) r107 = fcntl$dupfd(r106, 0x0, r106) getsockopt$sock_cred(r107, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r108, r108, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r109) r110 = socket$inet_tcp(0x2, 0x1, 0x0) r111 = fcntl$dupfd(r110, 0x0, r110) getsockopt$sock_cred(r111, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r112, r112, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r113, 0x0) r114 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r115 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r115, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r115, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r108, r109, r112, r113, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r114, r115, 0x5}) setresuid(r105, r105, r108) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r116) r117 = socket$inet_tcp(0x2, 0x1, 0x0) r118 = fcntl$dupfd(r117, 0x0, r117) getsockopt$sock_cred(r118, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r119, r119, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r120, 0x0) r121 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r121, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r122 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r122, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r122, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r105, r116, r119, r120, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r121, r122, 0x5}) r123 = socket$inet_tcp(0x2, 0x1, 0x0) r124 = fcntl$dupfd(r123, 0x0, r123) getsockopt$sock_cred(r124, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r125, r125, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r126) r127 = socket$inet_tcp(0x2, 0x1, 0x0) r128 = fcntl$dupfd(r127, 0x0, r127) getsockopt$sock_cred(r128, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r129, r129, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r130, 0x0) r131 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r131, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r132 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r132, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r132, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r125, r126, r129, r130, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r131, r132, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r116, 0xffffffffffffffff, r130, 0x0, 0xee00]) getgroups(0x9, &(0x7f00000000c0)=[0xffffffffffffffff, r19, 0xee00, r72, 0xffffffffffffffff, r86, r116, 0xffffffffffffffff, 0xee01]) getresgid(&(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000200)=0x0) r135 = getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r136) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r137) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r138) r139 = socket$inet_tcp(0x2, 0x1, 0x0) r140 = fcntl$dupfd(r139, 0x0, r139) getsockopt$sock_cred(r140, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r141, r141, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r142) r143 = socket$inet_tcp(0x2, 0x1, 0x0) r144 = fcntl$dupfd(r143, 0x0, r143) getsockopt$sock_cred(r144, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r145, r145, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r146, 0x0) r147 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r148 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r148, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r148, &(0x7f0000000580), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r141, r142, r145, r146, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r147, r148, 0x5}) setgroups(0x9, &(0x7f0000000240)=[r12, r133, r134, r135, r136, r137, r138, r146, 0xee00]) perf_event_open(&(0x7f0000000000)={0x2, 0xfffffffffffffdb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext={0x9}, 0x12ce9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 14:24:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000140)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) perf_event_open(&(0x7f0000000000)={0x0, 0xfffffffffffffdb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa, @perf_config_ext, 0x12ce9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:24:57 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) sendto$inet(r0, &(0x7f0000000400)='s', 0x1, 0x8840, &(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendmmsg(r0, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="7fc61b6d932dbc563145fefc191dbe34ca8e9ecdb27e56bc6ba8809e7cf04caace2b341d936860e16f71d90cf2a63ea103c29cc8aafd0c67226acce150360262eaae8207", 0x44}], 0x1}}], 0x40000a1, 0x0) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f0000001500)=[{0x0}, {&(0x7f0000000440)=""/150, 0x96}], 0x2}}], 0x300, 0x3, 0x0) [ 2447.353094][ T6124] shmem 0 [ 2447.353094][ T6124] file_mapped 135168 [ 2447.353094][ T6124] file_dirty 135168 [ 2447.353094][ T6124] file_writeback 0 [ 2447.353094][ T6124] anon_thp 264241152 [ 2447.353094][ T6124] inactive_anon 135168 [ 2447.353094][ T6124] active_anon 283701248 [ 2447.353094][ T6124] inactive_file 0 [ 2447.353094][ T6124] active_file 49152 [ 2447.353094][ T6124] unevictable 0 [ 2447.353094][ T6124] slab_reclaimable 1757184 [ 2447.353094][ T6124] slab_unreclaimable 6115328 [ 2447.353094][ T6124] pgfault 228492 [ 2447.353094][ T6124] pgmajfault 0 [ 2447.353094][ T6124] workingset_refault 0 [ 2447.353094][ T6124] workingset_activate 0 [ 2447.353094][ T6124] workingset_nodereclaim 0 [ 2447.353094][ T6124] pgrefill 157 [ 2447.353094][ T6124] pgscan 22995 [ 2447.353094][ T6124] pgsteal 22610 [ 2447.555940][ T6124] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=3889,uid=0 [ 2447.702562][ T6124] Memory cgroup out of memory: Killed process 3889 (syz-executor.1) total-vm:73112kB, anon-rss:4296kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:1000 [ 2447.768054][ T929] oom_reaper: reaped process 3889 (syz-executor.1), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB 14:24:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r7, r7, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r8) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r11, r11, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r12, 0x0) r13 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r13, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r14 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r14, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r14, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r7, r8, r11, r12, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r13, r14, 0x5}) getgroups(0x3, &(0x7f00000000c0)=[r12, r4, 0xee00]) r15 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) r16 = socket$inet_tcp(0x2, 0x1, 0x0) r17 = fcntl$dupfd(r15, 0x406, r16) getsockopt$sock_cred(r17, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r18, r18, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r19) r20 = socket$inet_tcp(0x2, 0x1, 0x0) r21 = fcntl$dupfd(r20, 0x0, r20) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r22, r22, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r24 = socket$inet_tcp(0x2, 0x1, 0x0) r25 = fcntl$dupfd(r24, 0x0, r24) getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r26, r26, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27) r28 = socket$inet_tcp(0x2, 0x1, 0x0) r29 = fcntl$dupfd(r28, 0x0, r28) getsockopt$sock_cred(r29, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r30, r30, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r31, 0x0) r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r33 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r33, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r33, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r30, r31, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r32, r33, 0x5}) getgroups(0x3, &(0x7f00000000c0)=[r31, r19, 0xee00]) r34 = socket$inet_tcp(0x2, 0x1, 0x0) r35 = fcntl$dupfd(r34, 0x0, r34) getsockopt$sock_cred(r35, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r37 = socket$inet_tcp(0x2, 0x1, 0x0) r38 = fcntl$dupfd(r37, 0x0, r37) getsockopt$sock_cred(r38, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r39, r39, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r40) r41 = socket$inet_tcp(0x2, 0x1, 0x0) r42 = fcntl$dupfd(r41, 0x0, r41) getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r43, r43, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r44, 0x0) r45 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r46 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r46, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r46, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r39, r40, r43, r44, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r45, r46, 0x5}) setresuid(r36, r36, r39) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r47) socket$inet_tcp(0x2, 0x1, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000380)='/dev/md0\x00', 0x208400, 0x0) r48 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r48, 0x40096102, 0x0) recvmmsg(r48, &(0x7f0000004380)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)=""/110, 0x6e}], 0x1, &(0x7f0000000a80)=""/113, 0x71}, 0x8}, {{&(0x7f0000000b00)=@l2, 0x80, &(0x7f0000002b80)=[{&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/4096, 0x1000}], 0x2, &(0x7f0000002bc0)=""/195, 0xc3}, 0x2}], 0x2, 0x40010121, &(0x7f0000004480)={0x0, 0x1c9c380}) ioctl$ASHMEM_GET_PIN_STATUS(r48, 0x7709, 0x0) syz_open_dev$mice(&(0x7f00000003c0)='/dev/input/mice\x00', 0x0, 0x502001) r49 = socket$nl_generic(0x10, 0x3, 0x10) r50 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r49, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r50, 0x400, 0x8000000, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}}, 0x0) r51 = dup(r49) ioctl$KDADDIO(r51, 0x4b34, 0xffffffffffffffff) r52 = socket$nl_generic(0x10, 0x3, 0x10) r53 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r52, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r53, 0x400, 0x8000000, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}}, 0x0) dup(r52) r54 = fcntl$dupfd(r51, 0x406, r52) getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r55, r55, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r56, 0x0) r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r57, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r36, r47, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5}) r59 = socket$inet_tcp(0x2, 0x1, 0x0) r60 = fcntl$dupfd(r59, 0x0, r59) getsockopt$sock_cred(r60, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r62, r62, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r63) r64 = socket$inet_tcp(0x2, 0x1, 0x0) r65 = fcntl$dupfd(r64, 0x0, r64) getsockopt$sock_cred(r65, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r66, r66, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r67, 0x0) r68 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r68, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r69 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r69, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r69, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r62, r63, r66, r67, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r68, r69, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r47, 0xffffffffffffffff, r67, 0x0, 0xee00]) setregid(r23, r70) r71 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r71, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r33, &(0x7f0000000500), 0x2, &(0x7f0000000280)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r18, r19, r22, r23, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r61, r71, 0x5}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r72) r73 = socket$inet_tcp(0x2, 0x1, 0x0) r74 = fcntl$dupfd(r73, 0x0, r73) getsockopt$sock_cred(r74, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r76 = socket$inet_tcp(0x2, 0x1, 0x0) r77 = fcntl$dupfd(r76, 0x0, r76) getsockopt$sock_cred(r77, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r78, r78, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r79) r80 = socket$inet_tcp(0x2, 0x1, 0x0) r81 = fcntl$dupfd(r80, 0x0, r80) getsockopt$sock_cred(r81, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r82, r82, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r83, 0x0) r84 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r85 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r85, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r85, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r78, r79, r82, r83, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r84, r85, 0x5}) setresuid(r75, r75, r78) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r86) r87 = socket$inet_tcp(0x2, 0x1, 0x0) r88 = fcntl$dupfd(r87, 0x0, r87) getsockopt$sock_cred(r88, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r89, r89, 0x0) stat(&(0x7f00000004c0)='./file1\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r90, 0x0) r91 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r91, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r92 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r92, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r92, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r75, r86, r89, r90, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r91, r92, 0x5}) r93 = socket$inet_tcp(0x2, 0x1, 0x0) r94 = fcntl$dupfd(r93, 0x0, r93) getsockopt$sock_cred(r94, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r95, r95, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r96) r97 = socket$inet_tcp(0x2, 0x1, 0x0) r98 = fcntl$dupfd(r97, 0x0, r97) getsockopt$sock_cred(r98, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r99, r99, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r100, 0x0) r101 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r101, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r102 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r102, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r102, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r95, r96, r99, r100, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r101, r102, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r86, 0xffffffffffffffff, r100, 0x0, 0xee00]) r103 = socket$inet_tcp(0x2, 0x1, 0x0) r104 = fcntl$dupfd(r103, 0x0, r103) getsockopt$sock_cred(r104, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r106 = socket$inet_tcp(0x2, 0x1, 0x0) r107 = fcntl$dupfd(r106, 0x0, r106) getsockopt$sock_cred(r107, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r108, r108, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r109) r110 = socket$inet_tcp(0x2, 0x1, 0x0) r111 = fcntl$dupfd(r110, 0x0, r110) getsockopt$sock_cred(r111, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r112, r112, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r113, 0x0) r114 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r115 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r115, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r115, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r108, r109, r112, r113, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r114, r115, 0x5}) setresuid(r105, r105, r108) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r116) r117 = socket$inet_tcp(0x2, 0x1, 0x0) r118 = fcntl$dupfd(r117, 0x0, r117) getsockopt$sock_cred(r118, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r119, r119, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r120, 0x0) r121 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r121, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r122 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r122, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r122, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r105, r116, r119, r120, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r121, r122, 0x5}) r123 = socket$inet_tcp(0x2, 0x1, 0x0) r124 = fcntl$dupfd(r123, 0x0, r123) getsockopt$sock_cred(r124, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r125, r125, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r126) r127 = socket$inet_tcp(0x2, 0x1, 0x0) r128 = fcntl$dupfd(r127, 0x0, r127) getsockopt$sock_cred(r128, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r129, r129, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r130, 0x0) r131 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r131, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r132 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r132, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r132, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r125, r126, r129, r130, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r131, r132, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r116, 0xffffffffffffffff, r130, 0x0, 0xee00]) getgroups(0x9, &(0x7f00000000c0)=[0xffffffffffffffff, r19, 0xee00, r72, 0xffffffffffffffff, r86, r116, 0xffffffffffffffff, 0xee01]) getresgid(&(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000200)=0x0) r135 = getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r136) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r137) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r138) r139 = socket$inet_tcp(0x2, 0x1, 0x0) r140 = fcntl$dupfd(r139, 0x0, r139) getsockopt$sock_cred(r140, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r141, r141, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r142) r143 = socket$inet_tcp(0x2, 0x1, 0x0) r144 = fcntl$dupfd(r143, 0x0, r143) getsockopt$sock_cred(r144, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r145, r145, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r146, 0x0) r147 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r148 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r148, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r148, &(0x7f0000000580), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r141, r142, r145, r146, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r147, r148, 0x5}) setgroups(0x9, &(0x7f0000000240)=[r12, r133, r134, r135, r136, r137, r138, r146, 0xee00]) perf_event_open(&(0x7f0000000000)={0x2, 0xfffffffffffffdb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext={0x9}, 0x12ce9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 14:24:58 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="020b000007000000000021003f5403620500010001009a934dd520175e3b8f8886264fe600001000e0c99f3d653c00f0ff9da499df0005"], 0x37}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x20, 0x0) recvmmsg(r0, &(0x7f0000000140), 0x400000000000151, 0x2000000022, &(0x7f00000001c0)={0x77359400}) 14:24:58 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) sendto$inet(r0, &(0x7f0000000400)='s', 0x1, 0x8840, &(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendmmsg(r0, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="7fc61b6d932dbc563145fefc191dbe34ca8e9ecdb27e56bc6ba8809e7cf04caace2b341d936860e16f71d90cf2a63ea103c29cc8aafd0c67226acce150360262eaae8207", 0x44}], 0x1}}], 0x40000a1, 0x0) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f0000001500)=[{0x0}, {&(0x7f0000000440)=""/150, 0x96}], 0x2}}], 0x300, 0x3, 0x0) 14:24:58 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r7, r7, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r8) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r11, r11, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r12, 0x0) r13 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r13, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r14 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r14, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r14, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r7, r8, r11, r12, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r13, r14, 0x5}) getgroups(0x3, &(0x7f00000000c0)=[r12, r4, 0xee00]) r15 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) r16 = socket$inet_tcp(0x2, 0x1, 0x0) r17 = fcntl$dupfd(r15, 0x406, r16) getsockopt$sock_cred(r17, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r18, r18, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r19) r20 = socket$inet_tcp(0x2, 0x1, 0x0) r21 = fcntl$dupfd(r20, 0x0, r20) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r22, r22, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r24 = socket$inet_tcp(0x2, 0x1, 0x0) r25 = fcntl$dupfd(r24, 0x0, r24) getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r26, r26, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27) r28 = socket$inet_tcp(0x2, 0x1, 0x0) r29 = fcntl$dupfd(r28, 0x0, r28) getsockopt$sock_cred(r29, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r30, r30, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r31, 0x0) r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r33 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r33, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r33, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r30, r31, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r32, r33, 0x5}) getgroups(0x3, &(0x7f00000000c0)=[r31, r19, 0xee00]) r34 = socket$inet_tcp(0x2, 0x1, 0x0) r35 = fcntl$dupfd(r34, 0x0, r34) getsockopt$sock_cred(r35, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r37 = socket$inet_tcp(0x2, 0x1, 0x0) r38 = fcntl$dupfd(r37, 0x0, r37) getsockopt$sock_cred(r38, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r39, r39, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r40) r41 = socket$inet_tcp(0x2, 0x1, 0x0) r42 = fcntl$dupfd(r41, 0x0, r41) getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r43, r43, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r44, 0x0) r45 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r46 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r46, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r46, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r39, r40, r43, r44, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r45, r46, 0x5}) setresuid(r36, r36, r39) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r47) socket$inet_tcp(0x2, 0x1, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000380)='/dev/md0\x00', 0x208400, 0x0) r48 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r48, 0x40096102, 0x0) recvmmsg(r48, &(0x7f0000004380)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)=""/110, 0x6e}], 0x1, &(0x7f0000000a80)=""/113, 0x71}, 0x8}, {{&(0x7f0000000b00)=@l2, 0x80, &(0x7f0000002b80)=[{&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/4096, 0x1000}], 0x2, &(0x7f0000002bc0)=""/195, 0xc3}, 0x2}], 0x2, 0x40010121, &(0x7f0000004480)={0x0, 0x1c9c380}) ioctl$ASHMEM_GET_PIN_STATUS(r48, 0x7709, 0x0) syz_open_dev$mice(&(0x7f00000003c0)='/dev/input/mice\x00', 0x0, 0x502001) r49 = socket$nl_generic(0x10, 0x3, 0x10) r50 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r49, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r50, 0x400, 0x8000000, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}}, 0x0) r51 = dup(r49) ioctl$KDADDIO(r51, 0x4b34, 0xffffffffffffffff) r52 = socket$nl_generic(0x10, 0x3, 0x10) r53 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r52, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r53, 0x400, 0x8000000, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}}, 0x0) dup(r52) r54 = fcntl$dupfd(r51, 0x406, r52) getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r55, r55, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r56, 0x0) r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r57, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r36, r47, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5}) r59 = socket$inet_tcp(0x2, 0x1, 0x0) r60 = fcntl$dupfd(r59, 0x0, r59) getsockopt$sock_cred(r60, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r62, r62, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r63) r64 = socket$inet_tcp(0x2, 0x1, 0x0) r65 = fcntl$dupfd(r64, 0x0, r64) getsockopt$sock_cred(r65, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r66, r66, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r67, 0x0) r68 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r68, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r69 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r69, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r69, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r62, r63, r66, r67, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r68, r69, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r47, 0xffffffffffffffff, r67, 0x0, 0xee00]) setregid(r23, r70) r71 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r71, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r33, &(0x7f0000000500), 0x2, &(0x7f0000000280)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r18, r19, r22, r23, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r61, r71, 0x5}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r72) r73 = socket$inet_tcp(0x2, 0x1, 0x0) r74 = fcntl$dupfd(r73, 0x0, r73) getsockopt$sock_cred(r74, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r76 = socket$inet_tcp(0x2, 0x1, 0x0) r77 = fcntl$dupfd(r76, 0x0, r76) getsockopt$sock_cred(r77, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r78, r78, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r79) r80 = socket$inet_tcp(0x2, 0x1, 0x0) r81 = fcntl$dupfd(r80, 0x0, r80) getsockopt$sock_cred(r81, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r82, r82, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r83, 0x0) r84 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r85 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r85, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r85, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r78, r79, r82, r83, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r84, r85, 0x5}) setresuid(r75, r75, r78) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r86) r87 = socket$inet_tcp(0x2, 0x1, 0x0) r88 = fcntl$dupfd(r87, 0x0, r87) getsockopt$sock_cred(r88, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r89, r89, 0x0) stat(&(0x7f00000004c0)='./file1\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r90, 0x0) r91 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r91, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r92 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r92, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r92, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r75, r86, r89, r90, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r91, r92, 0x5}) r93 = socket$inet_tcp(0x2, 0x1, 0x0) r94 = fcntl$dupfd(r93, 0x0, r93) getsockopt$sock_cred(r94, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r95, r95, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r96) r97 = socket$inet_tcp(0x2, 0x1, 0x0) r98 = fcntl$dupfd(r97, 0x0, r97) getsockopt$sock_cred(r98, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r99, r99, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r100, 0x0) r101 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r101, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r102 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r102, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r102, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r95, r96, r99, r100, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r101, r102, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r86, 0xffffffffffffffff, r100, 0x0, 0xee00]) r103 = socket$inet_tcp(0x2, 0x1, 0x0) r104 = fcntl$dupfd(r103, 0x0, r103) getsockopt$sock_cred(r104, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r106 = socket$inet_tcp(0x2, 0x1, 0x0) r107 = fcntl$dupfd(r106, 0x0, r106) getsockopt$sock_cred(r107, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r108, r108, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r109) r110 = socket$inet_tcp(0x2, 0x1, 0x0) r111 = fcntl$dupfd(r110, 0x0, r110) getsockopt$sock_cred(r111, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r112, r112, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r113, 0x0) r114 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r115 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r115, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r115, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r108, r109, r112, r113, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r114, r115, 0x5}) setresuid(r105, r105, r108) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r116) r117 = socket$inet_tcp(0x2, 0x1, 0x0) r118 = fcntl$dupfd(r117, 0x0, r117) getsockopt$sock_cred(r118, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r119, r119, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r120, 0x0) r121 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r121, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r122 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r122, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r122, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r105, r116, r119, r120, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r121, r122, 0x5}) r123 = socket$inet_tcp(0x2, 0x1, 0x0) r124 = fcntl$dupfd(r123, 0x0, r123) getsockopt$sock_cred(r124, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r125, r125, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r126) r127 = socket$inet_tcp(0x2, 0x1, 0x0) r128 = fcntl$dupfd(r127, 0x0, r127) getsockopt$sock_cred(r128, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r129, r129, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r130, 0x0) r131 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r131, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r132 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r132, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r132, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r125, r126, r129, r130, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r131, r132, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r116, 0xffffffffffffffff, r130, 0x0, 0xee00]) getgroups(0x9, &(0x7f00000000c0)=[0xffffffffffffffff, r19, 0xee00, r72, 0xffffffffffffffff, r86, r116, 0xffffffffffffffff, 0xee01]) getresgid(&(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000200)=0x0) r135 = getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r136) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r137) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r138) r139 = socket$inet_tcp(0x2, 0x1, 0x0) r140 = fcntl$dupfd(r139, 0x0, r139) getsockopt$sock_cred(r140, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r141, r141, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r142) r143 = socket$inet_tcp(0x2, 0x1, 0x0) r144 = fcntl$dupfd(r143, 0x0, r143) getsockopt$sock_cred(r144, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r145, r145, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r146, 0x0) r147 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r148 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r148, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r148, &(0x7f0000000580), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r141, r142, r145, r146, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r147, r148, 0x5}) setgroups(0x9, &(0x7f0000000240)=[r12, r133, r134, r135, r136, r137, r138, r146, 0xee00]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:24:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r7, r7, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r8) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r11, r11, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r12, 0x0) r13 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r13, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r14 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r14, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r14, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r7, r8, r11, r12, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r13, r14, 0x5}) getgroups(0x3, &(0x7f00000000c0)=[r12, r4, 0xee00]) r15 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) r16 = socket$inet_tcp(0x2, 0x1, 0x0) r17 = fcntl$dupfd(r15, 0x406, r16) getsockopt$sock_cred(r17, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r18, r18, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r19) r20 = socket$inet_tcp(0x2, 0x1, 0x0) r21 = fcntl$dupfd(r20, 0x0, r20) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r22, r22, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r24 = socket$inet_tcp(0x2, 0x1, 0x0) r25 = fcntl$dupfd(r24, 0x0, r24) getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r26, r26, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27) r28 = socket$inet_tcp(0x2, 0x1, 0x0) r29 = fcntl$dupfd(r28, 0x0, r28) getsockopt$sock_cred(r29, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r30, r30, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r31, 0x0) r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r33 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r33, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r33, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r30, r31, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r32, r33, 0x5}) getgroups(0x3, &(0x7f00000000c0)=[r31, r19, 0xee00]) r34 = socket$inet_tcp(0x2, 0x1, 0x0) r35 = fcntl$dupfd(r34, 0x0, r34) getsockopt$sock_cred(r35, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r37 = socket$inet_tcp(0x2, 0x1, 0x0) r38 = fcntl$dupfd(r37, 0x0, r37) getsockopt$sock_cred(r38, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r39, r39, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r40) r41 = socket$inet_tcp(0x2, 0x1, 0x0) r42 = fcntl$dupfd(r41, 0x0, r41) getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r43, r43, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r44, 0x0) r45 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r46 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r46, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r46, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r39, r40, r43, r44, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r45, r46, 0x5}) setresuid(r36, r36, r39) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r47) socket$inet_tcp(0x2, 0x1, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000380)='/dev/md0\x00', 0x208400, 0x0) r48 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r48, 0x40096102, 0x0) recvmmsg(r48, &(0x7f0000004380)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)=""/110, 0x6e}], 0x1, &(0x7f0000000a80)=""/113, 0x71}, 0x8}, {{&(0x7f0000000b00)=@l2, 0x80, &(0x7f0000002b80)=[{&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/4096, 0x1000}], 0x2, &(0x7f0000002bc0)=""/195, 0xc3}, 0x2}], 0x2, 0x40010121, &(0x7f0000004480)={0x0, 0x1c9c380}) ioctl$ASHMEM_GET_PIN_STATUS(r48, 0x7709, 0x0) syz_open_dev$mice(&(0x7f00000003c0)='/dev/input/mice\x00', 0x0, 0x502001) r49 = socket$nl_generic(0x10, 0x3, 0x10) r50 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r49, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r50, 0x400, 0x8000000, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}}, 0x0) r51 = dup(r49) ioctl$KDADDIO(r51, 0x4b34, 0xffffffffffffffff) r52 = socket$nl_generic(0x10, 0x3, 0x10) r53 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r52, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r53, 0x400, 0x8000000, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}}, 0x0) dup(r52) r54 = fcntl$dupfd(r51, 0x406, r52) getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r55, r55, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r56, 0x0) r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r57, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r36, r47, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5}) r59 = socket$inet_tcp(0x2, 0x1, 0x0) r60 = fcntl$dupfd(r59, 0x0, r59) getsockopt$sock_cred(r60, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r62, r62, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r63) r64 = socket$inet_tcp(0x2, 0x1, 0x0) r65 = fcntl$dupfd(r64, 0x0, r64) getsockopt$sock_cred(r65, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r66, r66, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r67, 0x0) r68 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r68, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r69 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r69, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r69, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r62, r63, r66, r67, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r68, r69, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r47, 0xffffffffffffffff, r67, 0x0, 0xee00]) setregid(r23, r70) r71 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r71, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r33, &(0x7f0000000500), 0x2, &(0x7f0000000280)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r18, r19, r22, r23, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r61, r71, 0x5}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r72) r73 = socket$inet_tcp(0x2, 0x1, 0x0) r74 = fcntl$dupfd(r73, 0x0, r73) getsockopt$sock_cred(r74, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r76 = socket$inet_tcp(0x2, 0x1, 0x0) r77 = fcntl$dupfd(r76, 0x0, r76) getsockopt$sock_cred(r77, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r78, r78, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r79) r80 = socket$inet_tcp(0x2, 0x1, 0x0) r81 = fcntl$dupfd(r80, 0x0, r80) getsockopt$sock_cred(r81, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r82, r82, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r83, 0x0) r84 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r85 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r85, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r85, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r78, r79, r82, r83, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r84, r85, 0x5}) setresuid(r75, r75, r78) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r86) r87 = socket$inet_tcp(0x2, 0x1, 0x0) r88 = fcntl$dupfd(r87, 0x0, r87) getsockopt$sock_cred(r88, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r89, r89, 0x0) stat(&(0x7f00000004c0)='./file1\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r90, 0x0) r91 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r91, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r92 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r92, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r92, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r75, r86, r89, r90, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r91, r92, 0x5}) r93 = socket$inet_tcp(0x2, 0x1, 0x0) r94 = fcntl$dupfd(r93, 0x0, r93) getsockopt$sock_cred(r94, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r95, r95, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r96) r97 = socket$inet_tcp(0x2, 0x1, 0x0) r98 = fcntl$dupfd(r97, 0x0, r97) getsockopt$sock_cred(r98, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r99, r99, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r100, 0x0) r101 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r101, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r102 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r102, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r102, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r95, r96, r99, r100, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r101, r102, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r86, 0xffffffffffffffff, r100, 0x0, 0xee00]) r103 = socket$inet_tcp(0x2, 0x1, 0x0) r104 = fcntl$dupfd(r103, 0x0, r103) getsockopt$sock_cred(r104, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r106 = socket$inet_tcp(0x2, 0x1, 0x0) r107 = fcntl$dupfd(r106, 0x0, r106) getsockopt$sock_cred(r107, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r108, r108, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r109) r110 = socket$inet_tcp(0x2, 0x1, 0x0) r111 = fcntl$dupfd(r110, 0x0, r110) getsockopt$sock_cred(r111, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r112, r112, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r113, 0x0) r114 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r115 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r115, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r115, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r108, r109, r112, r113, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r114, r115, 0x5}) setresuid(r105, r105, r108) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r116) r117 = socket$inet_tcp(0x2, 0x1, 0x0) r118 = fcntl$dupfd(r117, 0x0, r117) getsockopt$sock_cred(r118, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r119, r119, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r120, 0x0) r121 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r121, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r122 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r122, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r122, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r105, r116, r119, r120, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r121, r122, 0x5}) r123 = socket$inet_tcp(0x2, 0x1, 0x0) r124 = fcntl$dupfd(r123, 0x0, r123) getsockopt$sock_cred(r124, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r125, r125, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r126) r127 = socket$inet_tcp(0x2, 0x1, 0x0) r128 = fcntl$dupfd(r127, 0x0, r127) getsockopt$sock_cred(r128, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r129, r129, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r130, 0x0) r131 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r131, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r132 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r132, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r132, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r125, r126, r129, r130, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r131, r132, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r116, 0xffffffffffffffff, r130, 0x0, 0xee00]) getgroups(0x9, &(0x7f00000000c0)=[0xffffffffffffffff, r19, 0xee00, r72, 0xffffffffffffffff, r86, r116, 0xffffffffffffffff, 0xee01]) getresgid(&(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000200)=0x0) r135 = getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r136) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r137) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r138) r139 = socket$inet_tcp(0x2, 0x1, 0x0) r140 = fcntl$dupfd(r139, 0x0, r139) getsockopt$sock_cred(r140, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r141, r141, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r142) r143 = socket$inet_tcp(0x2, 0x1, 0x0) r144 = fcntl$dupfd(r143, 0x0, r143) getsockopt$sock_cred(r144, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r145, r145, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r146, 0x0) r147 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r148 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r148, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r148, &(0x7f0000000580), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r141, r142, r145, r146, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r147, r148, 0x5}) setgroups(0x9, &(0x7f0000000240)=[r12, r133, r134, r135, r136, r137, r138, r146, 0xee00]) perf_event_open(&(0x7f0000000000)={0x2, 0xfffffffffffffdb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext={0x9}, 0x12ce9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 14:24:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000140)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) perf_event_open(&(0x7f0000000000)={0x0, 0xfffffffffffffdb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa, @perf_config_ext, 0x12ce9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:24:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r7, r7, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r8) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r11, r11, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r12, 0x0) r13 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r13, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r14 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r14, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r14, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r7, r8, r11, r12, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r13, r14, 0x5}) getgroups(0x3, &(0x7f00000000c0)=[r12, r4, 0xee00]) r15 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) r16 = socket$inet_tcp(0x2, 0x1, 0x0) r17 = fcntl$dupfd(r15, 0x406, r16) getsockopt$sock_cred(r17, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r18, r18, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r19) r20 = socket$inet_tcp(0x2, 0x1, 0x0) r21 = fcntl$dupfd(r20, 0x0, r20) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r22, r22, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r24 = socket$inet_tcp(0x2, 0x1, 0x0) r25 = fcntl$dupfd(r24, 0x0, r24) getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r26, r26, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27) r28 = socket$inet_tcp(0x2, 0x1, 0x0) r29 = fcntl$dupfd(r28, 0x0, r28) getsockopt$sock_cred(r29, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r30, r30, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r31, 0x0) r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r33 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r33, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r33, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r30, r31, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r32, r33, 0x5}) getgroups(0x3, &(0x7f00000000c0)=[r31, r19, 0xee00]) r34 = socket$inet_tcp(0x2, 0x1, 0x0) r35 = fcntl$dupfd(r34, 0x0, r34) getsockopt$sock_cred(r35, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r37 = socket$inet_tcp(0x2, 0x1, 0x0) r38 = fcntl$dupfd(r37, 0x0, r37) getsockopt$sock_cred(r38, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r39, r39, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r40) r41 = socket$inet_tcp(0x2, 0x1, 0x0) r42 = fcntl$dupfd(r41, 0x0, r41) getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r43, r43, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r44, 0x0) r45 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r46 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r46, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r46, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r39, r40, r43, r44, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r45, r46, 0x5}) setresuid(r36, r36, r39) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r47) socket$inet_tcp(0x2, 0x1, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000380)='/dev/md0\x00', 0x208400, 0x0) r48 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r48, 0x40096102, 0x0) recvmmsg(r48, &(0x7f0000004380)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)=""/110, 0x6e}], 0x1, &(0x7f0000000a80)=""/113, 0x71}, 0x8}, {{&(0x7f0000000b00)=@l2, 0x80, &(0x7f0000002b80)=[{&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/4096, 0x1000}], 0x2, &(0x7f0000002bc0)=""/195, 0xc3}, 0x2}], 0x2, 0x40010121, &(0x7f0000004480)={0x0, 0x1c9c380}) ioctl$ASHMEM_GET_PIN_STATUS(r48, 0x7709, 0x0) syz_open_dev$mice(&(0x7f00000003c0)='/dev/input/mice\x00', 0x0, 0x502001) r49 = socket$nl_generic(0x10, 0x3, 0x10) r50 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r49, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r50, 0x400, 0x8000000, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}}, 0x0) r51 = dup(r49) ioctl$KDADDIO(r51, 0x4b34, 0xffffffffffffffff) r52 = socket$nl_generic(0x10, 0x3, 0x10) r53 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r52, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r53, 0x400, 0x8000000, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}}, 0x0) dup(r52) r54 = fcntl$dupfd(r51, 0x406, r52) getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r55, r55, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r56, 0x0) r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r57, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r36, r47, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5}) r59 = socket$inet_tcp(0x2, 0x1, 0x0) r60 = fcntl$dupfd(r59, 0x0, r59) getsockopt$sock_cred(r60, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r62, r62, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r63) r64 = socket$inet_tcp(0x2, 0x1, 0x0) r65 = fcntl$dupfd(r64, 0x0, r64) getsockopt$sock_cred(r65, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r66, r66, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r67, 0x0) r68 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r68, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r69 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r69, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r69, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r62, r63, r66, r67, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r68, r69, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r47, 0xffffffffffffffff, r67, 0x0, 0xee00]) setregid(r23, r70) r71 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r71, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r33, &(0x7f0000000500), 0x2, &(0x7f0000000280)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r18, r19, r22, r23, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r61, r71, 0x5}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r72) r73 = socket$inet_tcp(0x2, 0x1, 0x0) r74 = fcntl$dupfd(r73, 0x0, r73) getsockopt$sock_cred(r74, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r76 = socket$inet_tcp(0x2, 0x1, 0x0) r77 = fcntl$dupfd(r76, 0x0, r76) getsockopt$sock_cred(r77, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r78, r78, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r79) r80 = socket$inet_tcp(0x2, 0x1, 0x0) r81 = fcntl$dupfd(r80, 0x0, r80) getsockopt$sock_cred(r81, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r82, r82, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r83, 0x0) r84 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r85 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r85, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r85, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r78, r79, r82, r83, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r84, r85, 0x5}) setresuid(r75, r75, r78) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r86) r87 = socket$inet_tcp(0x2, 0x1, 0x0) r88 = fcntl$dupfd(r87, 0x0, r87) getsockopt$sock_cred(r88, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r89, r89, 0x0) stat(&(0x7f00000004c0)='./file1\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r90, 0x0) r91 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r91, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r92 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r92, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r92, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r75, r86, r89, r90, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r91, r92, 0x5}) r93 = socket$inet_tcp(0x2, 0x1, 0x0) r94 = fcntl$dupfd(r93, 0x0, r93) getsockopt$sock_cred(r94, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r95, r95, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r96) r97 = socket$inet_tcp(0x2, 0x1, 0x0) r98 = fcntl$dupfd(r97, 0x0, r97) getsockopt$sock_cred(r98, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r99, r99, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r100, 0x0) r101 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r101, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r102 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r102, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r102, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r95, r96, r99, r100, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r101, r102, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r86, 0xffffffffffffffff, r100, 0x0, 0xee00]) r103 = socket$inet_tcp(0x2, 0x1, 0x0) r104 = fcntl$dupfd(r103, 0x0, r103) getsockopt$sock_cred(r104, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r106 = socket$inet_tcp(0x2, 0x1, 0x0) r107 = fcntl$dupfd(r106, 0x0, r106) getsockopt$sock_cred(r107, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r108, r108, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r109) r110 = socket$inet_tcp(0x2, 0x1, 0x0) r111 = fcntl$dupfd(r110, 0x0, r110) getsockopt$sock_cred(r111, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r112, r112, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r113, 0x0) r114 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r115 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r115, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r115, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r108, r109, r112, r113, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r114, r115, 0x5}) setresuid(r105, r105, r108) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r116) r117 = socket$inet_tcp(0x2, 0x1, 0x0) r118 = fcntl$dupfd(r117, 0x0, r117) getsockopt$sock_cred(r118, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r119, r119, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r120, 0x0) r121 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r121, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r122 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r122, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r122, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r105, r116, r119, r120, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r121, r122, 0x5}) r123 = socket$inet_tcp(0x2, 0x1, 0x0) r124 = fcntl$dupfd(r123, 0x0, r123) getsockopt$sock_cred(r124, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r125, r125, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r126) r127 = socket$inet_tcp(0x2, 0x1, 0x0) r128 = fcntl$dupfd(r127, 0x0, r127) getsockopt$sock_cred(r128, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r129, r129, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r130, 0x0) r131 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r131, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r132 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r132, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r132, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r125, r126, r129, r130, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r131, r132, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r116, 0xffffffffffffffff, r130, 0x0, 0xee00]) getgroups(0x9, &(0x7f00000000c0)=[0xffffffffffffffff, r19, 0xee00, r72, 0xffffffffffffffff, r86, r116, 0xffffffffffffffff, 0xee01]) getresgid(&(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000200)=0x0) r135 = getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r136) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r137) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r138) r139 = socket$inet_tcp(0x2, 0x1, 0x0) r140 = fcntl$dupfd(r139, 0x0, r139) getsockopt$sock_cred(r140, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r141, r141, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r142) r143 = socket$inet_tcp(0x2, 0x1, 0x0) r144 = fcntl$dupfd(r143, 0x0, r143) getsockopt$sock_cred(r144, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r145, r145, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r146, 0x0) r147 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r148 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r148, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r148, &(0x7f0000000580), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r141, r142, r145, r146, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r147, r148, 0x5}) setgroups(0x9, &(0x7f0000000240)=[r12, r133, r134, r135, r136, r137, r138, r146, 0xee00]) perf_event_open(&(0x7f0000000000)={0x2, 0xfffffffffffffdb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext={0x9}, 0x12ce9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2448.160190][ C0] net_ratelimit: 22 callbacks suppressed [ 2448.160199][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2448.171681][ C0] protocol 88fb is buggy, dev hsr_slave_1 14:24:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000140)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) perf_event_open(&(0x7f0000000000)={0x0, 0xfffffffffffffdb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa, @perf_config_ext, 0x12ce9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:24:59 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) sendto$inet(r0, &(0x7f0000000400)='s', 0x1, 0x8840, &(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendmmsg(r0, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="7fc61b6d932dbc563145fefc191dbe34ca8e9ecdb27e56bc6ba8809e7cf04caace2b341d936860e16f71d90cf2a63ea103c29cc8aafd0c67226acce150360262eaae8207", 0x44}], 0x1}}], 0x40000a1, 0x0) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f0000001500)=[{0x0}, {&(0x7f0000000440)=""/150, 0x96}], 0x2}}], 0x300, 0x3, 0x0) 14:24:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000140)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) perf_event_open(&(0x7f0000000000)={0x0, 0xfffffffffffffdb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa, @perf_config_ext, 0x12ce9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:24:59 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="020b000007000000000021003f5403620500010001009a934dd520175e3b8f8886264fe600001000e0c99f3d653c00f0ff9da499df0005dc"], 0x38}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x20, 0x0) recvmmsg(r0, &(0x7f0000000140), 0x400000000000151, 0x2000000022, &(0x7f00000001c0)={0x77359400}) [ 2448.880260][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2448.886191][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2448.998632][ T6639] QAT: failed to copy from user cfg_data. [ 2449.028099][ T6639] QAT: Invalid ioctl [ 2449.360587][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2449.366993][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2449.373403][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2449.379702][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:24:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000140)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) perf_event_open(&(0x7f0000000000)={0x0, 0xfffffffffffffdb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa, @perf_config_ext, 0x12ce9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2449.600258][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2449.606047][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2450.471875][ T6522] QAT: failed to copy from user cfg_data. [ 2450.545456][ T6522] QAT: Invalid ioctl [ 2450.797143][ T6637] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2450.807907][ T6637] CPU: 1 PID: 6637 Comm: syz-executor.1 Not tainted 5.5.0-rc1-syzkaller #0 [ 2450.816484][ T6637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2450.826534][ T6637] Call Trace: [ 2450.829944][ T6637] dump_stack+0x11d/0x181 [ 2450.834342][ T6637] dump_header+0xaa/0x39c [ 2450.838704][ T6637] oom_kill_process.cold+0x10/0x15 [ 2450.843854][ T6637] out_of_memory+0x231/0xa60 [ 2450.848484][ T6637] ? __rcu_read_unlock+0x66/0x3d0 [ 2450.853512][ T6637] mem_cgroup_out_of_memory+0x128/0x150 [ 2450.859063][ T6637] try_charge+0xb6c/0xbf0 [ 2450.863402][ T6637] ? setup_fault_attr+0x90/0x120 [ 2450.868483][ T6637] ? __rcu_read_unlock+0x66/0x3d0 [ 2450.873678][ T6637] __memcg_kmem_charge_memcg+0x4a/0xe0 [ 2450.879224][ T6637] __memcg_kmem_charge+0xcf/0x1b0 [ 2450.884375][ T6637] copy_process+0x11d2/0x3c40 [ 2450.889059][ T6637] ? check_stack_object+0xda/0x110 [ 2450.894236][ T6637] _do_fork+0xfe/0x7a0 [ 2450.898307][ T6637] __do_sys_clone3+0x1bd/0x260 [ 2450.903100][ T6637] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 2450.908818][ T6637] ? _copy_to_user+0x84/0xb0 [ 2450.913527][ T6637] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2450.919776][ T6637] ? put_timespec64+0x94/0xc0 [ 2450.924456][ T6637] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2450.930793][ T6637] __x64_sys_clone3+0x3a/0x50 [ 2450.935612][ T6637] do_syscall_64+0xcc/0x3a0 [ 2450.940290][ T6637] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2450.946318][ T6637] RIP: 0033:0x45b349 [ 2450.950484][ T6637] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2450.970103][ T6637] RSP: 002b:00007fedcbcafc78 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2450.978531][ T6637] RAX: ffffffffffffffda RBX: 00007fedcbcb06d4 RCX: 000000000045b349 [ 2450.986542][ T6637] RDX: 0000000000000000 RSI: 0000000000000040 RDI: 0000000020001680 [ 2450.994512][ T6637] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 2451.002511][ T6637] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2451.010656][ T6637] R13: 0000000000000071 R14: 00000000004c1bca R15: 000000000075bfd4 [ 2451.019440][ T6637] memory: usage 307200kB, limit 307200kB, failcnt 6180 [ 2451.026357][ T6637] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2451.033245][ T6637] Memory cgroup stats for /syz1: [ 2451.033485][ T6637] anon 283410432 [ 2451.033485][ T6637] file 24576 [ 2451.033485][ T6637] kernel_stack 2469888 [ 2451.033485][ T6637] slab 8212480 [ 2451.033485][ T6637] sock 36864 [ 2451.033485][ T6637] shmem 0 [ 2451.033485][ T6637] file_mapped 135168 [ 2451.033485][ T6637] file_dirty 135168 [ 2451.033485][ T6637] file_writeback 0 [ 2451.033485][ T6637] anon_thp 264241152 [ 2451.033485][ T6637] inactive_anon 135168 [ 2451.033485][ T6637] active_anon 283430912 [ 2451.033485][ T6637] inactive_file 0 [ 2451.033485][ T6637] active_file 49152 [ 2451.033485][ T6637] unevictable 0 [ 2451.033485][ T6637] slab_reclaimable 1757184 [ 2451.033485][ T6637] slab_unreclaimable 6455296 [ 2451.033485][ T6637] pgfault 228888 [ 2451.033485][ T6637] pgmajfault 0 [ 2451.033485][ T6637] workingset_refault 0 [ 2451.033485][ T6637] workingset_activate 0 [ 2451.033485][ T6637] workingset_nodereclaim 0 [ 2451.033485][ T6637] pgrefill 190 [ 2451.033485][ T6637] pgscan 23028 [ 2451.033485][ T6637] pgsteal 22610 [ 2451.129167][ T6637] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=15489,uid=0 [ 2451.145057][ T6637] Memory cgroup out of memory: Killed process 15489 (syz-executor.1) total-vm:72980kB, anon-rss:4288kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:1000 [ 2451.164748][ T929] oom_reaper: reaped process 15489 (syz-executor.1), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 2451.178726][ T6511] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2451.189408][ T6511] CPU: 0 PID: 6511 Comm: syz-executor.1 Not tainted 5.5.0-rc1-syzkaller #0 [ 2451.198038][ T6511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2451.208093][ T6511] Call Trace: [ 2451.211941][ T6511] dump_stack+0x11d/0x181 [ 2451.216312][ T6511] dump_header+0xaa/0x39c [ 2451.220643][ T6511] oom_kill_process.cold+0x10/0x15 [ 2451.225790][ T6511] out_of_memory+0x231/0xa60 [ 2451.230439][ T6511] mem_cgroup_out_of_memory+0x128/0x150 [ 2451.235997][ T6511] try_charge+0x800/0xbf0 [ 2451.240342][ T6511] ? rcu_note_context_switch+0x720/0x760 [ 2451.246209][ T6511] mem_cgroup_try_charge+0xd2/0x260 [ 2451.251583][ T6511] mem_cgroup_try_charge_delay+0x3a/0x80 [ 2451.265546][ T6511] __handle_mm_fault+0x197f/0x2e00 [ 2451.270749][ T6511] handle_mm_fault+0x21b/0x530 [ 2451.275611][ T6511] __do_page_fault+0x456/0x8d0 [ 2451.280364][ T6511] do_page_fault+0x38/0x194 [ 2451.284991][ T6511] page_fault+0x34/0x40 [ 2451.289141][ T6511] RIP: 0033:0x412b3f [ 2451.293111][ T6511] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 2451.313205][ T6511] RSP: 002b:00007ffda533dbe0 EFLAGS: 00010206 [ 2451.319296][ T6511] RAX: 00007fedcbc6f000 RBX: 0000000000020000 RCX: 000000000045b39a [ 2451.327327][ T6511] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 2451.335416][ T6511] RBP: 00007ffda533dcc0 R08: ffffffffffffffff R09: 0000000000000000 [ 2451.343381][ T6511] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffda533ddb0 [ 2451.351422][ T6511] R13: 00007fedcbc8f700 R14: 0000000000000002 R15: 000000000075c07c [ 2451.362985][ T6511] memory: usage 307032kB, limit 307200kB, failcnt 6184 [ 2451.369934][ T6511] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2451.377345][ T6511] Memory cgroup stats for /syz1: [ 2451.377535][ T6511] anon 283410432 [ 2451.377535][ T6511] file 24576 [ 2451.377535][ T6511] kernel_stack 2469888 [ 2451.377535][ T6511] slab 8212480 [ 2451.377535][ T6511] sock 36864 [ 2451.377535][ T6511] shmem 0 [ 2451.377535][ T6511] file_mapped 135168 [ 2451.377535][ T6511] file_dirty 135168 [ 2451.377535][ T6511] file_writeback 0 [ 2451.377535][ T6511] anon_thp 264241152 [ 2451.377535][ T6511] inactive_anon 135168 [ 2451.377535][ T6511] active_anon 283430912 [ 2451.377535][ T6511] inactive_file 0 [ 2451.377535][ T6511] active_file 49152 [ 2451.377535][ T6511] unevictable 0 [ 2451.377535][ T6511] slab_reclaimable 1757184 [ 2451.377535][ T6511] slab_unreclaimable 6455296 [ 2451.377535][ T6511] pgfault 228888 [ 2451.377535][ T6511] pgmajfault 0 [ 2451.377535][ T6511] workingset_refault 0 [ 2451.377535][ T6511] workingset_activate 0 [ 2451.377535][ T6511] workingset_nodereclaim 0 [ 2451.377535][ T6511] pgrefill 190 [ 2451.377535][ T6511] pgscan 23028 [ 2451.377535][ T6511] pgsteal 22610 [ 2451.473352][ T6511] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=15484,uid=0 [ 2451.488979][ T6511] Memory cgroup out of memory: Killed process 15484 (syz-executor.1) total-vm:72980kB, anon-rss:4288kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:1000 [ 2451.507873][ T929] oom_reaper: reaped process 15484 (syz-executor.1), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB 14:25:02 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r7, r7, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r8) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r11, r11, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r12, 0x0) r13 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r13, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r14 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r14, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r14, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r7, r8, r11, r12, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r13, r14, 0x5}) getgroups(0x3, &(0x7f00000000c0)=[r12, r4, 0xee00]) r15 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) r16 = socket$inet_tcp(0x2, 0x1, 0x0) r17 = fcntl$dupfd(r15, 0x406, r16) getsockopt$sock_cred(r17, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r18, r18, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r19) r20 = socket$inet_tcp(0x2, 0x1, 0x0) r21 = fcntl$dupfd(r20, 0x0, r20) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r22, r22, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r24 = socket$inet_tcp(0x2, 0x1, 0x0) r25 = fcntl$dupfd(r24, 0x0, r24) getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r26, r26, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27) r28 = socket$inet_tcp(0x2, 0x1, 0x0) r29 = fcntl$dupfd(r28, 0x0, r28) getsockopt$sock_cred(r29, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r30, r30, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r31, 0x0) r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r33 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r33, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r33, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r30, r31, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r32, r33, 0x5}) getgroups(0x3, &(0x7f00000000c0)=[r31, r19, 0xee00]) r34 = socket$inet_tcp(0x2, 0x1, 0x0) r35 = fcntl$dupfd(r34, 0x0, r34) getsockopt$sock_cred(r35, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r37 = socket$inet_tcp(0x2, 0x1, 0x0) r38 = fcntl$dupfd(r37, 0x0, r37) getsockopt$sock_cred(r38, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r39, r39, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r40) r41 = socket$inet_tcp(0x2, 0x1, 0x0) r42 = fcntl$dupfd(r41, 0x0, r41) getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r43, r43, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r44, 0x0) r45 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r46 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r46, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r46, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r39, r40, r43, r44, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r45, r46, 0x5}) setresuid(r36, r36, r39) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r47) socket$inet_tcp(0x2, 0x1, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000380)='/dev/md0\x00', 0x208400, 0x0) r48 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r48, 0x40096102, 0x0) recvmmsg(r48, &(0x7f0000004380)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)=""/110, 0x6e}], 0x1, &(0x7f0000000a80)=""/113, 0x71}, 0x8}, {{&(0x7f0000000b00)=@l2, 0x80, &(0x7f0000002b80)=[{&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/4096, 0x1000}], 0x2, &(0x7f0000002bc0)=""/195, 0xc3}, 0x2}], 0x2, 0x40010121, &(0x7f0000004480)={0x0, 0x1c9c380}) ioctl$ASHMEM_GET_PIN_STATUS(r48, 0x7709, 0x0) syz_open_dev$mice(&(0x7f00000003c0)='/dev/input/mice\x00', 0x0, 0x502001) r49 = socket$nl_generic(0x10, 0x3, 0x10) r50 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r49, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r50, 0x400, 0x8000000, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}}, 0x0) r51 = dup(r49) ioctl$KDADDIO(r51, 0x4b34, 0xffffffffffffffff) r52 = socket$nl_generic(0x10, 0x3, 0x10) r53 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r52, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r53, 0x400, 0x8000000, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}}, 0x0) dup(r52) r54 = fcntl$dupfd(r51, 0x406, r52) getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r55, r55, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r56, 0x0) r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r57, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r36, r47, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5}) r59 = socket$inet_tcp(0x2, 0x1, 0x0) r60 = fcntl$dupfd(r59, 0x0, r59) getsockopt$sock_cred(r60, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r62, r62, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r63) r64 = socket$inet_tcp(0x2, 0x1, 0x0) r65 = fcntl$dupfd(r64, 0x0, r64) getsockopt$sock_cred(r65, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r66, r66, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r67, 0x0) r68 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r68, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r69 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r69, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r69, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r62, r63, r66, r67, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r68, r69, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r47, 0xffffffffffffffff, r67, 0x0, 0xee00]) setregid(r23, r70) r71 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r71, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r33, &(0x7f0000000500), 0x2, &(0x7f0000000280)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r18, r19, r22, r23, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r61, r71, 0x5}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r72) r73 = socket$inet_tcp(0x2, 0x1, 0x0) r74 = fcntl$dupfd(r73, 0x0, r73) getsockopt$sock_cred(r74, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r76 = socket$inet_tcp(0x2, 0x1, 0x0) r77 = fcntl$dupfd(r76, 0x0, r76) getsockopt$sock_cred(r77, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r78, r78, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r79) r80 = socket$inet_tcp(0x2, 0x1, 0x0) r81 = fcntl$dupfd(r80, 0x0, r80) getsockopt$sock_cred(r81, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r82, r82, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r83, 0x0) r84 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r85 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r85, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r85, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r78, r79, r82, r83, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r84, r85, 0x5}) setresuid(r75, r75, r78) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r86) r87 = socket$inet_tcp(0x2, 0x1, 0x0) r88 = fcntl$dupfd(r87, 0x0, r87) getsockopt$sock_cred(r88, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r89, r89, 0x0) stat(&(0x7f00000004c0)='./file1\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r90, 0x0) r91 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r91, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r92 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r92, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r92, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r75, r86, r89, r90, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r91, r92, 0x5}) r93 = socket$inet_tcp(0x2, 0x1, 0x0) r94 = fcntl$dupfd(r93, 0x0, r93) getsockopt$sock_cred(r94, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r95, r95, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r96) r97 = socket$inet_tcp(0x2, 0x1, 0x0) r98 = fcntl$dupfd(r97, 0x0, r97) getsockopt$sock_cred(r98, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r99, r99, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r100, 0x0) r101 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r101, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r102 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r102, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r102, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r95, r96, r99, r100, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r101, r102, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r86, 0xffffffffffffffff, r100, 0x0, 0xee00]) r103 = socket$inet_tcp(0x2, 0x1, 0x0) r104 = fcntl$dupfd(r103, 0x0, r103) getsockopt$sock_cred(r104, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r106 = socket$inet_tcp(0x2, 0x1, 0x0) r107 = fcntl$dupfd(r106, 0x0, r106) getsockopt$sock_cred(r107, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r108, r108, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r109) r110 = socket$inet_tcp(0x2, 0x1, 0x0) r111 = fcntl$dupfd(r110, 0x0, r110) getsockopt$sock_cred(r111, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r112, r112, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r113, 0x0) r114 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r115 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r115, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r115, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r108, r109, r112, r113, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r114, r115, 0x5}) setresuid(r105, r105, r108) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r116) r117 = socket$inet_tcp(0x2, 0x1, 0x0) r118 = fcntl$dupfd(r117, 0x0, r117) getsockopt$sock_cred(r118, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r119, r119, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r120, 0x0) r121 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r121, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r122 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r122, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r122, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r105, r116, r119, r120, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r121, r122, 0x5}) r123 = socket$inet_tcp(0x2, 0x1, 0x0) r124 = fcntl$dupfd(r123, 0x0, r123) getsockopt$sock_cred(r124, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r125, r125, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r126) r127 = socket$inet_tcp(0x2, 0x1, 0x0) r128 = fcntl$dupfd(r127, 0x0, r127) getsockopt$sock_cred(r128, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r129, r129, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r130, 0x0) r131 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r131, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r132 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r132, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r132, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r125, r126, r129, r130, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r131, r132, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r116, 0xffffffffffffffff, r130, 0x0, 0xee00]) getgroups(0x9, &(0x7f00000000c0)=[0xffffffffffffffff, r19, 0xee00, r72, 0xffffffffffffffff, r86, r116, 0xffffffffffffffff, 0xee01]) getresgid(&(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000200)=0x0) r135 = getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r136) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r137) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r138) r139 = socket$inet_tcp(0x2, 0x1, 0x0) r140 = fcntl$dupfd(r139, 0x0, r139) getsockopt$sock_cred(r140, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r141, r141, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r142) r143 = socket$inet_tcp(0x2, 0x1, 0x0) r144 = fcntl$dupfd(r143, 0x0, r143) getsockopt$sock_cred(r144, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r145, r145, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r146, 0x0) r147 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r148 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r148, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r148, &(0x7f0000000580), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r141, r142, r145, r146, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r147, r148, 0x5}) setgroups(0x9, &(0x7f0000000240)=[r12, r133, r134, r135, r136, r137, r138, r146, 0xee00]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:25:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000140)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) perf_event_open(&(0x7f0000000000)={0x0, 0xfffffffffffffdb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa, @perf_config_ext, 0x12ce9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:25:02 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) sendto$inet(r0, &(0x7f0000000400)='s', 0x1, 0x8840, &(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendmmsg(r0, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="7fc61b6d932dbc563145fefc191dbe34ca8e9ecdb27e56bc6ba8809e7cf04caace2b341d936860e16f71d90cf2a63ea103c29cc8aafd0c67226acce150360262eaae8207", 0x44}], 0x1}}], 0x40000a1, 0x0) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f0000001500)=[{0x0}, {&(0x7f0000000440)=""/150, 0x96}], 0x2}}], 0x300, 0x3, 0x0) 14:25:02 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="020b000007000000000021003f5403620500010001009a934dd520175e3b8f8886264fe600001000e0c99f3d653c00f0ff9da499df0005dc"], 0x38}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x20, 0x0) recvmmsg(r0, &(0x7f0000000140), 0x400000000000151, 0x2000000022, &(0x7f00000001c0)={0x77359400}) 14:25:02 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) sendto$inet(r0, &(0x7f0000000400)='s', 0x1, 0x8840, &(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendmmsg(r0, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="7fc61b6d932dbc563145fefc191dbe34ca8e9ecdb27e56bc6ba8809e7cf04caace2b341d936860e16f71d90cf2a63ea103c29cc8aafd0c67226acce150360262eaae8207", 0x44}], 0x1}}], 0x40000a1, 0x0) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f0000001500)=[{0x0}, {&(0x7f0000000440)=""/150, 0x96}], 0x2}}], 0x300, 0x3, 0x0) 14:25:02 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r7, r7, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r8) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r11, r11, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r12, 0x0) r13 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r13, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r14 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r14, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r14, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r7, r8, r11, r12, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r13, r14, 0x5}) getgroups(0x3, &(0x7f00000000c0)=[r12, r4, 0xee00]) r15 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) r16 = socket$inet_tcp(0x2, 0x1, 0x0) r17 = fcntl$dupfd(r15, 0x406, r16) getsockopt$sock_cred(r17, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r18, r18, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r19) r20 = socket$inet_tcp(0x2, 0x1, 0x0) r21 = fcntl$dupfd(r20, 0x0, r20) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r22, r22, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r24 = socket$inet_tcp(0x2, 0x1, 0x0) r25 = fcntl$dupfd(r24, 0x0, r24) getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r26, r26, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27) r28 = socket$inet_tcp(0x2, 0x1, 0x0) r29 = fcntl$dupfd(r28, 0x0, r28) getsockopt$sock_cred(r29, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r30, r30, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r31, 0x0) r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r33 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r33, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r33, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r30, r31, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r32, r33, 0x5}) getgroups(0x3, &(0x7f00000000c0)=[r31, r19, 0xee00]) r34 = socket$inet_tcp(0x2, 0x1, 0x0) r35 = fcntl$dupfd(r34, 0x0, r34) getsockopt$sock_cred(r35, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r37 = socket$inet_tcp(0x2, 0x1, 0x0) r38 = fcntl$dupfd(r37, 0x0, r37) getsockopt$sock_cred(r38, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r39, r39, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r40) r41 = socket$inet_tcp(0x2, 0x1, 0x0) r42 = fcntl$dupfd(r41, 0x0, r41) getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r43, r43, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r44, 0x0) r45 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r46 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r46, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r46, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r39, r40, r43, r44, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r45, r46, 0x5}) setresuid(r36, r36, r39) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r47) socket$inet_tcp(0x2, 0x1, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000380)='/dev/md0\x00', 0x208400, 0x0) r48 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r48, 0x40096102, 0x0) recvmmsg(r48, &(0x7f0000004380)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)=""/110, 0x6e}], 0x1, &(0x7f0000000a80)=""/113, 0x71}, 0x8}, {{&(0x7f0000000b00)=@l2, 0x80, &(0x7f0000002b80)=[{&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/4096, 0x1000}], 0x2, &(0x7f0000002bc0)=""/195, 0xc3}, 0x2}], 0x2, 0x40010121, &(0x7f0000004480)={0x0, 0x1c9c380}) ioctl$ASHMEM_GET_PIN_STATUS(r48, 0x7709, 0x0) syz_open_dev$mice(&(0x7f00000003c0)='/dev/input/mice\x00', 0x0, 0x502001) r49 = socket$nl_generic(0x10, 0x3, 0x10) r50 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r49, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r50, 0x400, 0x8000000, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}}, 0x0) r51 = dup(r49) ioctl$KDADDIO(r51, 0x4b34, 0xffffffffffffffff) r52 = socket$nl_generic(0x10, 0x3, 0x10) r53 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r52, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r53, 0x400, 0x8000000, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}}, 0x0) dup(r52) r54 = fcntl$dupfd(r51, 0x406, r52) getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r55, r55, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r56, 0x0) r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r57, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r36, r47, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5}) r59 = socket$inet_tcp(0x2, 0x1, 0x0) r60 = fcntl$dupfd(r59, 0x0, r59) getsockopt$sock_cred(r60, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r62, r62, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r63) r64 = socket$inet_tcp(0x2, 0x1, 0x0) r65 = fcntl$dupfd(r64, 0x0, r64) getsockopt$sock_cred(r65, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r66, r66, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r67, 0x0) r68 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r68, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r69 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r69, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r69, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r62, r63, r66, r67, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r68, r69, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r47, 0xffffffffffffffff, r67, 0x0, 0xee00]) setregid(r23, r70) r71 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r71, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r33, &(0x7f0000000500), 0x2, &(0x7f0000000280)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r18, r19, r22, r23, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r61, r71, 0x5}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r72) r73 = socket$inet_tcp(0x2, 0x1, 0x0) r74 = fcntl$dupfd(r73, 0x0, r73) getsockopt$sock_cred(r74, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r76 = socket$inet_tcp(0x2, 0x1, 0x0) r77 = fcntl$dupfd(r76, 0x0, r76) getsockopt$sock_cred(r77, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r78, r78, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r79) r80 = socket$inet_tcp(0x2, 0x1, 0x0) r81 = fcntl$dupfd(r80, 0x0, r80) getsockopt$sock_cred(r81, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r82, r82, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r83, 0x0) r84 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r85 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r85, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r85, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r78, r79, r82, r83, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r84, r85, 0x5}) setresuid(r75, r75, r78) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r86) r87 = socket$inet_tcp(0x2, 0x1, 0x0) r88 = fcntl$dupfd(r87, 0x0, r87) getsockopt$sock_cred(r88, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r89, r89, 0x0) stat(&(0x7f00000004c0)='./file1\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r90, 0x0) r91 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r91, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r92 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r92, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r92, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r75, r86, r89, r90, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r91, r92, 0x5}) r93 = socket$inet_tcp(0x2, 0x1, 0x0) r94 = fcntl$dupfd(r93, 0x0, r93) getsockopt$sock_cred(r94, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r95, r95, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r96) r97 = socket$inet_tcp(0x2, 0x1, 0x0) r98 = fcntl$dupfd(r97, 0x0, r97) getsockopt$sock_cred(r98, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r99, r99, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r100, 0x0) r101 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r101, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r102 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r102, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r102, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r95, r96, r99, r100, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r101, r102, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r86, 0xffffffffffffffff, r100, 0x0, 0xee00]) r103 = socket$inet_tcp(0x2, 0x1, 0x0) r104 = fcntl$dupfd(r103, 0x0, r103) getsockopt$sock_cred(r104, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r106 = socket$inet_tcp(0x2, 0x1, 0x0) r107 = fcntl$dupfd(r106, 0x0, r106) getsockopt$sock_cred(r107, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r108, r108, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r109) r110 = socket$inet_tcp(0x2, 0x1, 0x0) r111 = fcntl$dupfd(r110, 0x0, r110) getsockopt$sock_cred(r111, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r112, r112, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r113, 0x0) r114 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r115 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r115, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r115, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r108, r109, r112, r113, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r114, r115, 0x5}) setresuid(r105, r105, r108) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r116) r117 = socket$inet_tcp(0x2, 0x1, 0x0) r118 = fcntl$dupfd(r117, 0x0, r117) getsockopt$sock_cred(r118, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r119, r119, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r120, 0x0) r121 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r121, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r122 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r122, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r122, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r105, r116, r119, r120, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r121, r122, 0x5}) r123 = socket$inet_tcp(0x2, 0x1, 0x0) r124 = fcntl$dupfd(r123, 0x0, r123) getsockopt$sock_cred(r124, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r125, r125, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r126) r127 = socket$inet_tcp(0x2, 0x1, 0x0) r128 = fcntl$dupfd(r127, 0x0, r127) getsockopt$sock_cred(r128, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r129, r129, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r130, 0x0) r131 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r131, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r132 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r132, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r132, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r125, r126, r129, r130, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r131, r132, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r116, 0xffffffffffffffff, r130, 0x0, 0xee00]) getgroups(0x9, &(0x7f00000000c0)=[0xffffffffffffffff, r19, 0xee00, r72, 0xffffffffffffffff, r86, r116, 0xffffffffffffffff, 0xee01]) getresgid(&(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000200)=0x0) r135 = getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r136) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r137) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r138) r139 = socket$inet_tcp(0x2, 0x1, 0x0) r140 = fcntl$dupfd(r139, 0x0, r139) getsockopt$sock_cred(r140, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r141, r141, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r142) r143 = socket$inet_tcp(0x2, 0x1, 0x0) r144 = fcntl$dupfd(r143, 0x0, r143) getsockopt$sock_cred(r144, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r145, r145, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r146, 0x0) r147 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r148 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r148, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r148, &(0x7f0000000580), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r141, r142, r145, r146, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r147, r148, 0x5}) setgroups(0x9, &(0x7f0000000240)=[r12, r133, r134, r135, r136, r137, r138, r146, 0xee00]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:25:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000140)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) perf_event_open(&(0x7f0000000000)={0x0, 0xfffffffffffffdb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa, @perf_config_ext, 0x12ce9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:25:03 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) sendto$inet(r0, &(0x7f0000000400)='s', 0x1, 0x8840, &(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendmmsg(r0, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="7fc61b6d932dbc563145fefc191dbe34ca8e9ecdb27e56bc6ba8809e7cf04caace2b341d936860e16f71d90cf2a63ea103c29cc8aafd0c67226acce150360262eaae8207", 0x44}], 0x1}}], 0x40000a1, 0x0) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f0000001500)=[{0x0}, {&(0x7f0000000440)=""/150, 0x96}], 0x2}}], 0x300, 0x3, 0x0) 14:25:03 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="020b000007000000000021003f5403620500010001009a934dd520175e3b8f8886264fe600001000e0c99f3d653c00f0ff9da499df0005dc"], 0x38}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x20, 0x0) recvmmsg(r0, &(0x7f0000000140), 0x400000000000151, 0x2000000022, &(0x7f00000001c0)={0x77359400}) 14:25:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000140)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) perf_event_open(&(0x7f0000000000)={0x0, 0xfffffffffffffdb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa, @perf_config_ext, 0x12ce9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:25:03 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) sendto$inet(r0, &(0x7f0000000400)='s', 0x1, 0x8840, &(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendmmsg(r0, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="7fc61b6d932dbc563145fefc191dbe34ca8e9ecdb27e56bc6ba8809e7cf04caace2b341d936860e16f71d90cf2a63ea103c29cc8aafd0c67226acce150360262eaae8207", 0x44}], 0x1}}], 0x40000a1, 0x0) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f0000001500)=[{0x0}, {&(0x7f0000000440)=""/150, 0x96}], 0x2}}], 0x300, 0x3, 0x0) [ 2453.520201][ C1] net_ratelimit: 18 callbacks suppressed [ 2453.520210][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2453.531716][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2453.537496][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2453.543284][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:25:04 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) perf_event_open(&(0x7f0000000000)={0x0, 0xfffffffffffffdb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa, @perf_config_ext, 0x12ce9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2453.760498][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2453.766725][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2454.160826][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2454.167251][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2454.400634][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2454.406993][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2454.778407][ T6934] QAT: failed to copy from user cfg_data. [ 2454.796393][ T6934] QAT: Invalid ioctl [ 2454.827186][ T6934] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2454.845986][ T6934] CPU: 1 PID: 6934 Comm: syz-executor.1 Not tainted 5.5.0-rc1-syzkaller #0 [ 2454.854635][ T6934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2454.864733][ T6934] Call Trace: [ 2454.868195][ T6934] dump_stack+0x11d/0x181 [ 2454.872562][ T6934] dump_header+0xaa/0x39c [ 2454.876938][ T6934] oom_kill_process.cold+0x10/0x15 [ 2454.882072][ T6934] out_of_memory+0x231/0xa60 [ 2454.886732][ T6934] ? __rcu_read_unlock+0x66/0x3d0 [ 2454.891847][ T6934] mem_cgroup_out_of_memory+0x128/0x150 [ 2454.897418][ T6934] try_charge+0xb6c/0xbf0 [ 2454.901813][ T6934] ? __rcu_read_unlock+0x66/0x3d0 [ 2454.906966][ T6934] __memcg_kmem_charge_memcg+0x4a/0xe0 [ 2454.912450][ T6934] __memcg_kmem_charge+0xcf/0x1b0 [ 2454.917499][ T6934] copy_process+0x11d2/0x3c40 [ 2454.922198][ T6934] ? check_stack_object+0xda/0x110 [ 2454.927349][ T6934] _do_fork+0xfe/0x7a0 [ 2454.931442][ T6934] __do_sys_clone3+0x1bd/0x260 [ 2454.936241][ T6934] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 2454.942039][ T6934] ? _copy_to_user+0x84/0xb0 [ 2454.946699][ T6934] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2454.953091][ T6934] ? put_timespec64+0x94/0xc0 [ 2454.957796][ T6934] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2454.964062][ T6934] __x64_sys_clone3+0x3a/0x50 [ 2454.968766][ T6934] do_syscall_64+0xcc/0x3a0 [ 2454.973431][ T6934] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2454.979343][ T6934] RIP: 0033:0x45b349 [ 2454.983332][ T6934] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2455.003213][ T6934] RSP: 002b:00007fedcbcafc78 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2455.011643][ T6934] RAX: ffffffffffffffda RBX: 00007fedcbcb06d4 RCX: 000000000045b349 [ 2455.019693][ T6934] RDX: 0000000000000000 RSI: 0000000000000040 RDI: 0000000020001680 [ 2455.027677][ T6934] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 2455.035904][ T6934] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2455.043944][ T6934] R13: 0000000000000071 R14: 00000000004c1bca R15: 000000000075bfd4 [ 2455.058709][ T6934] memory: usage 307200kB, limit 307200kB, failcnt 6221 [ 2455.066123][ T6934] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2455.076873][ T6934] Memory cgroup stats for /syz1: [ 2455.077131][ T6934] anon 282017792 [ 2455.077131][ T6934] file 24576 [ 2455.077131][ T6934] kernel_stack 2617344 [ 2455.077131][ T6934] slab 8212480 [ 2455.077131][ T6934] sock 36864 [ 2455.077131][ T6934] shmem 0 [ 2455.077131][ T6934] file_mapped 135168 [ 2455.077131][ T6934] file_dirty 135168 [ 2455.077131][ T6934] file_writeback 0 [ 2455.077131][ T6934] anon_thp 264241152 [ 2455.077131][ T6934] inactive_anon 135168 [ 2455.077131][ T6934] active_anon 282017792 [ 2455.077131][ T6934] inactive_file 0 [ 2455.077131][ T6934] active_file 49152 [ 2455.077131][ T6934] unevictable 0 [ 2455.077131][ T6934] slab_reclaimable 1757184 [ 2455.077131][ T6934] slab_unreclaimable 6455296 [ 2455.077131][ T6934] pgfault 229746 [ 2455.077131][ T6934] pgmajfault 0 [ 2455.077131][ T6934] workingset_refault 0 [ 2455.077131][ T6934] workingset_activate 0 [ 2455.077131][ T6934] workingset_nodereclaim 0 [ 2455.077131][ T6934] pgrefill 190 [ 2455.077131][ T6934] pgscan 23028 [ 2455.077131][ T6934] pgsteal 22610 [ 2455.176559][ T6934] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=3760,uid=0 [ 2455.196568][ T6934] Memory cgroup out of memory: Killed process 3760 (syz-executor.1) total-vm:72848kB, anon-rss:4280kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:1000 [ 2455.241529][ T6940] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2455.252127][ T6940] CPU: 0 PID: 6940 Comm: syz-executor.1 Not tainted 5.5.0-rc1-syzkaller #0 [ 2455.260766][ T6940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2455.270960][ T6940] Call Trace: [ 2455.274272][ T6940] dump_stack+0x11d/0x181 [ 2455.278622][ T6940] dump_header+0xaa/0x39c [ 2455.282971][ T6940] oom_kill_process.cold+0x10/0x15 [ 2455.288105][ T6940] out_of_memory+0x231/0xa60 [ 2455.292831][ T6940] mem_cgroup_out_of_memory+0x128/0x150 [ 2455.298401][ T6940] try_charge+0x800/0xbf0 [ 2455.302755][ T6940] ? rcu_note_context_switch+0x720/0x760 [ 2455.308419][ T6940] mem_cgroup_try_charge+0xd2/0x260 [ 2455.313717][ T6940] mem_cgroup_try_charge_delay+0x3a/0x80 [ 2455.319370][ T6940] wp_page_copy+0x322/0x1040 [ 2455.324027][ T6940] ? __read_once_size+0x41/0xe0 [ 2455.328904][ T6940] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 2455.334842][ T6940] do_wp_page+0x192/0xeb0 [ 2455.339234][ T6940] __handle_mm_fault+0x1d16/0x2e00 [ 2455.344505][ T6940] handle_mm_fault+0x21b/0x530 [ 2455.349306][ T6940] __do_page_fault+0x456/0x8d0 [ 2455.354096][ T6940] do_page_fault+0x38/0x194 [ 2455.358657][ T6940] page_fault+0x34/0x40 [ 2455.362828][ T6940] RIP: 0033:0x40d027 [ 2455.366805][ T6940] Code: eb 18 90 45 31 c0 31 c9 ba 80 00 00 00 48 89 de bf ca 00 00 00 e8 19 e3 04 00 8b 03 85 c0 74 e3 48 89 ef c7 45 08 00 00 00 00 c4 6d ff ff 4c 89 e7 e8 5c 62 ff ff eb e1 66 2e 0f 1f 84 00 00 [ 2455.386428][ T6940] RSP: 002b:00007fedcbc8ed00 EFLAGS: 00010202 [ 2455.392512][ T6940] RAX: 0000000000000001 RBX: 000000000075c078 RCX: 000000000045b349 [ 2455.400505][ T6940] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000075c070 [ 2455.408488][ T6940] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 2455.416466][ T6940] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000075c07c [ 2455.424454][ T6940] R13: 00007ffda533dc4f R14: 00007fedcbc8f9c0 R15: 000000000075c07c [ 2455.433024][ T6940] memory: usage 306968kB, limit 307200kB, failcnt 6231 [ 2455.439889][ T6940] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2455.448589][ T6940] Memory cgroup stats for /syz1: [ 2455.448786][ T6940] anon 282017792 [ 2455.448786][ T6940] file 24576 [ 2455.448786][ T6940] kernel_stack 2617344 [ 2455.448786][ T6940] slab 8212480 [ 2455.448786][ T6940] sock 36864 [ 2455.448786][ T6940] shmem 0 [ 2455.448786][ T6940] file_mapped 135168 [ 2455.448786][ T6940] file_dirty 135168 [ 2455.448786][ T6940] file_writeback 0 [ 2455.448786][ T6940] anon_thp 264241152 [ 2455.448786][ T6940] inactive_anon 135168 [ 2455.448786][ T6940] active_anon 282017792 [ 2455.448786][ T6940] inactive_file 0 [ 2455.448786][ T6940] active_file 49152 [ 2455.448786][ T6940] unevictable 0 [ 2455.448786][ T6940] slab_reclaimable 1757184 [ 2455.448786][ T6940] slab_unreclaimable 6455296 [ 2455.448786][ T6940] pgfault 229746 [ 2455.448786][ T6940] pgmajfault 0 [ 2455.448786][ T6940] workingset_refault 0 [ 2455.448786][ T6940] workingset_activate 0 [ 2455.448786][ T6940] workingset_nodereclaim 0 [ 2455.448786][ T6940] pgrefill 190 [ 2455.448786][ T6940] pgscan 23028 [ 2455.448786][ T6940] pgsteal 22610 [ 2455.544257][ T6940] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=27589,uid=0 [ 2455.563681][ T6940] Memory cgroup out of memory: Killed process 27589 (syz-executor.1) total-vm:72848kB, anon-rss:4280kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:1000 14:25:06 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r7, r7, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r8) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r11, r11, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r12, 0x0) r13 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r13, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r14 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r14, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r14, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r7, r8, r11, r12, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r13, r14, 0x5}) getgroups(0x3, &(0x7f00000000c0)=[r12, r4, 0xee00]) r15 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) r16 = socket$inet_tcp(0x2, 0x1, 0x0) r17 = fcntl$dupfd(r15, 0x406, r16) getsockopt$sock_cred(r17, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r18, r18, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r19) r20 = socket$inet_tcp(0x2, 0x1, 0x0) r21 = fcntl$dupfd(r20, 0x0, r20) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r22, r22, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r24 = socket$inet_tcp(0x2, 0x1, 0x0) r25 = fcntl$dupfd(r24, 0x0, r24) getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r26, r26, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27) r28 = socket$inet_tcp(0x2, 0x1, 0x0) r29 = fcntl$dupfd(r28, 0x0, r28) getsockopt$sock_cred(r29, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r30, r30, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r31, 0x0) r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r33 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r33, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r33, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r30, r31, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r32, r33, 0x5}) getgroups(0x3, &(0x7f00000000c0)=[r31, r19, 0xee00]) r34 = socket$inet_tcp(0x2, 0x1, 0x0) r35 = fcntl$dupfd(r34, 0x0, r34) getsockopt$sock_cred(r35, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r37 = socket$inet_tcp(0x2, 0x1, 0x0) r38 = fcntl$dupfd(r37, 0x0, r37) getsockopt$sock_cred(r38, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r39, r39, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r40) r41 = socket$inet_tcp(0x2, 0x1, 0x0) r42 = fcntl$dupfd(r41, 0x0, r41) getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r43, r43, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r44, 0x0) r45 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r46 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r46, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r46, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r39, r40, r43, r44, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r45, r46, 0x5}) setresuid(r36, r36, r39) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r47) socket$inet_tcp(0x2, 0x1, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000380)='/dev/md0\x00', 0x208400, 0x0) r48 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r48, 0x40096102, 0x0) recvmmsg(r48, &(0x7f0000004380)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)=""/110, 0x6e}], 0x1, &(0x7f0000000a80)=""/113, 0x71}, 0x8}, {{&(0x7f0000000b00)=@l2, 0x80, &(0x7f0000002b80)=[{&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/4096, 0x1000}], 0x2, &(0x7f0000002bc0)=""/195, 0xc3}, 0x2}], 0x2, 0x40010121, &(0x7f0000004480)={0x0, 0x1c9c380}) ioctl$ASHMEM_GET_PIN_STATUS(r48, 0x7709, 0x0) syz_open_dev$mice(&(0x7f00000003c0)='/dev/input/mice\x00', 0x0, 0x502001) r49 = socket$nl_generic(0x10, 0x3, 0x10) r50 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r49, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r50, 0x400, 0x8000000, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}}, 0x0) r51 = dup(r49) ioctl$KDADDIO(r51, 0x4b34, 0xffffffffffffffff) r52 = socket$nl_generic(0x10, 0x3, 0x10) r53 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r52, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r53, 0x400, 0x8000000, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}}, 0x0) dup(r52) r54 = fcntl$dupfd(r51, 0x406, r52) getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r55, r55, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r56, 0x0) r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r57, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r36, r47, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5}) r59 = socket$inet_tcp(0x2, 0x1, 0x0) r60 = fcntl$dupfd(r59, 0x0, r59) getsockopt$sock_cred(r60, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r62, r62, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r63) r64 = socket$inet_tcp(0x2, 0x1, 0x0) r65 = fcntl$dupfd(r64, 0x0, r64) getsockopt$sock_cred(r65, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r66, r66, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r67, 0x0) r68 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r68, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r69 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r69, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r69, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r62, r63, r66, r67, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r68, r69, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r47, 0xffffffffffffffff, r67, 0x0, 0xee00]) setregid(r23, r70) r71 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r71, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r33, &(0x7f0000000500), 0x2, &(0x7f0000000280)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r18, r19, r22, r23, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r61, r71, 0x5}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r72) r73 = socket$inet_tcp(0x2, 0x1, 0x0) r74 = fcntl$dupfd(r73, 0x0, r73) getsockopt$sock_cred(r74, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r76 = socket$inet_tcp(0x2, 0x1, 0x0) r77 = fcntl$dupfd(r76, 0x0, r76) getsockopt$sock_cred(r77, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r78, r78, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r79) r80 = socket$inet_tcp(0x2, 0x1, 0x0) r81 = fcntl$dupfd(r80, 0x0, r80) getsockopt$sock_cred(r81, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r82, r82, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r83, 0x0) r84 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r85 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r85, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r85, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r78, r79, r82, r83, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r84, r85, 0x5}) setresuid(r75, r75, r78) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r86) r87 = socket$inet_tcp(0x2, 0x1, 0x0) r88 = fcntl$dupfd(r87, 0x0, r87) getsockopt$sock_cred(r88, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r89, r89, 0x0) stat(&(0x7f00000004c0)='./file1\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r90, 0x0) r91 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r91, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r92 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r92, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r92, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r75, r86, r89, r90, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r91, r92, 0x5}) r93 = socket$inet_tcp(0x2, 0x1, 0x0) r94 = fcntl$dupfd(r93, 0x0, r93) getsockopt$sock_cred(r94, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r95, r95, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r96) r97 = socket$inet_tcp(0x2, 0x1, 0x0) r98 = fcntl$dupfd(r97, 0x0, r97) getsockopt$sock_cred(r98, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r99, r99, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r100, 0x0) r101 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r101, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r102 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r102, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r102, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r95, r96, r99, r100, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r101, r102, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r86, 0xffffffffffffffff, r100, 0x0, 0xee00]) r103 = socket$inet_tcp(0x2, 0x1, 0x0) r104 = fcntl$dupfd(r103, 0x0, r103) getsockopt$sock_cred(r104, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r106 = socket$inet_tcp(0x2, 0x1, 0x0) r107 = fcntl$dupfd(r106, 0x0, r106) getsockopt$sock_cred(r107, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r108, r108, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r109) r110 = socket$inet_tcp(0x2, 0x1, 0x0) r111 = fcntl$dupfd(r110, 0x0, r110) getsockopt$sock_cred(r111, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r112, r112, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r113, 0x0) r114 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r115 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r115, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r115, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r108, r109, r112, r113, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r114, r115, 0x5}) setresuid(r105, r105, r108) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r116) r117 = socket$inet_tcp(0x2, 0x1, 0x0) r118 = fcntl$dupfd(r117, 0x0, r117) getsockopt$sock_cred(r118, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r119, r119, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r120, 0x0) r121 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r121, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r122 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r122, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r122, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r105, r116, r119, r120, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r121, r122, 0x5}) r123 = socket$inet_tcp(0x2, 0x1, 0x0) r124 = fcntl$dupfd(r123, 0x0, r123) getsockopt$sock_cred(r124, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r125, r125, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r126) r127 = socket$inet_tcp(0x2, 0x1, 0x0) r128 = fcntl$dupfd(r127, 0x0, r127) getsockopt$sock_cred(r128, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r129, r129, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r130, 0x0) r131 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r131, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r132 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r132, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r132, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r125, r126, r129, r130, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r131, r132, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r116, 0xffffffffffffffff, r130, 0x0, 0xee00]) getgroups(0x9, &(0x7f00000000c0)=[0xffffffffffffffff, r19, 0xee00, r72, 0xffffffffffffffff, r86, r116, 0xffffffffffffffff, 0xee01]) getresgid(&(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000200)=0x0) r135 = getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r136) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r137) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r138) r139 = socket$inet_tcp(0x2, 0x1, 0x0) r140 = fcntl$dupfd(r139, 0x0, r139) getsockopt$sock_cred(r140, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r141, r141, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r142) r143 = socket$inet_tcp(0x2, 0x1, 0x0) r144 = fcntl$dupfd(r143, 0x0, r143) getsockopt$sock_cred(r144, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r145, r145, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r146, 0x0) r147 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r148 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r148, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r148, &(0x7f0000000580), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r141, r142, r145, r146, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r147, r148, 0x5}) setgroups(0x9, &(0x7f0000000240)=[r12, r133, r134, r135, r136, r137, r138, r146, 0xee00]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:25:06 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) perf_event_open(&(0x7f0000000000)={0x0, 0xfffffffffffffdb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa, @perf_config_ext, 0x12ce9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:25:06 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) sendto$inet(r0, &(0x7f0000000400)='s', 0x1, 0x8840, &(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendmmsg(r0, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="7fc61b6d932dbc563145fefc191dbe34ca8e9ecdb27e56bc6ba8809e7cf04caace2b341d936860e16f71d90cf2a63ea103c29cc8aafd0c67226acce150360262eaae8207", 0x44}], 0x1}}], 0x40000a1, 0x0) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f0000001500)=[{0x0}, {&(0x7f0000000440)=""/150, 0x96}], 0x2}}], 0x300, 0x3, 0x0) 14:25:06 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000400)='s', 0x1, 0x8840, &(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="7fc61b6d932dbc563145fefc191dbe34ca8e9ecdb27e56bc6ba8809e7cf04caace2b341d936860e16f71d90cf2a63ea103c29cc8aafd0c67226acce150360262eaae8207", 0x44}], 0x1}}], 0x40000a1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f0000001500)=[{0x0}, {&(0x7f0000000440)=""/150, 0x96}], 0x2}}], 0x300, 0x3, 0x0) 14:25:06 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="020b000007000000000021003f5403620500010001009a934dd520175e3b8f8886264fe600001000e0c99f3d653c00f0ff9da499df0005dc"], 0x38}}, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000140), 0x400000000000151, 0x2000000022, &(0x7f00000001c0)={0x77359400}) 14:25:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r7, r7, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r8) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r11, r11, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r12, 0x0) r13 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r13, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r14 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r14, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r14, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r7, r8, r11, r12, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r13, r14, 0x5}) getgroups(0x3, &(0x7f00000000c0)=[r12, r4, 0xee00]) r15 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) r16 = socket$inet_tcp(0x2, 0x1, 0x0) r17 = fcntl$dupfd(r15, 0x406, r16) getsockopt$sock_cred(r17, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r18, r18, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r19) r20 = socket$inet_tcp(0x2, 0x1, 0x0) r21 = fcntl$dupfd(r20, 0x0, r20) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r22, r22, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r24 = socket$inet_tcp(0x2, 0x1, 0x0) r25 = fcntl$dupfd(r24, 0x0, r24) getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r26, r26, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27) r28 = socket$inet_tcp(0x2, 0x1, 0x0) r29 = fcntl$dupfd(r28, 0x0, r28) getsockopt$sock_cred(r29, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r30, r30, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r31, 0x0) r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r33 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r33, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r33, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r30, r31, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r32, r33, 0x5}) getgroups(0x3, &(0x7f00000000c0)=[r31, r19, 0xee00]) r34 = socket$inet_tcp(0x2, 0x1, 0x0) r35 = fcntl$dupfd(r34, 0x0, r34) getsockopt$sock_cred(r35, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r37 = socket$inet_tcp(0x2, 0x1, 0x0) r38 = fcntl$dupfd(r37, 0x0, r37) getsockopt$sock_cred(r38, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r39, r39, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r40) r41 = socket$inet_tcp(0x2, 0x1, 0x0) r42 = fcntl$dupfd(r41, 0x0, r41) getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r43, r43, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r44, 0x0) r45 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r46 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r46, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r46, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r39, r40, r43, r44, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r45, r46, 0x5}) setresuid(r36, r36, r39) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r47) socket$inet_tcp(0x2, 0x1, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000380)='/dev/md0\x00', 0x208400, 0x0) r48 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r48, 0x40096102, 0x0) recvmmsg(r48, &(0x7f0000004380)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)=""/110, 0x6e}], 0x1, &(0x7f0000000a80)=""/113, 0x71}, 0x8}, {{&(0x7f0000000b00)=@l2, 0x80, &(0x7f0000002b80)=[{&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/4096, 0x1000}], 0x2, &(0x7f0000002bc0)=""/195, 0xc3}, 0x2}], 0x2, 0x40010121, &(0x7f0000004480)={0x0, 0x1c9c380}) ioctl$ASHMEM_GET_PIN_STATUS(r48, 0x7709, 0x0) syz_open_dev$mice(&(0x7f00000003c0)='/dev/input/mice\x00', 0x0, 0x502001) r49 = socket$nl_generic(0x10, 0x3, 0x10) r50 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r49, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r50, 0x400, 0x8000000, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}}, 0x0) r51 = dup(r49) ioctl$KDADDIO(r51, 0x4b34, 0xffffffffffffffff) r52 = socket$nl_generic(0x10, 0x3, 0x10) r53 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r52, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r53, 0x400, 0x8000000, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}}, 0x0) dup(r52) r54 = fcntl$dupfd(r51, 0x406, r52) getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r55, r55, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r56, 0x0) r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r57, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r36, r47, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5}) r59 = socket$inet_tcp(0x2, 0x1, 0x0) r60 = fcntl$dupfd(r59, 0x0, r59) getsockopt$sock_cred(r60, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r62, r62, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r63) r64 = socket$inet_tcp(0x2, 0x1, 0x0) r65 = fcntl$dupfd(r64, 0x0, r64) getsockopt$sock_cred(r65, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r66, r66, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r67, 0x0) r68 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r68, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r69 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r69, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r69, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r62, r63, r66, r67, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r68, r69, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r47, 0xffffffffffffffff, r67, 0x0, 0xee00]) setregid(r23, r70) r71 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r71, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r33, &(0x7f0000000500), 0x2, &(0x7f0000000280)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r18, r19, r22, r23, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r61, r71, 0x5}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r72) r73 = socket$inet_tcp(0x2, 0x1, 0x0) r74 = fcntl$dupfd(r73, 0x0, r73) getsockopt$sock_cred(r74, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r76 = socket$inet_tcp(0x2, 0x1, 0x0) r77 = fcntl$dupfd(r76, 0x0, r76) getsockopt$sock_cred(r77, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r78, r78, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r79) r80 = socket$inet_tcp(0x2, 0x1, 0x0) r81 = fcntl$dupfd(r80, 0x0, r80) getsockopt$sock_cred(r81, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r82, r82, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r83, 0x0) r84 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r85 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r85, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r85, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r78, r79, r82, r83, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r84, r85, 0x5}) setresuid(r75, r75, r78) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r86) r87 = socket$inet_tcp(0x2, 0x1, 0x0) r88 = fcntl$dupfd(r87, 0x0, r87) getsockopt$sock_cred(r88, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r89, r89, 0x0) stat(&(0x7f00000004c0)='./file1\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r90, 0x0) r91 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r91, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r92 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r92, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r92, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r75, r86, r89, r90, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r91, r92, 0x5}) r93 = socket$inet_tcp(0x2, 0x1, 0x0) r94 = fcntl$dupfd(r93, 0x0, r93) getsockopt$sock_cred(r94, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r95, r95, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r96) r97 = socket$inet_tcp(0x2, 0x1, 0x0) r98 = fcntl$dupfd(r97, 0x0, r97) getsockopt$sock_cred(r98, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r99, r99, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r100, 0x0) r101 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r101, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r102 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r102, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r102, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r95, r96, r99, r100, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r101, r102, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r86, 0xffffffffffffffff, r100, 0x0, 0xee00]) r103 = socket$inet_tcp(0x2, 0x1, 0x0) r104 = fcntl$dupfd(r103, 0x0, r103) getsockopt$sock_cred(r104, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r106 = socket$inet_tcp(0x2, 0x1, 0x0) r107 = fcntl$dupfd(r106, 0x0, r106) getsockopt$sock_cred(r107, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r108, r108, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r109) r110 = socket$inet_tcp(0x2, 0x1, 0x0) r111 = fcntl$dupfd(r110, 0x0, r110) getsockopt$sock_cred(r111, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r112, r112, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r113, 0x0) r114 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r115 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r115, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r115, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r108, r109, r112, r113, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r114, r115, 0x5}) setresuid(r105, r105, r108) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r116) r117 = socket$inet_tcp(0x2, 0x1, 0x0) r118 = fcntl$dupfd(r117, 0x0, r117) getsockopt$sock_cred(r118, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r119, r119, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r120, 0x0) r121 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r121, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r122 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r122, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r122, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r105, r116, r119, r120, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r121, r122, 0x5}) r123 = socket$inet_tcp(0x2, 0x1, 0x0) r124 = fcntl$dupfd(r123, 0x0, r123) getsockopt$sock_cred(r124, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r125, r125, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r126) r127 = socket$inet_tcp(0x2, 0x1, 0x0) r128 = fcntl$dupfd(r127, 0x0, r127) getsockopt$sock_cred(r128, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r129, r129, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r130, 0x0) r131 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r131, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r132 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r132, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r132, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r125, r126, r129, r130, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r131, r132, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r116, 0xffffffffffffffff, r130, 0x0, 0xee00]) getgroups(0x9, &(0x7f00000000c0)=[0xffffffffffffffff, r19, 0xee00, r72, 0xffffffffffffffff, r86, r116, 0xffffffffffffffff, 0xee01]) getresgid(&(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000200)=0x0) r135 = getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r136) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r137) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r138) r139 = socket$inet_tcp(0x2, 0x1, 0x0) r140 = fcntl$dupfd(r139, 0x0, r139) getsockopt$sock_cred(r140, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r141, r141, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r142) r143 = socket$inet_tcp(0x2, 0x1, 0x0) r144 = fcntl$dupfd(r143, 0x0, r143) getsockopt$sock_cred(r144, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r145, r145, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r146, 0x0) r147 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r148 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r148, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r148, &(0x7f0000000580), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r141, r142, r145, r146, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r147, r148, 0x5}) setgroups(0x9, &(0x7f0000000240)=[r12, r133, r134, r135, r136, r137, r138, r146, 0xee00]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:25:07 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000400)='s', 0x1, 0x8840, &(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="7fc61b6d932dbc563145fefc191dbe34ca8e9ecdb27e56bc6ba8809e7cf04caace2b341d936860e16f71d90cf2a63ea103c29cc8aafd0c67226acce150360262eaae8207", 0x44}], 0x1}}], 0x40000a1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f0000001500)=[{0x0}, {&(0x7f0000000440)=""/150, 0x96}], 0x2}}], 0x300, 0x3, 0x0) 14:25:07 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) perf_event_open(&(0x7f0000000000)={0x0, 0xfffffffffffffdb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa, @perf_config_ext, 0x12ce9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:25:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r7, r7, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r8) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r11, r11, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r12, 0x0) r13 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r13, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r14 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r14, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r14, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r7, r8, r11, r12, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r13, r14, 0x5}) getgroups(0x3, &(0x7f00000000c0)=[r12, r4, 0xee00]) r15 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) r16 = socket$inet_tcp(0x2, 0x1, 0x0) r17 = fcntl$dupfd(r15, 0x406, r16) getsockopt$sock_cred(r17, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r18, r18, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r19) r20 = socket$inet_tcp(0x2, 0x1, 0x0) r21 = fcntl$dupfd(r20, 0x0, r20) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r22, r22, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r24 = socket$inet_tcp(0x2, 0x1, 0x0) r25 = fcntl$dupfd(r24, 0x0, r24) getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r26, r26, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27) r28 = socket$inet_tcp(0x2, 0x1, 0x0) r29 = fcntl$dupfd(r28, 0x0, r28) getsockopt$sock_cred(r29, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r30, r30, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r31, 0x0) r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r33 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r33, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r33, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r30, r31, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r32, r33, 0x5}) getgroups(0x3, &(0x7f00000000c0)=[r31, r19, 0xee00]) r34 = socket$inet_tcp(0x2, 0x1, 0x0) r35 = fcntl$dupfd(r34, 0x0, r34) getsockopt$sock_cred(r35, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r37 = socket$inet_tcp(0x2, 0x1, 0x0) r38 = fcntl$dupfd(r37, 0x0, r37) getsockopt$sock_cred(r38, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r39, r39, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r40) r41 = socket$inet_tcp(0x2, 0x1, 0x0) r42 = fcntl$dupfd(r41, 0x0, r41) getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r43, r43, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r44, 0x0) r45 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r46 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r46, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r46, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r39, r40, r43, r44, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r45, r46, 0x5}) setresuid(r36, r36, r39) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r47) socket$inet_tcp(0x2, 0x1, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000380)='/dev/md0\x00', 0x208400, 0x0) r48 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r48, 0x40096102, 0x0) recvmmsg(r48, &(0x7f0000004380)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)=""/110, 0x6e}], 0x1, &(0x7f0000000a80)=""/113, 0x71}, 0x8}, {{&(0x7f0000000b00)=@l2, 0x80, &(0x7f0000002b80)=[{&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/4096, 0x1000}], 0x2, &(0x7f0000002bc0)=""/195, 0xc3}, 0x2}], 0x2, 0x40010121, &(0x7f0000004480)={0x0, 0x1c9c380}) ioctl$ASHMEM_GET_PIN_STATUS(r48, 0x7709, 0x0) syz_open_dev$mice(&(0x7f00000003c0)='/dev/input/mice\x00', 0x0, 0x502001) r49 = socket$nl_generic(0x10, 0x3, 0x10) r50 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r49, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r50, 0x400, 0x8000000, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}}, 0x0) r51 = dup(r49) ioctl$KDADDIO(r51, 0x4b34, 0xffffffffffffffff) r52 = socket$nl_generic(0x10, 0x3, 0x10) r53 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r52, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r53, 0x400, 0x8000000, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}}, 0x0) dup(r52) r54 = fcntl$dupfd(r51, 0x406, r52) getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r55, r55, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r56, 0x0) r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r57, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r36, r47, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5}) r59 = socket$inet_tcp(0x2, 0x1, 0x0) r60 = fcntl$dupfd(r59, 0x0, r59) getsockopt$sock_cred(r60, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r62, r62, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r63) r64 = socket$inet_tcp(0x2, 0x1, 0x0) r65 = fcntl$dupfd(r64, 0x0, r64) getsockopt$sock_cred(r65, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r66, r66, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r67, 0x0) r68 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r68, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r69 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r69, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r69, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r62, r63, r66, r67, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r68, r69, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r47, 0xffffffffffffffff, r67, 0x0, 0xee00]) setregid(r23, r70) r71 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r71, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r33, &(0x7f0000000500), 0x2, &(0x7f0000000280)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r18, r19, r22, r23, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r61, r71, 0x5}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r72) r73 = socket$inet_tcp(0x2, 0x1, 0x0) r74 = fcntl$dupfd(r73, 0x0, r73) getsockopt$sock_cred(r74, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r76 = socket$inet_tcp(0x2, 0x1, 0x0) r77 = fcntl$dupfd(r76, 0x0, r76) getsockopt$sock_cred(r77, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r78, r78, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r79) r80 = socket$inet_tcp(0x2, 0x1, 0x0) r81 = fcntl$dupfd(r80, 0x0, r80) getsockopt$sock_cred(r81, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r82, r82, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r83, 0x0) r84 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r85 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r85, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r85, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r78, r79, r82, r83, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r84, r85, 0x5}) setresuid(r75, r75, r78) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r86) r87 = socket$inet_tcp(0x2, 0x1, 0x0) r88 = fcntl$dupfd(r87, 0x0, r87) getsockopt$sock_cred(r88, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r89, r89, 0x0) stat(&(0x7f00000004c0)='./file1\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r90, 0x0) r91 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r91, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r92 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r92, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r92, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r75, r86, r89, r90, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r91, r92, 0x5}) r93 = socket$inet_tcp(0x2, 0x1, 0x0) r94 = fcntl$dupfd(r93, 0x0, r93) getsockopt$sock_cred(r94, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r95, r95, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r96) r97 = socket$inet_tcp(0x2, 0x1, 0x0) r98 = fcntl$dupfd(r97, 0x0, r97) getsockopt$sock_cred(r98, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r99, r99, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r100, 0x0) r101 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r101, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r102 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r102, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r102, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r95, r96, r99, r100, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r101, r102, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r86, 0xffffffffffffffff, r100, 0x0, 0xee00]) r103 = socket$inet_tcp(0x2, 0x1, 0x0) r104 = fcntl$dupfd(r103, 0x0, r103) getsockopt$sock_cred(r104, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r106 = socket$inet_tcp(0x2, 0x1, 0x0) r107 = fcntl$dupfd(r106, 0x0, r106) getsockopt$sock_cred(r107, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r108, r108, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r109) r110 = socket$inet_tcp(0x2, 0x1, 0x0) r111 = fcntl$dupfd(r110, 0x0, r110) getsockopt$sock_cred(r111, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r112, r112, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r113, 0x0) r114 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r115 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r115, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r115, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r108, r109, r112, r113, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r114, r115, 0x5}) setresuid(r105, r105, r108) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r116) r117 = socket$inet_tcp(0x2, 0x1, 0x0) r118 = fcntl$dupfd(r117, 0x0, r117) getsockopt$sock_cred(r118, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r119, r119, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r120, 0x0) r121 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r121, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r122 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r122, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r122, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r105, r116, r119, r120, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r121, r122, 0x5}) r123 = socket$inet_tcp(0x2, 0x1, 0x0) r124 = fcntl$dupfd(r123, 0x0, r123) getsockopt$sock_cred(r124, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r125, r125, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r126) r127 = socket$inet_tcp(0x2, 0x1, 0x0) r128 = fcntl$dupfd(r127, 0x0, r127) getsockopt$sock_cred(r128, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r129, r129, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r130, 0x0) r131 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r131, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r132 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r132, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r132, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r125, r126, r129, r130, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r131, r132, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r116, 0xffffffffffffffff, r130, 0x0, 0xee00]) getgroups(0x9, &(0x7f00000000c0)=[0xffffffffffffffff, r19, 0xee00, r72, 0xffffffffffffffff, r86, r116, 0xffffffffffffffff, 0xee01]) getresgid(&(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000200)=0x0) r135 = getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r136) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r137) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r138) r139 = socket$inet_tcp(0x2, 0x1, 0x0) r140 = fcntl$dupfd(r139, 0x0, r139) getsockopt$sock_cred(r140, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r141, r141, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r142) r143 = socket$inet_tcp(0x2, 0x1, 0x0) r144 = fcntl$dupfd(r143, 0x0, r143) getsockopt$sock_cred(r144, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r145, r145, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r146, 0x0) r147 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r148 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r148, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r148, &(0x7f0000000580), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r141, r142, r145, r146, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r147, r148, 0x5}) setgroups(0x9, &(0x7f0000000240)=[r12, r133, r134, r135, r136, r137, r138, r146, 0xee00]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:25:07 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000400)='s', 0x1, 0x8840, &(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="7fc61b6d932dbc563145fefc191dbe34ca8e9ecdb27e56bc6ba8809e7cf04caace2b341d936860e16f71d90cf2a63ea103c29cc8aafd0c67226acce150360262eaae8207", 0x44}], 0x1}}], 0x40000a1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f0000001500)=[{0x0}, {&(0x7f0000000440)=""/150, 0x96}], 0x2}}], 0x300, 0x3, 0x0) 14:25:07 executing program 4: r0 = socket$inet(0x2, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) sendto$inet(r0, &(0x7f0000000400)='s', 0x1, 0x8840, &(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendmmsg(r0, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="7fc61b6d932dbc563145fefc191dbe34ca8e9ecdb27e56bc6ba8809e7cf04caace2b341d936860e16f71d90cf2a63ea103c29cc8aafd0c67226acce150360262eaae8207", 0x44}], 0x1}}], 0x40000a1, 0x0) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f0000001500)=[{0x0}, {&(0x7f0000000440)=""/150, 0x96}], 0x2}}], 0x300, 0x3, 0x0) 14:25:07 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="020b000007000000000021003f5403620500010001009a934dd520175e3b8f8886264fe600001000e0c99f3d653c00f0ff9da499df0005dc"], 0x38}}, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000140), 0x400000000000151, 0x2000000022, &(0x7f00000001c0)={0x77359400}) [ 2457.779434][ T7222] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2457.809225][ T7222] CPU: 1 PID: 7222 Comm: syz-executor.1 Not tainted 5.5.0-rc1-syzkaller #0 [ 2457.817974][ T7222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2457.828152][ T7222] Call Trace: [ 2457.831529][ T7222] dump_stack+0x11d/0x181 [ 2457.836011][ T7222] dump_header+0xaa/0x39c [ 2457.840413][ T7222] oom_kill_process.cold+0x10/0x15 [ 2457.845544][ T7222] out_of_memory+0x231/0xa60 [ 2457.850155][ T7222] ? __rcu_read_unlock+0x66/0x3d0 [ 2457.855202][ T7222] mem_cgroup_out_of_memory+0x128/0x150 [ 2457.860871][ T7222] try_charge+0xb6c/0xbf0 [ 2457.865225][ T7222] ? __rcu_read_unlock+0x66/0x3d0 [ 2457.870377][ T7222] __memcg_kmem_charge_memcg+0x4a/0xe0 [ 2457.875858][ T7222] __memcg_kmem_charge+0xcf/0x1b0 [ 2457.880905][ T7222] __alloc_pages_nodemask+0x26c/0x310 [ 2457.886301][ T7222] alloc_pages_current+0xd1/0x170 [ 2457.891344][ T7222] pte_alloc_one+0x18/0x50 [ 2457.895838][ T7222] __pte_alloc+0x2d/0x220 [ 2457.900196][ T7222] copy_page_range+0x135a/0x19b0 [ 2457.905174][ T7222] ? __vma_link_rb+0x3f4/0x440 [ 2457.909963][ T7222] dup_mm+0x74a/0xba0 [ 2457.913993][ T7222] copy_process+0x3138/0x3c40 [ 2457.918795][ T7222] _do_fork+0xfe/0x7a0 [ 2457.922894][ T7222] __do_sys_clone3+0x1bd/0x260 [ 2457.927689][ T7222] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 2457.933428][ T7222] ? _copy_to_user+0x84/0xb0 [ 2457.938042][ T7222] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2457.944306][ T7222] ? put_timespec64+0x94/0xc0 [ 2457.948998][ T7222] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2457.955260][ T7222] __x64_sys_clone3+0x3a/0x50 [ 2457.959946][ T7222] do_syscall_64+0xcc/0x3a0 [ 2457.964621][ T7222] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2457.970571][ T7222] RIP: 0033:0x45b349 [ 2457.974598][ T7222] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2457.994216][ T7222] RSP: 002b:00007fedcbcafc78 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2458.002650][ T7222] RAX: ffffffffffffffda RBX: 00007fedcbcb06d4 RCX: 000000000045b349 [ 2458.010658][ T7222] RDX: 0000000000000000 RSI: 0000000000000040 RDI: 0000000020001680 [ 2458.018657][ T7222] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 2458.026645][ T7222] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2458.034765][ T7222] R13: 0000000000000071 R14: 00000000004c1bca R15: 000000000075bfd4 [ 2458.046271][ T7112] QAT: failed to copy from user cfg_data. [ 2458.049417][ T7222] memory: usage 306980kB, limit 307200kB, failcnt 6249 [ 2458.059357][ T7222] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2458.069484][ T7222] Memory cgroup stats for /syz1: [ 2458.069803][ T7222] anon 280596480 [ 2458.069803][ T7222] file 24576 [ 2458.069803][ T7222] kernel_stack 2691072 [ 2458.069803][ T7222] slab 8654848 [ 2458.069803][ T7222] sock 36864 [ 2458.069803][ T7222] shmem 0 [ 2458.069803][ T7222] file_mapped 135168 [ 2458.069803][ T7222] file_dirty 135168 [ 2458.069803][ T7222] file_writeback 0 [ 2458.069803][ T7222] anon_thp 262144000 [ 2458.069803][ T7222] inactive_anon 135168 [ 2458.069803][ T7222] active_anon 280596480 [ 2458.069803][ T7222] inactive_file 0 [ 2458.069803][ T7222] active_file 49152 [ 2458.069803][ T7222] unevictable 0 [ 2458.069803][ T7222] slab_reclaimable 1757184 [ 2458.069803][ T7222] slab_unreclaimable 6897664 [ 2458.069803][ T7222] pgfault 230505 [ 2458.069803][ T7222] pgmajfault 0 [ 2458.069803][ T7222] workingset_refault 0 [ 2458.069803][ T7222] workingset_activate 0 [ 2458.069803][ T7222] workingset_nodereclaim 0 [ 2458.069803][ T7222] pgrefill 190 [ 2458.069803][ T7222] pgscan 23028 [ 2458.069803][ T7222] pgsteal 22610 [ 2458.073598][ T7112] QAT: Invalid ioctl [ 2458.074984][ T7222] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=27578,uid=0 [ 2458.189156][ T7222] Memory cgroup out of memory: Killed process 27578 (syz-executor.1) total-vm:72848kB, anon-rss:4280kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:1000 [ 2458.377389][ T7222] QAT: failed to copy from user cfg_data. [ 2458.386481][ T7222] QAT: Invalid ioctl [ 2458.468625][ T7108] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2458.502539][ T7108] CPU: 1 PID: 7108 Comm: syz-executor.2 Not tainted 5.5.0-rc1-syzkaller #0 [ 2458.511160][ T7108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2458.521262][ T7108] Call Trace: [ 2458.524569][ T7108] dump_stack+0x11d/0x181 [ 2458.528976][ T7108] dump_header+0xaa/0x39c [ 2458.533321][ T7108] oom_kill_process.cold+0x10/0x15 [ 2458.538461][ T7108] out_of_memory+0x231/0xa60 [ 2458.543102][ T7108] ? __rcu_read_unlock+0x66/0x3d0 [ 2458.548245][ T7108] mem_cgroup_out_of_memory+0x128/0x150 [ 2458.553845][ T7108] try_charge+0xb6c/0xbf0 [ 2458.558282][ T7108] ? rcu_note_context_switch+0x720/0x760 [ 2458.560198][ C0] net_ratelimit: 22 callbacks suppressed [ 2458.560224][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2458.563980][ T7108] mem_cgroup_try_charge+0xd2/0x260 [ 2458.564009][ T7108] mem_cgroup_try_charge_delay+0x3a/0x80 [ 2458.570221][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2458.576025][ T7108] wp_page_copy+0x322/0x1040 [ 2458.597026][ T7108] ? __read_once_size+0x41/0xe0 [ 2458.601878][ T7108] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 2458.607781][ T7108] do_wp_page+0x192/0xeb0 [ 2458.612193][ T7108] ? record_times+0x16/0x90 [ 2458.616738][ T7108] __handle_mm_fault+0x1d16/0x2e00 [ 2458.621890][ T7108] ? try_to_free_mem_cgroup_pages+0x258/0x4d0 [ 2458.627995][ T7108] handle_mm_fault+0x21b/0x530 [ 2458.632790][ T7108] __do_page_fault+0x456/0x8d0 [ 2458.637576][ T7108] do_page_fault+0x38/0x194 [ 2458.642116][ T7108] page_fault+0x34/0x40 [ 2458.646283][ T7108] RIP: 0033:0x40e489 [ 2458.650224][ T7108] Code: 8b 37 bf f8 f5 4c 00 e8 b5 36 ff ff bf 88 0d 4c 00 31 c0 e8 49 39 ff ff 41 8b 0f 85 c9 74 cb 80 78 21 00 75 c5 0f b6 4c 24 5c 40 0c 00 00 00 00 c6 40 21 01 44 89 68 2c 4c 89 25 79 da 34 00 [ 2458.669845][ T7108] RSP: 002b:00007ffc833b8ec0 EFLAGS: 00010246 [ 2458.675948][ T7108] RAX: 000000000075bfc8 RBX: 0000000000000000 RCX: 0000000000000000 [ 2458.683930][ T7108] RDX: 00000000000000a8 RSI: 0000000000000008 RDI: 000000000075bfd0 [ 2458.692053][ T7108] RBP: 000000000075bfd4 R08: 00007ffc833b8f80 R09: 0000000000766b70 [ 2458.700037][ T7108] R10: 000000000043a920 R11: 000000000000000f R12: 000000000075bfc8 [ 2458.708282][ T7108] R13: 0000000000000003 R14: 0000000000000001 R15: 000000000075bfd4 [ 2458.719322][ T7108] memory: usage 307200kB, limit 307200kB, failcnt 45 [ 2458.731141][ T7108] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2458.738044][ T7108] Memory cgroup stats for /syz2: [ 2458.738303][ T7108] anon 286400512 [ 2458.738303][ T7108] file 40960 [ 2458.738303][ T7108] kernel_stack 2027520 [ 2458.738303][ T7108] slab 7618560 [ 2458.738303][ T7108] sock 172032 [ 2458.738303][ T7108] shmem 69632 [ 2458.738303][ T7108] file_mapped 0 [ 2458.738303][ T7108] file_dirty 0 [ 2458.738303][ T7108] file_writeback 0 [ 2458.738303][ T7108] anon_thp 274726912 [ 2458.738303][ T7108] inactive_anon 176128 [ 2458.738303][ T7108] active_anon 286400512 [ 2458.738303][ T7108] inactive_file 0 [ 2458.738303][ T7108] active_file 94208 [ 2458.738303][ T7108] unevictable 36864 [ 2458.738303][ T7108] slab_reclaimable 1216512 [ 2458.738303][ T7108] slab_unreclaimable 6402048 [ 2458.738303][ T7108] pgfault 251559 [ 2458.738303][ T7108] pgmajfault 0 [ 2458.738303][ T7108] workingset_refault 0 [ 2458.738303][ T7108] workingset_activate 0 [ 2458.738303][ T7108] workingset_nodereclaim 0 [ 2458.738303][ T7108] pgrefill 107 [ 2458.738303][ T7108] pgscan 107 [ 2458.738303][ T7108] pgsteal 36 [ 2458.834592][ T7108] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=7108,uid=0 [ 2458.850547][ T7108] Memory cgroup out of memory: Killed process 7108 (syz-executor.2) total-vm:72980kB, anon-rss:4280kB, file-rss:35780kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 2458.871723][ T929] oom_reaper: reaped process 7108 (syz-executor.2), now anon-rss:0kB, file-rss:34912kB, shmem-rss:0kB [ 2459.280594][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2459.286973][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2459.760711][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2459.767231][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2459.773791][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2459.780101][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:25:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r7, r7, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r8) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r11, r11, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r12, 0x0) r13 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r13, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r14 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r14, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r14, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r7, r8, r11, r12, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r13, r14, 0x5}) getgroups(0x3, &(0x7f00000000c0)=[r12, r4, 0xee00]) r15 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) r16 = socket$inet_tcp(0x2, 0x1, 0x0) r17 = fcntl$dupfd(r15, 0x406, r16) getsockopt$sock_cred(r17, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r18, r18, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r19) r20 = socket$inet_tcp(0x2, 0x1, 0x0) r21 = fcntl$dupfd(r20, 0x0, r20) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r22, r22, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r24 = socket$inet_tcp(0x2, 0x1, 0x0) r25 = fcntl$dupfd(r24, 0x0, r24) getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r26, r26, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27) r28 = socket$inet_tcp(0x2, 0x1, 0x0) r29 = fcntl$dupfd(r28, 0x0, r28) getsockopt$sock_cred(r29, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r30, r30, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r31, 0x0) r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r33 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r33, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r33, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r30, r31, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r32, r33, 0x5}) getgroups(0x3, &(0x7f00000000c0)=[r31, r19, 0xee00]) r34 = socket$inet_tcp(0x2, 0x1, 0x0) r35 = fcntl$dupfd(r34, 0x0, r34) getsockopt$sock_cred(r35, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r37 = socket$inet_tcp(0x2, 0x1, 0x0) r38 = fcntl$dupfd(r37, 0x0, r37) getsockopt$sock_cred(r38, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r39, r39, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r40) r41 = socket$inet_tcp(0x2, 0x1, 0x0) r42 = fcntl$dupfd(r41, 0x0, r41) getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r43, r43, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r44, 0x0) r45 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r46 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r46, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r46, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r39, r40, r43, r44, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r45, r46, 0x5}) setresuid(r36, r36, r39) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r47) socket$inet_tcp(0x2, 0x1, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000380)='/dev/md0\x00', 0x208400, 0x0) r48 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r48, 0x40096102, 0x0) recvmmsg(r48, &(0x7f0000004380)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)=""/110, 0x6e}], 0x1, &(0x7f0000000a80)=""/113, 0x71}, 0x8}, {{&(0x7f0000000b00)=@l2, 0x80, &(0x7f0000002b80)=[{&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/4096, 0x1000}], 0x2, &(0x7f0000002bc0)=""/195, 0xc3}, 0x2}], 0x2, 0x40010121, &(0x7f0000004480)={0x0, 0x1c9c380}) ioctl$ASHMEM_GET_PIN_STATUS(r48, 0x7709, 0x0) syz_open_dev$mice(&(0x7f00000003c0)='/dev/input/mice\x00', 0x0, 0x502001) r49 = socket$nl_generic(0x10, 0x3, 0x10) r50 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r49, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r50, 0x400, 0x8000000, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}}, 0x0) r51 = dup(r49) ioctl$KDADDIO(r51, 0x4b34, 0xffffffffffffffff) r52 = socket$nl_generic(0x10, 0x3, 0x10) r53 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r52, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r53, 0x400, 0x8000000, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}}, 0x0) dup(r52) r54 = fcntl$dupfd(r51, 0x406, r52) getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r55, r55, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r56, 0x0) r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r57, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r36, r47, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5}) r59 = socket$inet_tcp(0x2, 0x1, 0x0) r60 = fcntl$dupfd(r59, 0x0, r59) getsockopt$sock_cred(r60, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r62, r62, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r63) r64 = socket$inet_tcp(0x2, 0x1, 0x0) r65 = fcntl$dupfd(r64, 0x0, r64) getsockopt$sock_cred(r65, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r66, r66, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r67, 0x0) r68 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r68, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r69 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r69, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r69, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r62, r63, r66, r67, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r68, r69, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r47, 0xffffffffffffffff, r67, 0x0, 0xee00]) setregid(r23, r70) r71 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r71, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r33, &(0x7f0000000500), 0x2, &(0x7f0000000280)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r18, r19, r22, r23, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r61, r71, 0x5}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r72) r73 = socket$inet_tcp(0x2, 0x1, 0x0) r74 = fcntl$dupfd(r73, 0x0, r73) getsockopt$sock_cred(r74, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r76 = socket$inet_tcp(0x2, 0x1, 0x0) r77 = fcntl$dupfd(r76, 0x0, r76) getsockopt$sock_cred(r77, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r78, r78, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r79) r80 = socket$inet_tcp(0x2, 0x1, 0x0) r81 = fcntl$dupfd(r80, 0x0, r80) getsockopt$sock_cred(r81, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r82, r82, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r83, 0x0) r84 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r85 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r85, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r85, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r78, r79, r82, r83, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r84, r85, 0x5}) setresuid(r75, r75, r78) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r86) r87 = socket$inet_tcp(0x2, 0x1, 0x0) r88 = fcntl$dupfd(r87, 0x0, r87) getsockopt$sock_cred(r88, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r89, r89, 0x0) stat(&(0x7f00000004c0)='./file1\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r90, 0x0) r91 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r91, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r92 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r92, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r92, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r75, r86, r89, r90, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r91, r92, 0x5}) r93 = socket$inet_tcp(0x2, 0x1, 0x0) r94 = fcntl$dupfd(r93, 0x0, r93) getsockopt$sock_cred(r94, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r95, r95, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r96) r97 = socket$inet_tcp(0x2, 0x1, 0x0) r98 = fcntl$dupfd(r97, 0x0, r97) getsockopt$sock_cred(r98, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r99, r99, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r100, 0x0) r101 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r101, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r102 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r102, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r102, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r95, r96, r99, r100, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r101, r102, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r86, 0xffffffffffffffff, r100, 0x0, 0xee00]) r103 = socket$inet_tcp(0x2, 0x1, 0x0) r104 = fcntl$dupfd(r103, 0x0, r103) getsockopt$sock_cred(r104, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r106 = socket$inet_tcp(0x2, 0x1, 0x0) r107 = fcntl$dupfd(r106, 0x0, r106) getsockopt$sock_cred(r107, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r108, r108, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r109) r110 = socket$inet_tcp(0x2, 0x1, 0x0) r111 = fcntl$dupfd(r110, 0x0, r110) getsockopt$sock_cred(r111, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r112, r112, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r113, 0x0) r114 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r115 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r115, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r115, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r108, r109, r112, r113, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r114, r115, 0x5}) setresuid(r105, r105, r108) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r116) r117 = socket$inet_tcp(0x2, 0x1, 0x0) r118 = fcntl$dupfd(r117, 0x0, r117) getsockopt$sock_cred(r118, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r119, r119, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r120, 0x0) r121 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r121, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r122 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r122, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r122, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r105, r116, r119, r120, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r121, r122, 0x5}) r123 = socket$inet_tcp(0x2, 0x1, 0x0) r124 = fcntl$dupfd(r123, 0x0, r123) getsockopt$sock_cred(r124, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r125, r125, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r126) r127 = socket$inet_tcp(0x2, 0x1, 0x0) r128 = fcntl$dupfd(r127, 0x0, r127) getsockopt$sock_cred(r128, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r129, r129, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r130, 0x0) r131 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r131, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r132 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r132, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r132, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r125, r126, r129, r130, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r131, r132, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r116, 0xffffffffffffffff, r130, 0x0, 0xee00]) getgroups(0x9, &(0x7f00000000c0)=[0xffffffffffffffff, r19, 0xee00, r72, 0xffffffffffffffff, r86, r116, 0xffffffffffffffff, 0xee01]) getresgid(&(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000200)=0x0) r135 = getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r136) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r137) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r138) r139 = socket$inet_tcp(0x2, 0x1, 0x0) r140 = fcntl$dupfd(r139, 0x0, r139) getsockopt$sock_cred(r140, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r141, r141, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r142) r143 = socket$inet_tcp(0x2, 0x1, 0x0) r144 = fcntl$dupfd(r143, 0x0, r143) getsockopt$sock_cred(r144, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r145, r145, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r146, 0x0) r147 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r148 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r148, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r148, &(0x7f0000000580), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r141, r142, r145, r146, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r147, r148, 0x5}) setgroups(0x9, &(0x7f0000000240)=[r12, r133, r134, r135, r136, r137, r138, r146, 0xee00]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:25:10 executing program 4: r0 = socket$inet(0x2, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) sendto$inet(r0, &(0x7f0000000400)='s', 0x1, 0x8840, &(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendmmsg(r0, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="7fc61b6d932dbc563145fefc191dbe34ca8e9ecdb27e56bc6ba8809e7cf04caace2b341d936860e16f71d90cf2a63ea103c29cc8aafd0c67226acce150360262eaae8207", 0x44}], 0x1}}], 0x40000a1, 0x0) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f0000001500)=[{0x0}, {&(0x7f0000000440)=""/150, 0x96}], 0x2}}], 0x300, 0x3, 0x0) 14:25:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000140)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0xfffffffffffffdb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa, @perf_config_ext, 0x12ce9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:25:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r7, r7, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r8) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r11, r11, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r12, 0x0) r13 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r13, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r14 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r14, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r14, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r7, r8, r11, r12, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r13, r14, 0x5}) getgroups(0x3, &(0x7f00000000c0)=[r12, r4, 0xee00]) r15 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) r16 = socket$inet_tcp(0x2, 0x1, 0x0) r17 = fcntl$dupfd(r15, 0x406, r16) getsockopt$sock_cred(r17, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r18, r18, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r19) r20 = socket$inet_tcp(0x2, 0x1, 0x0) r21 = fcntl$dupfd(r20, 0x0, r20) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r22, r22, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r24 = socket$inet_tcp(0x2, 0x1, 0x0) r25 = fcntl$dupfd(r24, 0x0, r24) getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r26, r26, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27) r28 = socket$inet_tcp(0x2, 0x1, 0x0) r29 = fcntl$dupfd(r28, 0x0, r28) getsockopt$sock_cred(r29, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r30, r30, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r31, 0x0) r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r33 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r33, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r33, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r30, r31, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r32, r33, 0x5}) getgroups(0x3, &(0x7f00000000c0)=[r31, r19, 0xee00]) r34 = socket$inet_tcp(0x2, 0x1, 0x0) r35 = fcntl$dupfd(r34, 0x0, r34) getsockopt$sock_cred(r35, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r37 = socket$inet_tcp(0x2, 0x1, 0x0) r38 = fcntl$dupfd(r37, 0x0, r37) getsockopt$sock_cred(r38, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r39, r39, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r40) r41 = socket$inet_tcp(0x2, 0x1, 0x0) r42 = fcntl$dupfd(r41, 0x0, r41) getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r43, r43, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r44, 0x0) r45 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r46 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r46, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r46, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r39, r40, r43, r44, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r45, r46, 0x5}) setresuid(r36, r36, r39) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r47) socket$inet_tcp(0x2, 0x1, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000380)='/dev/md0\x00', 0x208400, 0x0) r48 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r48, 0x40096102, 0x0) recvmmsg(r48, &(0x7f0000004380)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)=""/110, 0x6e}], 0x1, &(0x7f0000000a80)=""/113, 0x71}, 0x8}, {{&(0x7f0000000b00)=@l2, 0x80, &(0x7f0000002b80)=[{&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/4096, 0x1000}], 0x2, &(0x7f0000002bc0)=""/195, 0xc3}, 0x2}], 0x2, 0x40010121, &(0x7f0000004480)={0x0, 0x1c9c380}) ioctl$ASHMEM_GET_PIN_STATUS(r48, 0x7709, 0x0) syz_open_dev$mice(&(0x7f00000003c0)='/dev/input/mice\x00', 0x0, 0x502001) r49 = socket$nl_generic(0x10, 0x3, 0x10) r50 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r49, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r50, 0x400, 0x8000000, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}}, 0x0) r51 = dup(r49) ioctl$KDADDIO(r51, 0x4b34, 0xffffffffffffffff) r52 = socket$nl_generic(0x10, 0x3, 0x10) r53 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r52, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r53, 0x400, 0x8000000, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}}, 0x0) dup(r52) r54 = fcntl$dupfd(r51, 0x406, r52) getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r55, r55, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r56, 0x0) r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r57, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r36, r47, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5}) r59 = socket$inet_tcp(0x2, 0x1, 0x0) r60 = fcntl$dupfd(r59, 0x0, r59) getsockopt$sock_cred(r60, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r62, r62, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r63) r64 = socket$inet_tcp(0x2, 0x1, 0x0) r65 = fcntl$dupfd(r64, 0x0, r64) getsockopt$sock_cred(r65, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r66, r66, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r67, 0x0) r68 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r68, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r69 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r69, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r69, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r62, r63, r66, r67, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r68, r69, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r47, 0xffffffffffffffff, r67, 0x0, 0xee00]) setregid(r23, r70) r71 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r71, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r33, &(0x7f0000000500), 0x2, &(0x7f0000000280)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r18, r19, r22, r23, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r61, r71, 0x5}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r72) r73 = socket$inet_tcp(0x2, 0x1, 0x0) r74 = fcntl$dupfd(r73, 0x0, r73) getsockopt$sock_cred(r74, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r76 = socket$inet_tcp(0x2, 0x1, 0x0) r77 = fcntl$dupfd(r76, 0x0, r76) getsockopt$sock_cred(r77, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r78, r78, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r79) r80 = socket$inet_tcp(0x2, 0x1, 0x0) r81 = fcntl$dupfd(r80, 0x0, r80) getsockopt$sock_cred(r81, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r82, r82, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r83, 0x0) r84 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r85 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r85, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r85, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r78, r79, r82, r83, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r84, r85, 0x5}) setresuid(r75, r75, r78) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r86) r87 = socket$inet_tcp(0x2, 0x1, 0x0) r88 = fcntl$dupfd(r87, 0x0, r87) getsockopt$sock_cred(r88, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r89, r89, 0x0) stat(&(0x7f00000004c0)='./file1\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r90, 0x0) r91 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r91, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r92 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r92, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r92, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r75, r86, r89, r90, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r91, r92, 0x5}) r93 = socket$inet_tcp(0x2, 0x1, 0x0) r94 = fcntl$dupfd(r93, 0x0, r93) getsockopt$sock_cred(r94, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r95, r95, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r96) r97 = socket$inet_tcp(0x2, 0x1, 0x0) r98 = fcntl$dupfd(r97, 0x0, r97) getsockopt$sock_cred(r98, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r99, r99, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r100, 0x0) r101 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r101, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r102 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r102, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r102, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r95, r96, r99, r100, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r101, r102, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r86, 0xffffffffffffffff, r100, 0x0, 0xee00]) r103 = socket$inet_tcp(0x2, 0x1, 0x0) r104 = fcntl$dupfd(r103, 0x0, r103) getsockopt$sock_cred(r104, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r106 = socket$inet_tcp(0x2, 0x1, 0x0) r107 = fcntl$dupfd(r106, 0x0, r106) getsockopt$sock_cred(r107, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r108, r108, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r109) r110 = socket$inet_tcp(0x2, 0x1, 0x0) r111 = fcntl$dupfd(r110, 0x0, r110) getsockopt$sock_cred(r111, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r112, r112, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r113, 0x0) r114 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r115 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r115, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r115, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r108, r109, r112, r113, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r114, r115, 0x5}) setresuid(r105, r105, r108) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r116) r117 = socket$inet_tcp(0x2, 0x1, 0x0) r118 = fcntl$dupfd(r117, 0x0, r117) getsockopt$sock_cred(r118, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r119, r119, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r120, 0x0) r121 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r121, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r122 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r122, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r122, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r105, r116, r119, r120, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r121, r122, 0x5}) r123 = socket$inet_tcp(0x2, 0x1, 0x0) r124 = fcntl$dupfd(r123, 0x0, r123) getsockopt$sock_cred(r124, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r125, r125, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r126) r127 = socket$inet_tcp(0x2, 0x1, 0x0) r128 = fcntl$dupfd(r127, 0x0, r127) getsockopt$sock_cred(r128, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r129, r129, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r130, 0x0) r131 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r131, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r132 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r132, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r132, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r125, r126, r129, r130, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r131, r132, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r116, 0xffffffffffffffff, r130, 0x0, 0xee00]) getgroups(0x9, &(0x7f00000000c0)=[0xffffffffffffffff, r19, 0xee00, r72, 0xffffffffffffffff, r86, r116, 0xffffffffffffffff, 0xee01]) getresgid(&(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000200)=0x0) r135 = getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r136) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r137) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r138) r139 = socket$inet_tcp(0x2, 0x1, 0x0) r140 = fcntl$dupfd(r139, 0x0, r139) getsockopt$sock_cred(r140, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r141, r141, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r142) r143 = socket$inet_tcp(0x2, 0x1, 0x0) r144 = fcntl$dupfd(r143, 0x0, r143) getsockopt$sock_cred(r144, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r145, r145, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r146, 0x0) r147 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r148 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r148, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r148, &(0x7f0000000580), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r141, r142, r145, r146, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r147, r148, 0x5}) setgroups(0x9, &(0x7f0000000240)=[r12, r133, r134, r135, r136, r137, r138, r146, 0xee00]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:25:10 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="020b000007000000000021003f5403620500010001009a934dd520175e3b8f8886264fe600001000e0c99f3d653c00f0ff9da499df0005dc"], 0x38}}, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000140), 0x400000000000151, 0x2000000022, &(0x7f00000001c0)={0x77359400}) 14:25:10 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r7, r7, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r8) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r11, r11, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r12, 0x0) r13 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r13, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r14 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r14, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r14, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r7, r8, r11, r12, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r13, r14, 0x5}) getgroups(0x3, &(0x7f00000000c0)=[r12, r4, 0xee00]) r15 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) r16 = socket$inet_tcp(0x2, 0x1, 0x0) r17 = fcntl$dupfd(r15, 0x406, r16) getsockopt$sock_cred(r17, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r18, r18, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r19) r20 = socket$inet_tcp(0x2, 0x1, 0x0) r21 = fcntl$dupfd(r20, 0x0, r20) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r22, r22, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r24 = socket$inet_tcp(0x2, 0x1, 0x0) r25 = fcntl$dupfd(r24, 0x0, r24) getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r26, r26, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27) r28 = socket$inet_tcp(0x2, 0x1, 0x0) r29 = fcntl$dupfd(r28, 0x0, r28) getsockopt$sock_cred(r29, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r30, r30, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r31, 0x0) r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r33 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r33, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r33, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r30, r31, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r32, r33, 0x5}) getgroups(0x3, &(0x7f00000000c0)=[r31, r19, 0xee00]) r34 = socket$inet_tcp(0x2, 0x1, 0x0) r35 = fcntl$dupfd(r34, 0x0, r34) getsockopt$sock_cred(r35, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r37 = socket$inet_tcp(0x2, 0x1, 0x0) r38 = fcntl$dupfd(r37, 0x0, r37) getsockopt$sock_cred(r38, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r39, r39, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r40) r41 = socket$inet_tcp(0x2, 0x1, 0x0) r42 = fcntl$dupfd(r41, 0x0, r41) getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r43, r43, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r44, 0x0) r45 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r46 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r46, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r46, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r39, r40, r43, r44, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r45, r46, 0x5}) setresuid(r36, r36, r39) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r47) socket$inet_tcp(0x2, 0x1, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000380)='/dev/md0\x00', 0x208400, 0x0) r48 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r48, 0x40096102, 0x0) recvmmsg(r48, &(0x7f0000004380)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)=""/110, 0x6e}], 0x1, &(0x7f0000000a80)=""/113, 0x71}, 0x8}, {{&(0x7f0000000b00)=@l2, 0x80, &(0x7f0000002b80)=[{&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/4096, 0x1000}], 0x2, &(0x7f0000002bc0)=""/195, 0xc3}, 0x2}], 0x2, 0x40010121, &(0x7f0000004480)={0x0, 0x1c9c380}) ioctl$ASHMEM_GET_PIN_STATUS(r48, 0x7709, 0x0) syz_open_dev$mice(&(0x7f00000003c0)='/dev/input/mice\x00', 0x0, 0x502001) r49 = socket$nl_generic(0x10, 0x3, 0x10) r50 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r49, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r50, 0x400, 0x8000000, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}}, 0x0) r51 = dup(r49) ioctl$KDADDIO(r51, 0x4b34, 0xffffffffffffffff) r52 = socket$nl_generic(0x10, 0x3, 0x10) r53 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r52, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r53, 0x400, 0x8000000, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}}, 0x0) dup(r52) r54 = fcntl$dupfd(r51, 0x406, r52) getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r55, r55, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r56, 0x0) r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r57, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r36, r47, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5}) r59 = socket$inet_tcp(0x2, 0x1, 0x0) r60 = fcntl$dupfd(r59, 0x0, r59) getsockopt$sock_cred(r60, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r62, r62, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r63) r64 = socket$inet_tcp(0x2, 0x1, 0x0) r65 = fcntl$dupfd(r64, 0x0, r64) getsockopt$sock_cred(r65, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r66, r66, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r67, 0x0) r68 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r68, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r69 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r69, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r69, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r62, r63, r66, r67, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r68, r69, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r47, 0xffffffffffffffff, r67, 0x0, 0xee00]) setregid(r23, r70) r71 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r71, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r33, &(0x7f0000000500), 0x2, &(0x7f0000000280)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r18, r19, r22, r23, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r61, r71, 0x5}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r72) r73 = socket$inet_tcp(0x2, 0x1, 0x0) r74 = fcntl$dupfd(r73, 0x0, r73) getsockopt$sock_cred(r74, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r76 = socket$inet_tcp(0x2, 0x1, 0x0) r77 = fcntl$dupfd(r76, 0x0, r76) getsockopt$sock_cred(r77, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r78, r78, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r79) r80 = socket$inet_tcp(0x2, 0x1, 0x0) r81 = fcntl$dupfd(r80, 0x0, r80) getsockopt$sock_cred(r81, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r82, r82, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r83, 0x0) r84 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r85 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r85, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r85, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r78, r79, r82, r83, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r84, r85, 0x5}) setresuid(r75, r75, r78) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r86) r87 = socket$inet_tcp(0x2, 0x1, 0x0) r88 = fcntl$dupfd(r87, 0x0, r87) getsockopt$sock_cred(r88, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r89, r89, 0x0) stat(&(0x7f00000004c0)='./file1\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r90, 0x0) r91 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r91, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r92 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r92, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r92, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r75, r86, r89, r90, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r91, r92, 0x5}) r93 = socket$inet_tcp(0x2, 0x1, 0x0) r94 = fcntl$dupfd(r93, 0x0, r93) getsockopt$sock_cred(r94, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r95, r95, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r96) r97 = socket$inet_tcp(0x2, 0x1, 0x0) r98 = fcntl$dupfd(r97, 0x0, r97) getsockopt$sock_cred(r98, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r99, r99, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r100, 0x0) r101 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r101, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r102 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r102, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r102, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r95, r96, r99, r100, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r101, r102, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r86, 0xffffffffffffffff, r100, 0x0, 0xee00]) r103 = socket$inet_tcp(0x2, 0x1, 0x0) r104 = fcntl$dupfd(r103, 0x0, r103) getsockopt$sock_cred(r104, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r106 = socket$inet_tcp(0x2, 0x1, 0x0) r107 = fcntl$dupfd(r106, 0x0, r106) getsockopt$sock_cred(r107, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r108, r108, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r109) r110 = socket$inet_tcp(0x2, 0x1, 0x0) r111 = fcntl$dupfd(r110, 0x0, r110) getsockopt$sock_cred(r111, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r112, r112, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r113, 0x0) r114 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r115 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r115, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r115, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r108, r109, r112, r113, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r114, r115, 0x5}) setresuid(r105, r105, r108) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r116) r117 = socket$inet_tcp(0x2, 0x1, 0x0) r118 = fcntl$dupfd(r117, 0x0, r117) getsockopt$sock_cred(r118, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r119, r119, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r120, 0x0) r121 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r121, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r122 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r122, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r122, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r105, r116, r119, r120, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r121, r122, 0x5}) r123 = socket$inet_tcp(0x2, 0x1, 0x0) r124 = fcntl$dupfd(r123, 0x0, r123) getsockopt$sock_cred(r124, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r125, r125, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r126) r127 = socket$inet_tcp(0x2, 0x1, 0x0) r128 = fcntl$dupfd(r127, 0x0, r127) getsockopt$sock_cred(r128, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r129, r129, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r130, 0x0) r131 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r131, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r132 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r132, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r132, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r125, r126, r129, r130, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r131, r132, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r116, 0xffffffffffffffff, r130, 0x0, 0xee00]) getgroups(0x9, &(0x7f00000000c0)=[0xffffffffffffffff, r19, 0xee00, r72, 0xffffffffffffffff, r86, r116, 0xffffffffffffffff, 0xee01]) getresgid(&(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000200)) getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r133) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r134) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r135) r136 = socket$inet_tcp(0x2, 0x1, 0x0) r137 = fcntl$dupfd(r136, 0x0, r136) getsockopt$sock_cred(r137, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r138, r138, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r139) r140 = socket$inet_tcp(0x2, 0x1, 0x0) r141 = fcntl$dupfd(r140, 0x0, r140) getsockopt$sock_cred(r141, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r142, r142, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r143, 0x0) r144 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r145 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r145, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r145, &(0x7f0000000580), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r138, r139, r142, r143, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r144, r145, 0x5}) perf_event_open(&(0x7f0000000000)={0x2, 0xfffffffffffffdb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext={0x9}, 0x12ce9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2460.003300][ T7395] syz-executor.2 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2460.015486][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2460.015516][ C0] protocol 88fb is buggy, dev hsr_slave_1 14:25:10 executing program 4: r0 = socket$inet(0x2, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) sendto$inet(r0, &(0x7f0000000400)='s', 0x1, 0x8840, &(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendmmsg(r0, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="7fc61b6d932dbc563145fefc191dbe34ca8e9ecdb27e56bc6ba8809e7cf04caace2b341d936860e16f71d90cf2a63ea103c29cc8aafd0c67226acce150360262eaae8207", 0x44}], 0x1}}], 0x40000a1, 0x0) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f0000001500)=[{0x0}, {&(0x7f0000000440)=""/150, 0x96}], 0x2}}], 0x300, 0x3, 0x0) [ 2460.113381][ T7395] CPU: 0 PID: 7395 Comm: syz-executor.2 Not tainted 5.5.0-rc1-syzkaller #0 [ 2460.122012][ T7395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2460.132199][ T7395] Call Trace: [ 2460.135536][ T7395] dump_stack+0x11d/0x181 [ 2460.139954][ T7395] dump_header+0xaa/0x39c [ 2460.144357][ T7395] oom_kill_process.cold+0x10/0x15 [ 2460.149488][ T7395] out_of_memory+0x231/0xa60 [ 2460.154167][ T7395] ? __rcu_read_unlock+0x66/0x3d0 [ 2460.159301][ T7395] mem_cgroup_out_of_memory+0x128/0x150 [ 2460.164868][ T7395] try_charge+0xb6c/0xbf0 [ 2460.169319][ T7395] ? __rcu_read_unlock+0x66/0x3d0 [ 2460.174396][ T7395] __memcg_kmem_charge_memcg+0x4a/0xe0 [ 2460.179957][ T7395] __memcg_kmem_charge+0xcf/0x1b0 [ 2460.185007][ T7395] __alloc_pages_nodemask+0x26c/0x310 [ 2460.190506][ T7395] alloc_pages_current+0xd1/0x170 [ 2460.195570][ T7395] pte_alloc_one+0x18/0x50 [ 2460.200002][ T7395] __pte_alloc+0x2d/0x220 [ 2460.204613][ T7395] __handle_mm_fault+0x1ffb/0x2e00 [ 2460.209798][ T7395] ? try_to_free_mem_cgroup_pages+0x258/0x4d0 [ 2460.215890][ T7395] handle_mm_fault+0x21b/0x530 [ 2460.220791][ T7395] __do_page_fault+0x456/0x8d0 [ 2460.225737][ T7395] do_page_fault+0x38/0x194 [ 2460.230330][ T7395] page_fault+0x34/0x40 [ 2460.234493][ T7395] RIP: 0033:0x40e4fc [ 2460.238407][ T7395] Code: 8c 02 50 bf 75 00 48 83 c0 08 48 83 f8 48 75 e6 49 63 c6 0f b6 4c 24 5b 48 69 c0 a8 00 00 00 88 88 c0 bf 75 00 e8 94 4d ff ff <83> 05 01 1b 55 00 01 80 7c 24 59 00 74 0b f6 44 24 08 01 0f 84 98 [ 2460.258029][ T7395] RSP: 002b:00007ffc833b8ec0 EFLAGS: 00010217 [ 2460.264110][ T7395] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000000045b349 [ 2460.272343][ T7395] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 000000000075bf28 [ 2460.280323][ T7395] RBP: 000000000075bf2c R08: 00007f96d7fc5700 R09: ffffffffffffffff [ 2460.288299][ T7395] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000075bf20 [ 2460.296473][ T7395] R13: 0000000000000004 R14: 0000000000000000 R15: 000000000075bf2c 14:25:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000140)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0xfffffffffffffdb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa, @perf_config_ext, 0x12ce9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2460.360394][ T7395] memory: usage 307200kB, limit 307200kB, failcnt 88 [ 2460.371634][ T7395] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2460.388935][ T7395] Memory cgroup stats for /syz2: [ 2460.389104][ T7395] anon 286400512 [ 2460.389104][ T7395] file 40960 [ 2460.389104][ T7395] kernel_stack 2027520 [ 2460.389104][ T7395] slab 7618560 [ 2460.389104][ T7395] sock 172032 [ 2460.389104][ T7395] shmem 69632 [ 2460.389104][ T7395] file_mapped 0 [ 2460.389104][ T7395] file_dirty 0 [ 2460.389104][ T7395] file_writeback 0 [ 2460.389104][ T7395] anon_thp 274726912 [ 2460.389104][ T7395] inactive_anon 176128 [ 2460.389104][ T7395] active_anon 286400512 [ 2460.389104][ T7395] inactive_file 0 [ 2460.389104][ T7395] active_file 94208 [ 2460.389104][ T7395] unevictable 36864 [ 2460.389104][ T7395] slab_reclaimable 1216512 [ 2460.389104][ T7395] slab_unreclaimable 6402048 [ 2460.389104][ T7395] pgfault 251592 [ 2460.389104][ T7395] pgmajfault 0 [ 2460.389104][ T7395] workingset_refault 0 [ 2460.389104][ T7395] workingset_activate 0 [ 2460.389104][ T7395] workingset_nodereclaim 0 [ 2460.389104][ T7395] pgrefill 173 [ 2460.389104][ T7395] pgscan 173 [ 2460.389104][ T7395] pgsteal 36 14:25:11 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) sendto$inet(r0, &(0x7f0000000400)='s', 0x1, 0x8840, &(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendmmsg(r0, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="7fc61b6d932dbc563145fefc191dbe34ca8e9ecdb27e56bc6ba8809e7cf04caace2b341d936860e16f71d90cf2a63ea103c29cc8aafd0c67226acce150360262eaae8207", 0x44}], 0x1}}], 0x40000a1, 0x0) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f0000001500)=[{0x0}, {&(0x7f0000000440)=""/150, 0x96}], 0x2}}], 0x300, 0x3, 0x0) [ 2460.581665][ T7395] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=17374,uid=0 [ 2460.602365][ T7395] Memory cgroup out of memory: Killed process 17374 (syz-executor.2) total-vm:72716kB, anon-rss:4264kB, file-rss:35780kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 14:25:11 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="020b000007000000000021003f5403620500010001009a934dd520175e3b8f8886264fe600001000e0c99f3d653c00f0ff9da499df0005dc"], 0x38}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x20, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000140), 0x400000000000151, 0x2000000022, &(0x7f00000001c0)={0x77359400}) 14:25:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000140)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0xfffffffffffffdb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa, @perf_config_ext, 0x12ce9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:25:11 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="020b000007000000000021003f5403620500010001009a934dd520175e3b8f8886264fe600001000e0c99f3d653c00f0ff9da499df0005dc"], 0x38}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x20, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000140), 0x400000000000151, 0x2000000022, &(0x7f00000001c0)={0x77359400}) [ 2461.333862][ T7401] syz-executor.2 invoked oom-killer: gfp_mask=0x40cc0(GFP_KERNEL|__GFP_COMP), order=3, oom_score_adj=1000 [ 2461.600612][ T7401] CPU: 1 PID: 7401 Comm: syz-executor.2 Not tainted 5.5.0-rc1-syzkaller #0 [ 2461.609279][ T7401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2461.619454][ T7401] Call Trace: [ 2461.622831][ T7401] dump_stack+0x11d/0x181 [ 2461.627511][ T7401] dump_header+0xaa/0x39c [ 2461.631866][ T7401] oom_kill_process.cold+0x10/0x15 [ 2461.637174][ T7401] out_of_memory+0x231/0xa60 [ 2461.641799][ T7401] ? __rcu_read_unlock+0x66/0x3d0 [ 2461.646936][ T7401] mem_cgroup_out_of_memory+0x128/0x150 [ 2461.652626][ T7401] try_charge+0xb6c/0xbf0 [ 2461.657069][ T7401] __memcg_kmem_charge_memcg+0x4a/0xe0 [ 2461.662568][ T7401] cache_grow_begin+0x3bb/0x5c0 [ 2461.667448][ T7401] fallback_alloc+0x161/0x1f0 [ 2461.672237][ T7401] ____cache_alloc_node+0x1b1/0x1c0 [ 2461.677453][ T7401] ? memcg_kmem_get_cache+0x1b1/0x320 [ 2461.682937][ T7401] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2461.689230][ T7401] kmem_cache_alloc+0x179/0x5d0 [ 2461.694166][ T7401] ? tomoyo_supervisor+0x170/0xd20 [ 2461.699317][ T7401] vmx_create_vcpu+0x52/0x2480 [ 2461.704135][ T7401] ? ___cache_free+0x2e/0x320 [ 2461.708853][ T7401] ? tomoyo_path_number_perm+0x359/0x3c0 [ 2461.714589][ T7401] kvm_arch_vcpu_create+0x96/0x130 [ 2461.719766][ T7401] kvm_vm_ioctl+0x40b/0x12e0 [ 2461.724510][ T7401] ? kvm_unregister_device_ops+0x80/0x80 [ 2461.730197][ T7401] do_vfs_ioctl+0x84f/0xcf0 [ 2461.734758][ T7401] ? tomoyo_file_ioctl+0x34/0x40 [ 2461.739823][ T7401] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2461.746090][ T7401] ksys_ioctl+0xbd/0xe0 [ 2461.750273][ T7401] __x64_sys_ioctl+0x4c/0x60 [ 2461.754893][ T7401] do_syscall_64+0xcc/0x3a0 [ 2461.759470][ T7401] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2461.765483][ T7401] RIP: 0033:0x45b349 [ 2461.769398][ T7401] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2461.789008][ T7401] RSP: 002b:00007f96d7fc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2461.797430][ T7401] RAX: ffffffffffffffda RBX: 00007f96d7fc56d4 RCX: 000000000045b349 [ 2461.805413][ T7401] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 2461.813523][ T7401] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2461.821503][ T7401] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2461.829479][ T7401] R13: 000000000000036d R14: 00000000004c498b R15: 000000000075bf2c [ 2461.923309][ T7401] memory: usage 307176kB, limit 307200kB, failcnt 116 [ 2461.935156][ T7401] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2461.942527][ T7401] Memory cgroup stats for /syz2: [ 2461.942756][ T7401] anon 286400512 [ 2461.942756][ T7401] file 40960 [ 2461.942756][ T7401] kernel_stack 1990656 [ 2461.942756][ T7401] slab 7618560 [ 2461.942756][ T7401] sock 172032 [ 2461.942756][ T7401] shmem 69632 [ 2461.942756][ T7401] file_mapped 0 [ 2461.942756][ T7401] file_dirty 0 [ 2461.942756][ T7401] file_writeback 0 [ 2461.942756][ T7401] anon_thp 274726912 [ 2461.942756][ T7401] inactive_anon 176128 [ 2461.942756][ T7401] active_anon 286400512 [ 2461.942756][ T7401] inactive_file 0 [ 2461.942756][ T7401] active_file 94208 [ 2461.942756][ T7401] unevictable 36864 [ 2461.942756][ T7401] slab_reclaimable 1216512 [ 2461.942756][ T7401] slab_unreclaimable 6402048 [ 2461.942756][ T7401] pgfault 251625 [ 2461.942756][ T7401] pgmajfault 0 [ 2461.942756][ T7401] workingset_refault 0 [ 2461.942756][ T7401] workingset_activate 0 [ 2461.942756][ T7401] workingset_nodereclaim 0 [ 2461.942756][ T7401] pgrefill 173 [ 2461.942756][ T7401] pgscan 173 [ 2461.942756][ T7401] pgsteal 36 [ 2462.040558][ T7401] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=8406,uid=0 [ 2462.058342][ T7401] Memory cgroup out of memory: Killed process 8406 (syz-executor.2) total-vm:72584kB, anon-rss:4260kB, file-rss:35752kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 2462.427381][ T7397] QAT: failed to copy from user cfg_data. [ 2462.457882][ T7397] QAT: Invalid ioctl [ 2462.592970][ T7401] QAT: failed to copy from user cfg_data. [ 2462.600043][ T7401] QAT: Invalid ioctl [ 2462.767236][ T7394] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2462.818218][ T7394] CPU: 0 PID: 7394 Comm: syz-executor.1 Not tainted 5.5.0-rc1-syzkaller #0 [ 2462.827497][ T7394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2462.837643][ T7394] Call Trace: [ 2462.840952][ T7394] dump_stack+0x11d/0x181 [ 2462.845306][ T7394] dump_header+0xaa/0x39c [ 2462.849657][ T7394] oom_kill_process.cold+0x10/0x15 [ 2462.854789][ T7394] out_of_memory+0x231/0xa60 [ 2462.859424][ T7394] ? __rcu_read_unlock+0x66/0x3d0 [ 2462.864521][ T7394] mem_cgroup_out_of_memory+0x128/0x150 [ 2462.870148][ T7394] try_charge+0xb6c/0xbf0 [ 2462.874559][ T7394] ? rcu_note_context_switch+0x720/0x760 [ 2462.880335][ T7394] mem_cgroup_try_charge+0xd2/0x260 [ 2462.885741][ T7394] mem_cgroup_try_charge_delay+0x3a/0x80 [ 2462.891458][ T7394] wp_page_copy+0x322/0x1040 [ 2462.896067][ T7394] ? __read_once_size+0x41/0xe0 [ 2462.900938][ T7394] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 2462.906846][ T7394] do_wp_page+0x192/0xeb0 [ 2462.911202][ T7394] ? record_times+0x16/0x90 [ 2462.915721][ T7394] __handle_mm_fault+0x1d16/0x2e00 [ 2462.920865][ T7394] ? try_to_free_mem_cgroup_pages+0x258/0x4d0 [ 2462.927010][ T7394] handle_mm_fault+0x21b/0x530 [ 2462.931834][ T7394] __do_page_fault+0x456/0x8d0 [ 2462.936767][ T7394] do_page_fault+0x38/0x194 [ 2462.941384][ T7394] page_fault+0x34/0x40 [ 2462.945557][ T7394] RIP: 0033:0x40e489 [ 2462.949469][ T7394] Code: 8b 37 bf f8 f5 4c 00 e8 b5 36 ff ff bf 88 0d 4c 00 31 c0 e8 49 39 ff ff 41 8b 0f 85 c9 74 cb 80 78 21 00 75 c5 0f b6 4c 24 5c 40 0c 00 00 00 00 c6 40 21 01 44 89 68 2c 4c 89 25 79 da 34 00 [ 2462.969154][ T7394] RSP: 002b:00007ffda533dcd0 EFLAGS: 00010246 [ 2462.975405][ T7394] RAX: 000000000075bfc8 RBX: 0000000000000000 RCX: 0000000000000000 [ 2462.983395][ T7394] RDX: 00000000000000a8 RSI: 0000000000000008 RDI: 000000000075bfd0 [ 2462.991395][ T7394] RBP: 000000000075bfd4 R08: 00007ffda533dd90 R09: 0000000000766b70 [ 2462.999419][ T7394] R10: 000000000043a920 R11: 000000000000000f R12: 000000000075bfc8 [ 2463.007434][ T7394] R13: 0000000000000003 R14: 0000000000000001 R15: 000000000075bfd4 [ 2463.026549][ T7394] memory: usage 307200kB, limit 307200kB, failcnt 6295 [ 2463.036349][ T7394] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2463.043761][ T7394] Memory cgroup stats for /syz1: [ 2463.044007][ T7394] anon 278953984 [ 2463.044007][ T7394] file 24576 [ 2463.044007][ T7394] kernel_stack 2801664 [ 2463.044007][ T7394] slab 8929280 [ 2463.044007][ T7394] sock 36864 [ 2463.044007][ T7394] shmem 0 [ 2463.044007][ T7394] file_mapped 135168 [ 2463.044007][ T7394] file_dirty 135168 [ 2463.044007][ T7394] file_writeback 0 [ 2463.044007][ T7394] anon_thp 257949696 [ 2463.044007][ T7394] inactive_anon 135168 [ 2463.044007][ T7394] active_anon 278953984 [ 2463.044007][ T7394] inactive_file 0 [ 2463.044007][ T7394] active_file 49152 [ 2463.044007][ T7394] unevictable 0 [ 2463.044007][ T7394] slab_reclaimable 1757184 [ 2463.044007][ T7394] slab_unreclaimable 7172096 [ 2463.044007][ T7394] pgfault 231528 [ 2463.044007][ T7394] pgmajfault 0 [ 2463.044007][ T7394] workingset_refault 0 [ 2463.044007][ T7394] workingset_activate 0 [ 2463.044007][ T7394] workingset_nodereclaim 0 [ 2463.044007][ T7394] pgrefill 223 [ 2463.044007][ T7394] pgscan 23094 [ 2463.044007][ T7394] pgsteal 22610 [ 2463.143143][ T7394] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=27383,uid=0 [ 2463.159588][ T7394] Memory cgroup out of memory: Killed process 27383 (syz-executor.1) total-vm:72848kB, anon-rss:4280kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:1000 [ 2463.182588][ T7556] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2463.204295][ T7556] CPU: 1 PID: 7556 Comm: syz-executor.1 Not tainted 5.5.0-rc1-syzkaller #0 [ 2463.212903][ T7556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2463.222963][ T7556] Call Trace: [ 2463.226337][ T7556] dump_stack+0x11d/0x181 [ 2463.230729][ T7556] dump_header+0xaa/0x39c [ 2463.235073][ T7556] oom_kill_process.cold+0x10/0x15 [ 2463.240201][ T7556] out_of_memory+0x231/0xa60 [ 2463.244876][ T7556] mem_cgroup_out_of_memory+0x128/0x150 [ 2463.250454][ T7556] try_charge+0x800/0xbf0 [ 2463.254799][ T7556] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 2463.260696][ T7556] ? __rcu_read_unlock+0x66/0x3d0 [ 2463.265736][ T7556] __memcg_kmem_charge_memcg+0x4a/0xe0 [ 2463.271202][ T7556] __memcg_kmem_charge+0xcf/0x1b0 [ 2463.276246][ T7556] __alloc_pages_nodemask+0x26c/0x310 [ 2463.281702][ T7556] alloc_pages_current+0xd1/0x170 [ 2463.286741][ T7556] pte_alloc_one+0x18/0x50 [ 2463.291164][ T7556] __handle_mm_fault+0x2be6/0x2e00 [ 2463.296318][ T7556] ? try_to_free_mem_cgroup_pages+0x258/0x4d0 [ 2463.302467][ T7556] handle_mm_fault+0x21b/0x530 [ 2463.307218][ T7556] __do_page_fault+0x456/0x8d0 [ 2463.311969][ T7556] do_page_fault+0x38/0x194 [ 2463.316460][ T7556] page_fault+0x34/0x40 [ 2463.320607][ T7556] RIP: 0033:0x45b349 [ 2463.324490][ T7556] Code: Bad RIP value. [ 2463.328537][ T7556] RSP: 002b:00007fedcbcd0c78 EFLAGS: 00010246 [ 2463.334590][ T7556] RAX: 0000000000000000 RBX: 00007fedcbcd16d4 RCX: 000000000045b349 [ 2463.342626][ T7556] RDX: 0000000000000000 RSI: 0000000000000040 RDI: 0000000020001680 [ 2463.350613][ T7556] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2463.358578][ T7556] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2463.366544][ T7556] R13: 0000000000000071 R14: 00000000004c1bca R15: 000000000075bf2c [ 2463.375289][ T7556] memory: usage 305140kB, limit 307200kB, failcnt 6295 [ 2463.391152][ T7556] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2463.398019][ T7556] Memory cgroup stats for /syz1: [ 2463.398210][ T7556] anon 277016576 [ 2463.398210][ T7556] file 24576 [ 2463.398210][ T7556] kernel_stack 2801664 [ 2463.398210][ T7556] slab 8929280 [ 2463.398210][ T7556] sock 36864 [ 2463.398210][ T7556] shmem 0 [ 2463.398210][ T7556] file_mapped 135168 [ 2463.398210][ T7556] file_dirty 135168 [ 2463.398210][ T7556] file_writeback 0 [ 2463.398210][ T7556] anon_thp 255852544 [ 2463.398210][ T7556] inactive_anon 135168 [ 2463.398210][ T7556] active_anon 277016576 [ 2463.398210][ T7556] inactive_file 0 [ 2463.398210][ T7556] active_file 49152 [ 2463.398210][ T7556] unevictable 0 [ 2463.398210][ T7556] slab_reclaimable 1757184 [ 2463.398210][ T7556] slab_unreclaimable 7172096 [ 2463.398210][ T7556] pgfault 231528 [ 2463.398210][ T7556] pgmajfault 0 [ 2463.398210][ T7556] workingset_refault 0 [ 2463.398210][ T7556] workingset_activate 0 [ 2463.398210][ T7556] workingset_nodereclaim 0 [ 2463.398210][ T7556] pgrefill 223 [ 2463.398210][ T7556] pgscan 23094 [ 2463.398210][ T7556] pgsteal 22610 [ 2463.494326][ T7556] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=27354,uid=0 [ 2463.510197][ T7556] Memory cgroup out of memory: Killed process 27354 (syz-executor.1) total-vm:72848kB, anon-rss:4280kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:1000 [ 2463.538036][ T7397] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2463.548471][ T7397] CPU: 1 PID: 7397 Comm: syz-executor.1 Not tainted 5.5.0-rc1-syzkaller #0 [ 2463.557253][ T7397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2463.567391][ T7397] Call Trace: [ 2463.570715][ T7397] dump_stack+0x11d/0x181 [ 2463.575110][ T7397] dump_header+0xaa/0x39c [ 2463.579446][ T7397] oom_kill_process.cold+0x10/0x15 [ 2463.584560][ T7397] out_of_memory+0x231/0xa60 [ 2463.589165][ T7397] mem_cgroup_out_of_memory+0x128/0x150 [ 2463.594814][ T7397] try_charge+0x800/0xbf0 [ 2463.599188][ T7397] ? rcu_note_context_switch+0x720/0x760 [ 2463.604855][ T7397] mem_cgroup_try_charge+0xd2/0x260 [ 2463.610148][ T7397] mem_cgroup_try_charge_delay+0x3a/0x80 [ 2463.615804][ T7397] wp_page_copy+0x322/0x1040 [ 2463.620429][ T7397] ? __read_once_size+0x41/0xe0 [ 2463.625385][ T7397] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 2463.631336][ T7397] do_wp_page+0x192/0xeb0 [ 2463.635670][ T7397] __handle_mm_fault+0x1d16/0x2e00 [ 2463.640782][ T7397] ? try_to_free_mem_cgroup_pages+0x258/0x4d0 [ 2463.647070][ T7397] handle_mm_fault+0x21b/0x530 [ 2463.651930][ T7397] __do_page_fault+0x456/0x8d0 [ 2463.656768][ T7397] do_page_fault+0x38/0x194 [ 2463.661285][ T7397] page_fault+0x34/0x40 [ 2463.665469][ T7397] RIP: 0033:0x40419e [ 2463.669397][ T7397] Code: 48 dc ff ff 0f 1f 84 00 00 00 00 00 0f b6 b5 84 00 00 00 bf 61 02 4c 00 31 c0 e8 0d dd ff ff e9 30 fe ff ff 8b 0b 48 83 f8 ff <48> 89 45 78 89 8d 80 00 00 00 0f 85 8d fd ff ff 85 c9 0f 85 85 fd [ 2463.689003][ T7397] RSP: 002b:00007fedcbcd0c90 EFLAGS: 00010217 [ 2463.695100][ T7397] RAX: 0000000000002a05 RBX: 00007fedcbcd16d4 RCX: 0000000000000000 [ 2463.703088][ T7397] RDX: 0000000000000001 RSI: 0000000000403ecc RDI: 0000000020001680 [ 2463.711072][ T7397] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2463.719156][ T7397] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2463.727122][ T7397] R13: 0000000000000071 R14: 00000000004c1bca R15: 000000000075bf2c [ 2463.736339][ T7397] memory: usage 302844kB, limit 307200kB, failcnt 6295 [ 2463.743778][ T7397] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2463.750916][ T7397] Memory cgroup stats for /syz1: [ 2463.752757][ T7397] anon 274886656 [ 2463.752757][ T7397] file 24576 [ 2463.752757][ T7397] kernel_stack 2801664 [ 2463.752757][ T7397] slab 8929280 [ 2463.752757][ T7397] sock 36864 [ 2463.752757][ T7397] shmem 0 [ 2463.752757][ T7397] file_mapped 135168 [ 2463.752757][ T7397] file_dirty 135168 [ 2463.752757][ T7397] file_writeback 0 [ 2463.752757][ T7397] anon_thp 253755392 [ 2463.752757][ T7397] inactive_anon 135168 [ 2463.752757][ T7397] active_anon 274886656 [ 2463.752757][ T7397] inactive_file 0 [ 2463.752757][ T7397] active_file 49152 [ 2463.752757][ T7397] unevictable 0 [ 2463.752757][ T7397] slab_reclaimable 1757184 [ 2463.752757][ T7397] slab_unreclaimable 7172096 [ 2463.752757][ T7397] pgfault 231528 [ 2463.752757][ T7397] pgmajfault 0 [ 2463.752757][ T7397] workingset_refault 0 [ 2463.752757][ T7397] workingset_activate 0 [ 2463.752757][ T7397] workingset_nodereclaim 0 [ 2463.752757][ T7397] pgrefill 223 [ 2463.752757][ T7397] pgscan 23094 [ 2463.752757][ T7397] pgsteal 22610 [ 2463.848545][ T7397] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=5990,uid=0 [ 2463.865045][ T7397] Memory cgroup out of memory: Killed process 5990 (syz-executor.1) total-vm:72716kB, anon-rss:4272kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:1000 [ 2463.920206][ C1] net_ratelimit: 18 callbacks suppressed [ 2463.920217][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2463.931680][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2463.937452][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2463.943372][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2464.160220][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2464.166062][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2464.640226][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2464.646046][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2464.800242][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2464.806047][ C0] protocol 88fb is buggy, dev hsr_slave_1 14:25:15 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="020b000007000000000021003f5403620500010001009a934dd520175e3b8f8886264fe600001000e0c99f3d653c00f0ff9da499df0005dc"], 0x38}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x20, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000140), 0x400000000000151, 0x2000000022, &(0x7f00000001c0)={0x77359400}) 14:25:15 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) sendto$inet(r0, &(0x7f0000000400)='s', 0x1, 0x8840, &(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendmmsg(r0, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="7fc61b6d932dbc563145fefc191dbe34ca8e9ecdb27e56bc6ba8809e7cf04caace2b341d936860e16f71d90cf2a63ea103c29cc8aafd0c67226acce150360262eaae8207", 0x44}], 0x1}}], 0x40000a1, 0x0) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f0000001500)=[{0x0}, {&(0x7f0000000440)=""/150, 0x96}], 0x2}}], 0x300, 0x3, 0x0) 14:25:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000140)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:25:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r7, r7, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r8) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r11, r11, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r12, 0x0) r13 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r13, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r14 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r14, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r14, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r7, r8, r11, r12, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r13, r14, 0x5}) getgroups(0x3, &(0x7f00000000c0)=[r12, r4, 0xee00]) r15 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) r16 = socket$inet_tcp(0x2, 0x1, 0x0) r17 = fcntl$dupfd(r15, 0x406, r16) getsockopt$sock_cred(r17, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r18, r18, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r19) r20 = socket$inet_tcp(0x2, 0x1, 0x0) r21 = fcntl$dupfd(r20, 0x0, r20) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r22, r22, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r24 = socket$inet_tcp(0x2, 0x1, 0x0) r25 = fcntl$dupfd(r24, 0x0, r24) getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r26, r26, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27) r28 = socket$inet_tcp(0x2, 0x1, 0x0) r29 = fcntl$dupfd(r28, 0x0, r28) getsockopt$sock_cred(r29, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r30, r30, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r31, 0x0) r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r33 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r33, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r33, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r30, r31, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r32, r33, 0x5}) getgroups(0x3, &(0x7f00000000c0)=[r31, r19, 0xee00]) r34 = socket$inet_tcp(0x2, 0x1, 0x0) r35 = fcntl$dupfd(r34, 0x0, r34) getsockopt$sock_cred(r35, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r37 = socket$inet_tcp(0x2, 0x1, 0x0) r38 = fcntl$dupfd(r37, 0x0, r37) getsockopt$sock_cred(r38, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r39, r39, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r40) r41 = socket$inet_tcp(0x2, 0x1, 0x0) r42 = fcntl$dupfd(r41, 0x0, r41) getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r43, r43, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r44, 0x0) r45 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r46 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r46, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r46, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r39, r40, r43, r44, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r45, r46, 0x5}) setresuid(r36, r36, r39) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r47) socket$inet_tcp(0x2, 0x1, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000380)='/dev/md0\x00', 0x208400, 0x0) r48 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r48, 0x40096102, 0x0) recvmmsg(r48, &(0x7f0000004380)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)=""/110, 0x6e}], 0x1, &(0x7f0000000a80)=""/113, 0x71}, 0x8}, {{&(0x7f0000000b00)=@l2, 0x80, &(0x7f0000002b80)=[{&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/4096, 0x1000}], 0x2, &(0x7f0000002bc0)=""/195, 0xc3}, 0x2}], 0x2, 0x40010121, &(0x7f0000004480)={0x0, 0x1c9c380}) ioctl$ASHMEM_GET_PIN_STATUS(r48, 0x7709, 0x0) syz_open_dev$mice(&(0x7f00000003c0)='/dev/input/mice\x00', 0x0, 0x502001) r49 = socket$nl_generic(0x10, 0x3, 0x10) r50 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r49, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r50, 0x400, 0x8000000, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}}, 0x0) r51 = dup(r49) ioctl$KDADDIO(r51, 0x4b34, 0xffffffffffffffff) r52 = socket$nl_generic(0x10, 0x3, 0x10) r53 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r52, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r53, 0x400, 0x8000000, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}}, 0x0) dup(r52) r54 = fcntl$dupfd(r51, 0x406, r52) getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r55, r55, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r56, 0x0) r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r57, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r36, r47, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5}) r59 = socket$inet_tcp(0x2, 0x1, 0x0) r60 = fcntl$dupfd(r59, 0x0, r59) getsockopt$sock_cred(r60, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r62, r62, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r63) r64 = socket$inet_tcp(0x2, 0x1, 0x0) r65 = fcntl$dupfd(r64, 0x0, r64) getsockopt$sock_cred(r65, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r66, r66, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r67, 0x0) r68 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r68, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r69 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r69, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r69, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r62, r63, r66, r67, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r68, r69, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r47, 0xffffffffffffffff, r67, 0x0, 0xee00]) setregid(r23, r70) r71 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r71, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r33, &(0x7f0000000500), 0x2, &(0x7f0000000280)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r18, r19, r22, r23, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r61, r71, 0x5}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r72) r73 = socket$inet_tcp(0x2, 0x1, 0x0) r74 = fcntl$dupfd(r73, 0x0, r73) getsockopt$sock_cred(r74, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r76 = socket$inet_tcp(0x2, 0x1, 0x0) r77 = fcntl$dupfd(r76, 0x0, r76) getsockopt$sock_cred(r77, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r78, r78, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r79) r80 = socket$inet_tcp(0x2, 0x1, 0x0) r81 = fcntl$dupfd(r80, 0x0, r80) getsockopt$sock_cred(r81, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r82, r82, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r83, 0x0) r84 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r85 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r85, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r85, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r78, r79, r82, r83, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r84, r85, 0x5}) setresuid(r75, r75, r78) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r86) r87 = socket$inet_tcp(0x2, 0x1, 0x0) r88 = fcntl$dupfd(r87, 0x0, r87) getsockopt$sock_cred(r88, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r89, r89, 0x0) stat(&(0x7f00000004c0)='./file1\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r90, 0x0) r91 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r91, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r92 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r92, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r92, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r75, r86, r89, r90, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r91, r92, 0x5}) r93 = socket$inet_tcp(0x2, 0x1, 0x0) r94 = fcntl$dupfd(r93, 0x0, r93) getsockopt$sock_cred(r94, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r95, r95, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r96) r97 = socket$inet_tcp(0x2, 0x1, 0x0) r98 = fcntl$dupfd(r97, 0x0, r97) getsockopt$sock_cred(r98, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r99, r99, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r100, 0x0) r101 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r101, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r102 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r102, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r102, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r95, r96, r99, r100, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r101, r102, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r86, 0xffffffffffffffff, r100, 0x0, 0xee00]) r103 = socket$inet_tcp(0x2, 0x1, 0x0) r104 = fcntl$dupfd(r103, 0x0, r103) getsockopt$sock_cred(r104, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r106 = socket$inet_tcp(0x2, 0x1, 0x0) r107 = fcntl$dupfd(r106, 0x0, r106) getsockopt$sock_cred(r107, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r108, r108, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r109) r110 = socket$inet_tcp(0x2, 0x1, 0x0) r111 = fcntl$dupfd(r110, 0x0, r110) getsockopt$sock_cred(r111, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r112, r112, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r113, 0x0) r114 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r115 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r115, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r115, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r108, r109, r112, r113, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r114, r115, 0x5}) setresuid(r105, r105, r108) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r116) r117 = socket$inet_tcp(0x2, 0x1, 0x0) r118 = fcntl$dupfd(r117, 0x0, r117) getsockopt$sock_cred(r118, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r119, r119, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r120, 0x0) r121 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r121, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r122 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r122, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r122, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r105, r116, r119, r120, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r121, r122, 0x5}) r123 = socket$inet_tcp(0x2, 0x1, 0x0) r124 = fcntl$dupfd(r123, 0x0, r123) getsockopt$sock_cred(r124, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r125, r125, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r126) r127 = socket$inet_tcp(0x2, 0x1, 0x0) r128 = fcntl$dupfd(r127, 0x0, r127) getsockopt$sock_cred(r128, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r129, r129, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r130, 0x0) r131 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r131, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r132 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r132, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r132, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r125, r126, r129, r130, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r131, r132, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r116, 0xffffffffffffffff, r130, 0x0, 0xee00]) getgroups(0x9, &(0x7f00000000c0)=[0xffffffffffffffff, r19, 0xee00, r72, 0xffffffffffffffff, r86, r116, 0xffffffffffffffff, 0xee01]) getresgid(&(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000200)=0x0) r135 = getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r136) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r137) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r138) r139 = socket$inet_tcp(0x2, 0x1, 0x0) r140 = fcntl$dupfd(r139, 0x0, r139) getsockopt$sock_cred(r140, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r141, r141, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r142) r143 = socket$inet_tcp(0x2, 0x1, 0x0) r144 = fcntl$dupfd(r143, 0x0, r143) getsockopt$sock_cred(r144, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r145, r145, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r146, 0x0) r147 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r148 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r148, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r148, &(0x7f0000000580), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r141, r142, r145, r146, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r147, r148, 0x5}) setgroups(0x9, &(0x7f0000000240)=[r12, r133, r134, r135, r136, r137, r138, r146, 0xee00]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:25:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r7, r7, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r8) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r11, r11, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r12, 0x0) r13 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r13, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r14 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r14, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r14, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r7, r8, r11, r12, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r13, r14, 0x5}) getgroups(0x3, &(0x7f00000000c0)=[r12, r4, 0xee00]) r15 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) r16 = socket$inet_tcp(0x2, 0x1, 0x0) r17 = fcntl$dupfd(r15, 0x406, r16) getsockopt$sock_cred(r17, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r18, r18, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r19) r20 = socket$inet_tcp(0x2, 0x1, 0x0) r21 = fcntl$dupfd(r20, 0x0, r20) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r22, r22, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r24 = socket$inet_tcp(0x2, 0x1, 0x0) r25 = fcntl$dupfd(r24, 0x0, r24) getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r26, r26, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27) r28 = socket$inet_tcp(0x2, 0x1, 0x0) r29 = fcntl$dupfd(r28, 0x0, r28) getsockopt$sock_cred(r29, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r30, r30, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r31, 0x0) r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r33 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r33, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r33, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r30, r31, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r32, r33, 0x5}) getgroups(0x3, &(0x7f00000000c0)=[r31, r19, 0xee00]) r34 = socket$inet_tcp(0x2, 0x1, 0x0) r35 = fcntl$dupfd(r34, 0x0, r34) getsockopt$sock_cred(r35, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r37 = socket$inet_tcp(0x2, 0x1, 0x0) r38 = fcntl$dupfd(r37, 0x0, r37) getsockopt$sock_cred(r38, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r39, r39, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r40) r41 = socket$inet_tcp(0x2, 0x1, 0x0) r42 = fcntl$dupfd(r41, 0x0, r41) getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r43, r43, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r44, 0x0) r45 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r46 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r46, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r46, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r39, r40, r43, r44, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r45, r46, 0x5}) setresuid(r36, r36, r39) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r47) socket$inet_tcp(0x2, 0x1, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000380)='/dev/md0\x00', 0x208400, 0x0) r48 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r48, 0x40096102, 0x0) recvmmsg(r48, &(0x7f0000004380)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)=""/110, 0x6e}], 0x1, &(0x7f0000000a80)=""/113, 0x71}, 0x8}, {{&(0x7f0000000b00)=@l2, 0x80, &(0x7f0000002b80)=[{&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/4096, 0x1000}], 0x2, &(0x7f0000002bc0)=""/195, 0xc3}, 0x2}], 0x2, 0x40010121, &(0x7f0000004480)={0x0, 0x1c9c380}) ioctl$ASHMEM_GET_PIN_STATUS(r48, 0x7709, 0x0) syz_open_dev$mice(&(0x7f00000003c0)='/dev/input/mice\x00', 0x0, 0x502001) r49 = socket$nl_generic(0x10, 0x3, 0x10) r50 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r49, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r50, 0x400, 0x8000000, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}}, 0x0) r51 = dup(r49) ioctl$KDADDIO(r51, 0x4b34, 0xffffffffffffffff) r52 = socket$nl_generic(0x10, 0x3, 0x10) r53 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r52, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r53, 0x400, 0x8000000, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}}, 0x0) dup(r52) r54 = fcntl$dupfd(r51, 0x406, r52) getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r55, r55, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r56, 0x0) r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r57, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r36, r47, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5}) r59 = socket$inet_tcp(0x2, 0x1, 0x0) r60 = fcntl$dupfd(r59, 0x0, r59) getsockopt$sock_cred(r60, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r62, r62, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r63) r64 = socket$inet_tcp(0x2, 0x1, 0x0) r65 = fcntl$dupfd(r64, 0x0, r64) getsockopt$sock_cred(r65, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r66, r66, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r67, 0x0) r68 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r68, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r69 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r69, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r69, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r62, r63, r66, r67, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r68, r69, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r47, 0xffffffffffffffff, r67, 0x0, 0xee00]) setregid(r23, r70) r71 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r71, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r33, &(0x7f0000000500), 0x2, &(0x7f0000000280)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r18, r19, r22, r23, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r61, r71, 0x5}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r72) r73 = socket$inet_tcp(0x2, 0x1, 0x0) r74 = fcntl$dupfd(r73, 0x0, r73) getsockopt$sock_cred(r74, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r76 = socket$inet_tcp(0x2, 0x1, 0x0) r77 = fcntl$dupfd(r76, 0x0, r76) getsockopt$sock_cred(r77, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r78, r78, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r79) r80 = socket$inet_tcp(0x2, 0x1, 0x0) r81 = fcntl$dupfd(r80, 0x0, r80) getsockopt$sock_cred(r81, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r82, r82, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r83, 0x0) r84 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r85 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r85, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r85, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r78, r79, r82, r83, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r84, r85, 0x5}) setresuid(r75, r75, r78) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r86) r87 = socket$inet_tcp(0x2, 0x1, 0x0) r88 = fcntl$dupfd(r87, 0x0, r87) getsockopt$sock_cred(r88, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r89, r89, 0x0) stat(&(0x7f00000004c0)='./file1\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r90, 0x0) r91 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r91, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r92 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r92, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r92, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r75, r86, r89, r90, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r91, r92, 0x5}) r93 = socket$inet_tcp(0x2, 0x1, 0x0) r94 = fcntl$dupfd(r93, 0x0, r93) getsockopt$sock_cred(r94, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r95, r95, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r96) r97 = socket$inet_tcp(0x2, 0x1, 0x0) r98 = fcntl$dupfd(r97, 0x0, r97) getsockopt$sock_cred(r98, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r99, r99, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r100, 0x0) r101 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r101, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r102 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r102, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r102, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r95, r96, r99, r100, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r101, r102, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r86, 0xffffffffffffffff, r100, 0x0, 0xee00]) r103 = socket$inet_tcp(0x2, 0x1, 0x0) r104 = fcntl$dupfd(r103, 0x0, r103) getsockopt$sock_cred(r104, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r106 = socket$inet_tcp(0x2, 0x1, 0x0) r107 = fcntl$dupfd(r106, 0x0, r106) getsockopt$sock_cred(r107, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r108, r108, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r109) r110 = socket$inet_tcp(0x2, 0x1, 0x0) r111 = fcntl$dupfd(r110, 0x0, r110) getsockopt$sock_cred(r111, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r112, r112, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r113, 0x0) r114 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r115 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r115, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r115, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r108, r109, r112, r113, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r114, r115, 0x5}) setresuid(r105, r105, r108) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r116) r117 = socket$inet_tcp(0x2, 0x1, 0x0) r118 = fcntl$dupfd(r117, 0x0, r117) getsockopt$sock_cred(r118, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r119, r119, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r120, 0x0) r121 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r121, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r122 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r122, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r122, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r105, r116, r119, r120, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r121, r122, 0x5}) r123 = socket$inet_tcp(0x2, 0x1, 0x0) r124 = fcntl$dupfd(r123, 0x0, r123) getsockopt$sock_cred(r124, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r125, r125, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r126) r127 = socket$inet_tcp(0x2, 0x1, 0x0) r128 = fcntl$dupfd(r127, 0x0, r127) getsockopt$sock_cred(r128, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r129, r129, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r130, 0x0) r131 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r131, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r132 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r132, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r132, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r125, r126, r129, r130, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r131, r132, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r116, 0xffffffffffffffff, r130, 0x0, 0xee00]) getgroups(0x9, &(0x7f00000000c0)=[0xffffffffffffffff, r19, 0xee00, r72, 0xffffffffffffffff, r86, r116, 0xffffffffffffffff, 0xee01]) getresgid(&(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000200)=0x0) r135 = getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r136) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r137) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r138) r139 = socket$inet_tcp(0x2, 0x1, 0x0) r140 = fcntl$dupfd(r139, 0x0, r139) getsockopt$sock_cred(r140, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r141, r141, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r142) r143 = socket$inet_tcp(0x2, 0x1, 0x0) r144 = fcntl$dupfd(r143, 0x0, r143) getsockopt$sock_cred(r144, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r145, r145, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r146, 0x0) r147 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r148 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r148, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r148, &(0x7f0000000580), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r141, r142, r145, r146, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r147, r148, 0x5}) setgroups(0x9, &(0x7f0000000240)=[r12, r133, r134, r135, r136, r137, r138, r146, 0xee00]) 14:25:15 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r7, r7, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r8) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r11, r11, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r12, 0x0) r13 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r13, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r14 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r14, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r14, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r7, r8, r11, r12, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r13, r14, 0x5}) getgroups(0x3, &(0x7f00000000c0)=[r12, r4, 0xee00]) r15 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) r16 = socket$inet_tcp(0x2, 0x1, 0x0) r17 = fcntl$dupfd(r15, 0x406, r16) getsockopt$sock_cred(r17, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r18, r18, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r19) r20 = socket$inet_tcp(0x2, 0x1, 0x0) r21 = fcntl$dupfd(r20, 0x0, r20) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r22, r22, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r24 = socket$inet_tcp(0x2, 0x1, 0x0) r25 = fcntl$dupfd(r24, 0x0, r24) getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r26, r26, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27) r28 = socket$inet_tcp(0x2, 0x1, 0x0) r29 = fcntl$dupfd(r28, 0x0, r28) getsockopt$sock_cred(r29, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r30, r30, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r31, 0x0) r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r33 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r33, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r33, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r30, r31, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r32, r33, 0x5}) getgroups(0x3, &(0x7f00000000c0)=[r31, r19, 0xee00]) r34 = socket$inet_tcp(0x2, 0x1, 0x0) r35 = fcntl$dupfd(r34, 0x0, r34) getsockopt$sock_cred(r35, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r37 = socket$inet_tcp(0x2, 0x1, 0x0) r38 = fcntl$dupfd(r37, 0x0, r37) getsockopt$sock_cred(r38, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r39, r39, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r40) r41 = socket$inet_tcp(0x2, 0x1, 0x0) r42 = fcntl$dupfd(r41, 0x0, r41) getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r43, r43, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r44, 0x0) r45 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r46 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r46, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r46, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r39, r40, r43, r44, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r45, r46, 0x5}) setresuid(r36, r36, r39) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r47) socket$inet_tcp(0x2, 0x1, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000380)='/dev/md0\x00', 0x208400, 0x0) r48 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r48, 0x40096102, 0x0) recvmmsg(r48, &(0x7f0000004380)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)=""/110, 0x6e}], 0x1, &(0x7f0000000a80)=""/113, 0x71}, 0x8}, {{&(0x7f0000000b00)=@l2, 0x80, &(0x7f0000002b80)=[{&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/4096, 0x1000}], 0x2, &(0x7f0000002bc0)=""/195, 0xc3}, 0x2}], 0x2, 0x40010121, &(0x7f0000004480)={0x0, 0x1c9c380}) ioctl$ASHMEM_GET_PIN_STATUS(r48, 0x7709, 0x0) syz_open_dev$mice(&(0x7f00000003c0)='/dev/input/mice\x00', 0x0, 0x502001) r49 = socket$nl_generic(0x10, 0x3, 0x10) r50 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r49, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r50, 0x400, 0x8000000, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}}, 0x0) r51 = dup(r49) ioctl$KDADDIO(r51, 0x4b34, 0xffffffffffffffff) r52 = socket$nl_generic(0x10, 0x3, 0x10) r53 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r52, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r53, 0x400, 0x8000000, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}}, 0x0) dup(r52) r54 = fcntl$dupfd(r51, 0x406, r52) getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r55, r55, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r56, 0x0) r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r57, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r36, r47, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5}) r59 = socket$inet_tcp(0x2, 0x1, 0x0) r60 = fcntl$dupfd(r59, 0x0, r59) getsockopt$sock_cred(r60, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r62, r62, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r63) r64 = socket$inet_tcp(0x2, 0x1, 0x0) r65 = fcntl$dupfd(r64, 0x0, r64) getsockopt$sock_cred(r65, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r66, r66, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r67, 0x0) r68 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r68, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r69 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r69, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r69, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r62, r63, r66, r67, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r68, r69, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r47, 0xffffffffffffffff, r67, 0x0, 0xee00]) setregid(r23, r70) r71 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r71, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r33, &(0x7f0000000500), 0x2, &(0x7f0000000280)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r18, r19, r22, r23, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r61, r71, 0x5}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r72) r73 = socket$inet_tcp(0x2, 0x1, 0x0) r74 = fcntl$dupfd(r73, 0x0, r73) getsockopt$sock_cred(r74, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r76 = socket$inet_tcp(0x2, 0x1, 0x0) r77 = fcntl$dupfd(r76, 0x0, r76) getsockopt$sock_cred(r77, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r78, r78, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r79) r80 = socket$inet_tcp(0x2, 0x1, 0x0) r81 = fcntl$dupfd(r80, 0x0, r80) getsockopt$sock_cred(r81, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r82, r82, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r83, 0x0) r84 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r85 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r85, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r85, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r78, r79, r82, r83, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r84, r85, 0x5}) setresuid(r75, r75, r78) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r86) r87 = socket$inet_tcp(0x2, 0x1, 0x0) r88 = fcntl$dupfd(r87, 0x0, r87) getsockopt$sock_cred(r88, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r89, r89, 0x0) stat(&(0x7f00000004c0)='./file1\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r90, 0x0) r91 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r91, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r92 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r92, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r92, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r75, r86, r89, r90, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r91, r92, 0x5}) r93 = socket$inet_tcp(0x2, 0x1, 0x0) r94 = fcntl$dupfd(r93, 0x0, r93) getsockopt$sock_cred(r94, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r95, r95, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r96) r97 = socket$inet_tcp(0x2, 0x1, 0x0) r98 = fcntl$dupfd(r97, 0x0, r97) getsockopt$sock_cred(r98, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r99, r99, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r100, 0x0) r101 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r101, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r102 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r102, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r102, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r95, r96, r99, r100, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r101, r102, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r86, 0xffffffffffffffff, r100, 0x0, 0xee00]) r103 = socket$inet_tcp(0x2, 0x1, 0x0) r104 = fcntl$dupfd(r103, 0x0, r103) getsockopt$sock_cred(r104, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r106 = socket$inet_tcp(0x2, 0x1, 0x0) r107 = fcntl$dupfd(r106, 0x0, r106) getsockopt$sock_cred(r107, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r108, r108, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r109) r110 = socket$inet_tcp(0x2, 0x1, 0x0) r111 = fcntl$dupfd(r110, 0x0, r110) getsockopt$sock_cred(r111, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r112, r112, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r113, 0x0) r114 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r115 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r115, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r115, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r108, r109, r112, r113, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r114, r115, 0x5}) setresuid(r105, r105, r108) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r116) r117 = socket$inet_tcp(0x2, 0x1, 0x0) r118 = fcntl$dupfd(r117, 0x0, r117) getsockopt$sock_cred(r118, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r119, r119, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r120, 0x0) r121 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r121, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r122 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r122, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r122, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r105, r116, r119, r120, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r121, r122, 0x5}) r123 = socket$inet_tcp(0x2, 0x1, 0x0) r124 = fcntl$dupfd(r123, 0x0, r123) getsockopt$sock_cred(r124, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r125, r125, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r126) r127 = socket$inet_tcp(0x2, 0x1, 0x0) r128 = fcntl$dupfd(r127, 0x0, r127) getsockopt$sock_cred(r128, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r129, r129, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r130, 0x0) r131 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r131, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r132 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r132, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r132, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r125, r126, r129, r130, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r131, r132, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r116, 0xffffffffffffffff, r130, 0x0, 0xee00]) getgroups(0x9, &(0x7f00000000c0)=[0xffffffffffffffff, r19, 0xee00, r72, 0xffffffffffffffff, r86, r116, 0xffffffffffffffff, 0xee01]) getresgid(&(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000200)) getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r133) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r134) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r135) r136 = socket$inet_tcp(0x2, 0x1, 0x0) r137 = fcntl$dupfd(r136, 0x0, r136) getsockopt$sock_cred(r137, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r138, r138, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r139) r140 = socket$inet_tcp(0x2, 0x1, 0x0) r141 = fcntl$dupfd(r140, 0x0, r140) getsockopt$sock_cred(r141, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r142, r142, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r143, 0x0) r144 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r145 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r145, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r145, &(0x7f0000000580), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r138, r139, r142, r143, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r144, r145, 0x5}) perf_event_open(&(0x7f0000000000)={0x2, 0xfffffffffffffdb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext={0x9}, 0x12ce9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:25:16 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="020b000007000000000021003f5403620500010001009a934dd520175e3b8f8886264fe600001000e0c99f3d653c00f0ff9da499df0005dc"], 0x38}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x20, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2000000022, &(0x7f00000001c0)={0x77359400}) 14:25:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r7, r7, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r8) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r11, r11, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r12, 0x0) r13 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r13, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r14 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r14, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r14, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r7, r8, r11, r12, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r13, r14, 0x5}) getgroups(0x3, &(0x7f00000000c0)=[r12, r4, 0xee00]) r15 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) r16 = socket$inet_tcp(0x2, 0x1, 0x0) r17 = fcntl$dupfd(r15, 0x406, r16) getsockopt$sock_cred(r17, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r18, r18, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r19) r20 = socket$inet_tcp(0x2, 0x1, 0x0) r21 = fcntl$dupfd(r20, 0x0, r20) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r22, r22, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r24 = socket$inet_tcp(0x2, 0x1, 0x0) r25 = fcntl$dupfd(r24, 0x0, r24) getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r26, r26, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27) r28 = socket$inet_tcp(0x2, 0x1, 0x0) r29 = fcntl$dupfd(r28, 0x0, r28) getsockopt$sock_cred(r29, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r30, r30, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r31, 0x0) r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r33 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r33, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r33, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r30, r31, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r32, r33, 0x5}) getgroups(0x3, &(0x7f00000000c0)=[r31, r19, 0xee00]) r34 = socket$inet_tcp(0x2, 0x1, 0x0) r35 = fcntl$dupfd(r34, 0x0, r34) getsockopt$sock_cred(r35, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r37 = socket$inet_tcp(0x2, 0x1, 0x0) r38 = fcntl$dupfd(r37, 0x0, r37) getsockopt$sock_cred(r38, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r39, r39, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r40) r41 = socket$inet_tcp(0x2, 0x1, 0x0) r42 = fcntl$dupfd(r41, 0x0, r41) getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r43, r43, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r44, 0x0) r45 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r46 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r46, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r46, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r39, r40, r43, r44, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r45, r46, 0x5}) setresuid(r36, r36, r39) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r47) socket$inet_tcp(0x2, 0x1, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000380)='/dev/md0\x00', 0x208400, 0x0) r48 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r48, 0x40096102, 0x0) recvmmsg(r48, &(0x7f0000004380)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)=""/110, 0x6e}], 0x1, &(0x7f0000000a80)=""/113, 0x71}, 0x8}, {{&(0x7f0000000b00)=@l2, 0x80, &(0x7f0000002b80)=[{&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/4096, 0x1000}], 0x2, &(0x7f0000002bc0)=""/195, 0xc3}, 0x2}], 0x2, 0x40010121, &(0x7f0000004480)={0x0, 0x1c9c380}) ioctl$ASHMEM_GET_PIN_STATUS(r48, 0x7709, 0x0) syz_open_dev$mice(&(0x7f00000003c0)='/dev/input/mice\x00', 0x0, 0x502001) r49 = socket$nl_generic(0x10, 0x3, 0x10) r50 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r49, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r50, 0x400, 0x8000000, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}}, 0x0) r51 = dup(r49) ioctl$KDADDIO(r51, 0x4b34, 0xffffffffffffffff) r52 = socket$nl_generic(0x10, 0x3, 0x10) r53 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r52, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r53, 0x400, 0x8000000, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}}, 0x0) dup(r52) r54 = fcntl$dupfd(r51, 0x406, r52) getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r55, r55, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r56, 0x0) r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r57, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r36, r47, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5}) r59 = socket$inet_tcp(0x2, 0x1, 0x0) r60 = fcntl$dupfd(r59, 0x0, r59) getsockopt$sock_cred(r60, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r62, r62, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r63) r64 = socket$inet_tcp(0x2, 0x1, 0x0) r65 = fcntl$dupfd(r64, 0x0, r64) getsockopt$sock_cred(r65, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r66, r66, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r67, 0x0) r68 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r68, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r69 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r69, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r69, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r62, r63, r66, r67, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r68, r69, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r47, 0xffffffffffffffff, r67, 0x0, 0xee00]) setregid(r23, r70) r71 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r71, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r33, &(0x7f0000000500), 0x2, &(0x7f0000000280)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r18, r19, r22, r23, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r61, r71, 0x5}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r72) r73 = socket$inet_tcp(0x2, 0x1, 0x0) r74 = fcntl$dupfd(r73, 0x0, r73) getsockopt$sock_cred(r74, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r76 = socket$inet_tcp(0x2, 0x1, 0x0) r77 = fcntl$dupfd(r76, 0x0, r76) getsockopt$sock_cred(r77, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r78, r78, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r79) r80 = socket$inet_tcp(0x2, 0x1, 0x0) r81 = fcntl$dupfd(r80, 0x0, r80) getsockopt$sock_cred(r81, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r82, r82, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r83, 0x0) r84 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r85 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r85, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r85, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r78, r79, r82, r83, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r84, r85, 0x5}) setresuid(r75, r75, r78) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r86) r87 = socket$inet_tcp(0x2, 0x1, 0x0) r88 = fcntl$dupfd(r87, 0x0, r87) getsockopt$sock_cred(r88, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r89, r89, 0x0) stat(&(0x7f00000004c0)='./file1\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r90, 0x0) r91 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r91, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r92 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r92, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r92, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r75, r86, r89, r90, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r91, r92, 0x5}) r93 = socket$inet_tcp(0x2, 0x1, 0x0) r94 = fcntl$dupfd(r93, 0x0, r93) getsockopt$sock_cred(r94, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r95, r95, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r96) r97 = socket$inet_tcp(0x2, 0x1, 0x0) r98 = fcntl$dupfd(r97, 0x0, r97) getsockopt$sock_cred(r98, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r99, r99, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r100, 0x0) r101 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r101, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r102 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r102, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r102, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r95, r96, r99, r100, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r101, r102, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r86, 0xffffffffffffffff, r100, 0x0, 0xee00]) r103 = socket$inet_tcp(0x2, 0x1, 0x0) r104 = fcntl$dupfd(r103, 0x0, r103) getsockopt$sock_cred(r104, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r106 = socket$inet_tcp(0x2, 0x1, 0x0) r107 = fcntl$dupfd(r106, 0x0, r106) getsockopt$sock_cred(r107, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r108, r108, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r109) r110 = socket$inet_tcp(0x2, 0x1, 0x0) r111 = fcntl$dupfd(r110, 0x0, r110) getsockopt$sock_cred(r111, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r112, r112, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r113, 0x0) r114 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r115 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r115, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r115, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r108, r109, r112, r113, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r114, r115, 0x5}) setresuid(r105, r105, r108) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r116) r117 = socket$inet_tcp(0x2, 0x1, 0x0) r118 = fcntl$dupfd(r117, 0x0, r117) getsockopt$sock_cred(r118, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r119, r119, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r120, 0x0) r121 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r121, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r122 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r122, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r122, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r105, r116, r119, r120, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r121, r122, 0x5}) r123 = socket$inet_tcp(0x2, 0x1, 0x0) r124 = fcntl$dupfd(r123, 0x0, r123) getsockopt$sock_cred(r124, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r125, r125, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r126) r127 = socket$inet_tcp(0x2, 0x1, 0x0) r128 = fcntl$dupfd(r127, 0x0, r127) getsockopt$sock_cred(r128, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r129, r129, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r130, 0x0) r131 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r131, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r132 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r132, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r132, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r125, r126, r129, r130, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r131, r132, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r116, 0xffffffffffffffff, r130, 0x0, 0xee00]) getgroups(0x9, &(0x7f00000000c0)=[0xffffffffffffffff, r19, 0xee00, r72, 0xffffffffffffffff, r86, r116, 0xffffffffffffffff, 0xee01]) getresgid(&(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000200)) getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r133) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r134) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r135) r136 = socket$inet_tcp(0x2, 0x1, 0x0) r137 = fcntl$dupfd(r136, 0x0, r136) getsockopt$sock_cred(r137, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r138, r138, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r139) r140 = socket$inet_tcp(0x2, 0x1, 0x0) r141 = fcntl$dupfd(r140, 0x0, r140) getsockopt$sock_cred(r141, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r142, r142, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r143, 0x0) r144 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r145 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r145, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r145, &(0x7f0000000580), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r138, r139, r142, r143, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r144, r145, 0x5}) perf_event_open(&(0x7f0000000000)={0x2, 0xfffffffffffffdb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext={0x9}, 0x12ce9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2465.674664][ T7704] syz-executor.2 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 14:25:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000140)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2465.767025][ T7704] CPU: 0 PID: 7704 Comm: syz-executor.2 Not tainted 5.5.0-rc1-syzkaller #0 [ 2465.775649][ T7704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2465.785712][ T7704] Call Trace: [ 2465.789016][ T7704] dump_stack+0x11d/0x181 [ 2465.793368][ T7704] dump_header+0xaa/0x39c [ 2465.797741][ T7704] oom_kill_process.cold+0x10/0x15 [ 2465.802907][ T7704] out_of_memory+0x231/0xa60 [ 2465.807513][ T7704] ? __rcu_read_unlock+0x66/0x3d0 [ 2465.812691][ T7704] mem_cgroup_out_of_memory+0x128/0x150 [ 2465.818245][ T7704] try_charge+0xb6c/0xbf0 [ 2465.822748][ T7704] ? __rcu_read_unlock+0x66/0x3d0 [ 2465.827909][ T7704] __memcg_kmem_charge_memcg+0x4a/0xe0 [ 2465.833381][ T7704] __memcg_kmem_charge+0xcf/0x1b0 [ 2465.838417][ T7704] __alloc_pages_nodemask+0x26c/0x310 [ 2465.843842][ T7704] alloc_pages_current+0xd1/0x170 [ 2465.848942][ T7704] pte_alloc_one+0x18/0x50 [ 2465.853365][ T7704] __pte_alloc+0x2d/0x220 [ 2465.857733][ T7704] copy_page_range+0x135a/0x19b0 [ 2465.862729][ T7704] ? __vma_link_rb+0x3f4/0x440 14:25:16 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) sendto$inet(r0, &(0x7f0000000400)='s', 0x1, 0x8840, &(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendmmsg(r0, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="7fc61b6d932dbc563145fefc191dbe34ca8e9ecdb27e56bc6ba8809e7cf04caace2b341d936860e16f71d90cf2a63ea103c29cc8aafd0c67226acce150360262eaae8207", 0x44}], 0x1}}], 0x40000a1, 0x0) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f0000001500)=[{0x0}, {&(0x7f0000000440)=""/150, 0x96}], 0x2}}], 0x300, 0x3, 0x0) [ 2465.867517][ T7704] dup_mm+0x74a/0xba0 [ 2465.871522][ T7704] copy_process+0x3138/0x3c40 [ 2465.876338][ T7704] ? __write_once_size+0x41/0xe0 [ 2465.881391][ T7704] _do_fork+0xfe/0x7a0 [ 2465.885497][ T7704] __do_sys_clone3+0x1bd/0x260 [ 2465.890290][ T7704] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 2465.896022][ T7704] ? _copy_to_user+0x84/0xb0 [ 2465.900635][ T7704] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2465.906915][ T7704] ? put_timespec64+0x94/0xc0 [ 2465.911616][ T7704] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2465.918056][ T7704] __x64_sys_clone3+0x3a/0x50 [ 2465.922750][ T7704] do_syscall_64+0xcc/0x3a0 [ 2465.927275][ T7704] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2465.933170][ T7704] RIP: 0033:0x45b349 [ 2465.937140][ T7704] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2465.956760][ T7704] RSP: 002b:00007f96d7fa3c78 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2465.965228][ T7704] RAX: ffffffffffffffda RBX: 00007f96d7fa46d4 RCX: 000000000045b349 [ 2465.973226][ T7704] RDX: 0000000000000000 RSI: 0000000000000040 RDI: 0000000020001680 [ 2465.981210][ T7704] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 2465.989191][ T7704] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2465.997279][ T7704] R13: 0000000000000071 R14: 00000000004c1bca R15: 000000000075bfd4 14:25:16 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="020b000007000000000021003f5403620500010001009a934dd520175e3b8f8886264fe600001000e0c99f3d653c00f0ff9da499df0005dc"], 0x38}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x20, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2000000022, &(0x7f00000001c0)={0x77359400}) [ 2466.083200][ T7704] memory: usage 307200kB, limit 307200kB, failcnt 137 [ 2466.118971][ T7704] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2466.183502][ T7704] Memory cgroup stats for /syz2: [ 2466.183729][ T7704] anon 284680192 [ 2466.183729][ T7704] file 40960 [ 2466.183729][ T7704] kernel_stack 2064384 [ 2466.183729][ T7704] slab 8364032 [ 2466.183729][ T7704] sock 172032 [ 2466.183729][ T7704] shmem 69632 [ 2466.183729][ T7704] file_mapped 0 [ 2466.183729][ T7704] file_dirty 0 [ 2466.183729][ T7704] file_writeback 0 [ 2466.183729][ T7704] anon_thp 272629760 [ 2466.183729][ T7704] inactive_anon 176128 [ 2466.183729][ T7704] active_anon 284688384 [ 2466.183729][ T7704] inactive_file 0 14:25:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000140)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2466.183729][ T7704] active_file 94208 [ 2466.183729][ T7704] unevictable 36864 [ 2466.183729][ T7704] slab_reclaimable 1216512 [ 2466.183729][ T7704] slab_unreclaimable 7147520 [ 2466.183729][ T7704] pgfault 252252 [ 2466.183729][ T7704] pgmajfault 0 [ 2466.183729][ T7704] workingset_refault 0 [ 2466.183729][ T7704] workingset_activate 0 [ 2466.183729][ T7704] workingset_nodereclaim 0 [ 2466.183729][ T7704] pgrefill 206 [ 2466.183729][ T7704] pgscan 173 [ 2466.183729][ T7704] pgsteal 36 14:25:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r7, r7, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r8) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r11, r11, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r12, 0x0) r13 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r13, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r14 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r14, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r14, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r7, r8, r11, r12, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r13, r14, 0x5}) getgroups(0x3, &(0x7f00000000c0)=[r12, r4, 0xee00]) r15 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) r16 = socket$inet_tcp(0x2, 0x1, 0x0) r17 = fcntl$dupfd(r15, 0x406, r16) getsockopt$sock_cred(r17, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r18, r18, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r19) r20 = socket$inet_tcp(0x2, 0x1, 0x0) r21 = fcntl$dupfd(r20, 0x0, r20) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r22, r22, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r24 = socket$inet_tcp(0x2, 0x1, 0x0) r25 = fcntl$dupfd(r24, 0x0, r24) getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r26, r26, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27) r28 = socket$inet_tcp(0x2, 0x1, 0x0) r29 = fcntl$dupfd(r28, 0x0, r28) getsockopt$sock_cred(r29, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r30, r30, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r31, 0x0) r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r33 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r33, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r33, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r30, r31, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r32, r33, 0x5}) getgroups(0x3, &(0x7f00000000c0)=[r31, r19, 0xee00]) r34 = socket$inet_tcp(0x2, 0x1, 0x0) r35 = fcntl$dupfd(r34, 0x0, r34) getsockopt$sock_cred(r35, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r37 = socket$inet_tcp(0x2, 0x1, 0x0) r38 = fcntl$dupfd(r37, 0x0, r37) getsockopt$sock_cred(r38, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r39, r39, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r40) r41 = socket$inet_tcp(0x2, 0x1, 0x0) r42 = fcntl$dupfd(r41, 0x0, r41) getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r43, r43, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r44, 0x0) r45 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r46 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r46, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r46, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r39, r40, r43, r44, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r45, r46, 0x5}) setresuid(r36, r36, r39) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r47) socket$inet_tcp(0x2, 0x1, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000380)='/dev/md0\x00', 0x208400, 0x0) r48 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r48, 0x40096102, 0x0) recvmmsg(r48, &(0x7f0000004380)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)=""/110, 0x6e}], 0x1, &(0x7f0000000a80)=""/113, 0x71}, 0x8}, {{&(0x7f0000000b00)=@l2, 0x80, &(0x7f0000002b80)=[{&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/4096, 0x1000}], 0x2, &(0x7f0000002bc0)=""/195, 0xc3}, 0x2}], 0x2, 0x40010121, &(0x7f0000004480)={0x0, 0x1c9c380}) ioctl$ASHMEM_GET_PIN_STATUS(r48, 0x7709, 0x0) syz_open_dev$mice(&(0x7f00000003c0)='/dev/input/mice\x00', 0x0, 0x502001) r49 = socket$nl_generic(0x10, 0x3, 0x10) r50 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r49, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r50, 0x400, 0x8000000, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}}, 0x0) r51 = dup(r49) ioctl$KDADDIO(r51, 0x4b34, 0xffffffffffffffff) r52 = socket$nl_generic(0x10, 0x3, 0x10) r53 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r52, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r53, 0x400, 0x8000000, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}}, 0x0) dup(r52) r54 = fcntl$dupfd(r51, 0x406, r52) getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r55, r55, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r56, 0x0) r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r57, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r36, r47, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5}) r59 = socket$inet_tcp(0x2, 0x1, 0x0) r60 = fcntl$dupfd(r59, 0x0, r59) getsockopt$sock_cred(r60, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r62, r62, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r63) r64 = socket$inet_tcp(0x2, 0x1, 0x0) r65 = fcntl$dupfd(r64, 0x0, r64) getsockopt$sock_cred(r65, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r66, r66, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r67, 0x0) r68 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r68, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r69 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r69, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r69, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r62, r63, r66, r67, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r68, r69, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r47, 0xffffffffffffffff, r67, 0x0, 0xee00]) setregid(r23, r70) r71 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r71, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r33, &(0x7f0000000500), 0x2, &(0x7f0000000280)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r18, r19, r22, r23, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r61, r71, 0x5}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r72) r73 = socket$inet_tcp(0x2, 0x1, 0x0) r74 = fcntl$dupfd(r73, 0x0, r73) getsockopt$sock_cred(r74, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r76 = socket$inet_tcp(0x2, 0x1, 0x0) r77 = fcntl$dupfd(r76, 0x0, r76) getsockopt$sock_cred(r77, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r78, r78, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r79) r80 = socket$inet_tcp(0x2, 0x1, 0x0) r81 = fcntl$dupfd(r80, 0x0, r80) getsockopt$sock_cred(r81, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r82, r82, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r83, 0x0) r84 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r85 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r85, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r85, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r78, r79, r82, r83, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r84, r85, 0x5}) setresuid(r75, r75, r78) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r86) r87 = socket$inet_tcp(0x2, 0x1, 0x0) r88 = fcntl$dupfd(r87, 0x0, r87) getsockopt$sock_cred(r88, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r89, r89, 0x0) stat(&(0x7f00000004c0)='./file1\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r90, 0x0) r91 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r91, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r92 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r92, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r92, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r75, r86, r89, r90, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r91, r92, 0x5}) r93 = socket$inet_tcp(0x2, 0x1, 0x0) r94 = fcntl$dupfd(r93, 0x0, r93) getsockopt$sock_cred(r94, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r95, r95, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r96) r97 = socket$inet_tcp(0x2, 0x1, 0x0) r98 = fcntl$dupfd(r97, 0x0, r97) getsockopt$sock_cred(r98, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r99, r99, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r100, 0x0) r101 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r101, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r102 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r102, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r102, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r95, r96, r99, r100, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r101, r102, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r86, 0xffffffffffffffff, r100, 0x0, 0xee00]) r103 = socket$inet_tcp(0x2, 0x1, 0x0) r104 = fcntl$dupfd(r103, 0x0, r103) getsockopt$sock_cred(r104, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r106 = socket$inet_tcp(0x2, 0x1, 0x0) r107 = fcntl$dupfd(r106, 0x0, r106) getsockopt$sock_cred(r107, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r108, r108, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r109) r110 = socket$inet_tcp(0x2, 0x1, 0x0) r111 = fcntl$dupfd(r110, 0x0, r110) getsockopt$sock_cred(r111, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r112, r112, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r113, 0x0) r114 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r115 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r115, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r115, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r108, r109, r112, r113, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r114, r115, 0x5}) setresuid(r105, r105, r108) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r116) r117 = socket$inet_tcp(0x2, 0x1, 0x0) r118 = fcntl$dupfd(r117, 0x0, r117) getsockopt$sock_cred(r118, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r119, r119, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r120, 0x0) r121 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r121, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r122 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r122, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r122, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r105, r116, r119, r120, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r121, r122, 0x5}) r123 = socket$inet_tcp(0x2, 0x1, 0x0) r124 = fcntl$dupfd(r123, 0x0, r123) getsockopt$sock_cred(r124, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r125, r125, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r126) r127 = socket$inet_tcp(0x2, 0x1, 0x0) r128 = fcntl$dupfd(r127, 0x0, r127) getsockopt$sock_cred(r128, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r129, r129, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r130, 0x0) r131 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r131, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r132 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r132, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r132, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r125, r126, r129, r130, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r131, r132, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r116, 0xffffffffffffffff, r130, 0x0, 0xee00]) getgroups(0x9, &(0x7f00000000c0)=[0xffffffffffffffff, r19, 0xee00, r72, 0xffffffffffffffff, r86, r116, 0xffffffffffffffff, 0xee01]) getresgid(&(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000200)) getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r133) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r134) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r135) r136 = socket$inet_tcp(0x2, 0x1, 0x0) r137 = fcntl$dupfd(r136, 0x0, r136) getsockopt$sock_cred(r137, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r138, r138, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r139) r140 = socket$inet_tcp(0x2, 0x1, 0x0) r141 = fcntl$dupfd(r140, 0x0, r140) getsockopt$sock_cred(r141, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r142, r142, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r143, 0x0) r144 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r145 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r145, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r145, &(0x7f0000000580), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r138, r139, r142, r143, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r144, r145, 0x5}) perf_event_open(&(0x7f0000000000)={0x2, 0xfffffffffffffdb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext={0x9}, 0x12ce9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2466.450199][ T7704] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=9913,uid=0 14:25:16 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="020b000007000000000021003f5403620500010001009a934dd520175e3b8f8886264fe600001000e0c99f3d653c00f0ff9da499df0005dc"], 0x38}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x20, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2000000022, &(0x7f00000001c0)={0x77359400}) [ 2466.507551][ T7704] Memory cgroup out of memory: Killed process 9913 (syz-executor.2) total-vm:73244kB, anon-rss:4304kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:1000 [ 2466.540825][ T929] oom_reaper: reaped process 9913 (syz-executor.2), now anon-rss:0kB, file-rss:34688kB, shmem-rss:0kB 14:25:17 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) sendto$inet(r0, &(0x7f0000000400)='s', 0x1, 0x8840, &(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendmmsg(r0, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="7fc61b6d932dbc563145fefc191dbe34ca8e9ecdb27e56bc6ba8809e7cf04caace2b341d936860e16f71d90cf2a63ea103c29cc8aafd0c67226acce150360262eaae8207", 0x44}], 0x1}}], 0x40000a1, 0x0) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f0000001500)=[{0x0}, {&(0x7f0000000440)=""/150, 0x96}], 0x2}}], 0x300, 0x3, 0x0) 14:25:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000140)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) perf_event_open(&(0x7f0000000000)={0x0, 0xfffffffffffffdb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa, @perf_config_ext, 0x12ce9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2467.616010][ T7595] QAT: failed to copy from user cfg_data. [ 2467.648388][ T7595] QAT: Invalid ioctl [ 2468.841788][ T7704] syz-executor.2 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2468.858747][ T7704] CPU: 0 PID: 7704 Comm: syz-executor.2 Not tainted 5.5.0-rc1-syzkaller #0 [ 2468.867366][ T7704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2468.877429][ T7704] Call Trace: [ 2468.880749][ T7704] dump_stack+0x11d/0x181 [ 2468.885159][ T7704] dump_header+0xaa/0x39c [ 2468.889516][ T7704] oom_kill_process.cold+0x10/0x15 [ 2468.894685][ T7704] out_of_memory+0x231/0xa60 [ 2468.899296][ T7704] ? __rcu_read_unlock+0x66/0x3d0 [ 2468.904350][ T7704] mem_cgroup_out_of_memory+0x128/0x150 [ 2468.909978][ T7704] try_charge+0xb6c/0xbf0 [ 2468.914467][ T7704] ? __rcu_read_unlock+0x66/0x3d0 [ 2468.919579][ T7704] __memcg_kmem_charge_memcg+0x4a/0xe0 [ 2468.925060][ T7704] __memcg_kmem_charge+0xcf/0x1b0 [ 2468.930115][ T7704] __alloc_pages_nodemask+0x26c/0x310 [ 2468.935508][ T7704] alloc_pages_current+0xd1/0x170 [ 2468.940666][ T7704] pte_alloc_one+0x18/0x50 [ 2468.945099][ T7704] __pte_alloc+0x2d/0x220 [ 2468.949469][ T7704] copy_page_range+0x135a/0x19b0 [ 2468.954421][ T7704] ? delay_tsc+0x8f/0xc0 [ 2468.958748][ T7704] ? __vma_link_rb+0x3f4/0x440 [ 2468.963683][ T7704] dup_mm+0x74a/0xba0 [ 2468.967739][ T7704] copy_process+0x3138/0x3c40 [ 2468.972479][ T7704] _do_fork+0xfe/0x7a0 [ 2468.976571][ T7704] __do_sys_clone3+0x1bd/0x260 [ 2468.981514][ T7704] ? handle_mm_fault+0x2c6/0x530 [ 2468.986473][ T7704] ? up_read+0x45/0xa0 [ 2468.990572][ T7704] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2468.996834][ T7704] ? __do_page_fault+0x2e9/0x8d0 [ 2469.001813][ T7704] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2469.008080][ T7704] __x64_sys_clone3+0x3a/0x50 [ 2469.012785][ T7704] do_syscall_64+0xcc/0x3a0 [ 2469.017441][ T7704] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2469.023458][ T7704] RIP: 0033:0x45b349 [ 2469.027401][ T7704] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2469.047106][ T7704] RSP: 002b:00007f96d7fa3c78 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2469.060312][ T7704] RAX: ffffffffffffffda RBX: 00007f96d7fa46d4 RCX: 000000000045b349 [ 2469.068476][ T7704] RDX: 0000000000000000 RSI: 0000000000000040 RDI: 0000000020001680 [ 2469.076464][ T7704] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 2469.084459][ T7704] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2469.092442][ T7704] R13: 0000000000000071 R14: 00000000004c1bca R15: 000000000075bfd4 [ 2469.100575][ C0] net_ratelimit: 22 callbacks suppressed [ 2469.100584][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2469.112024][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2469.118249][ T7704] memory: usage 307200kB, limit 307200kB, failcnt 175 [ 2469.125335][ T7704] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2469.132235][ T7704] Memory cgroup stats for /syz2: [ 2469.132516][ T7704] anon 283410432 [ 2469.132516][ T7704] file 40960 [ 2469.132516][ T7704] kernel_stack 2211840 [ 2469.132516][ T7704] slab 8364032 [ 2469.132516][ T7704] sock 172032 [ 2469.132516][ T7704] shmem 69632 [ 2469.132516][ T7704] file_mapped 0 [ 2469.132516][ T7704] file_dirty 0 [ 2469.132516][ T7704] file_writeback 0 [ 2469.132516][ T7704] anon_thp 270532608 [ 2469.132516][ T7704] inactive_anon 176128 [ 2469.132516][ T7704] active_anon 283410432 [ 2469.132516][ T7704] inactive_file 0 [ 2469.132516][ T7704] active_file 94208 [ 2469.132516][ T7704] unevictable 36864 [ 2469.132516][ T7704] slab_reclaimable 1216512 [ 2469.132516][ T7704] slab_unreclaimable 7147520 [ 2469.132516][ T7704] pgfault 252681 [ 2469.132516][ T7704] pgmajfault 0 [ 2469.132516][ T7704] workingset_refault 0 [ 2469.132516][ T7704] workingset_activate 0 [ 2469.132516][ T7704] workingset_nodereclaim 0 [ 2469.132516][ T7704] pgrefill 206 [ 2469.132516][ T7704] pgscan 206 [ 2469.132516][ T7704] pgsteal 36 [ 2469.234085][ T7704] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=9898,uid=0 [ 2469.249767][ T7704] Memory cgroup out of memory: Killed process 9898 (syz-executor.2) total-vm:73112kB, anon-rss:4296kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:1000 [ 2469.292484][ T8019] syz-executor.2 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2469.308263][ T8019] CPU: 0 PID: 8019 Comm: syz-executor.2 Not tainted 5.5.0-rc1-syzkaller #0 [ 2469.316964][ T8019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2469.327126][ T8019] Call Trace: [ 2469.330436][ T8019] dump_stack+0x11d/0x181 [ 2469.334787][ T8019] dump_header+0xaa/0x39c [ 2469.339193][ T8019] oom_kill_process.cold+0x10/0x15 [ 2469.344324][ T8019] out_of_memory+0x231/0xa60 [ 2469.348946][ T8019] mem_cgroup_out_of_memory+0x128/0x150 [ 2469.354606][ T8019] try_charge+0x800/0xbf0 [ 2469.358967][ T8019] ? __rcu_read_unlock+0x66/0x3d0 [ 2469.364017][ T8019] __memcg_kmem_charge_memcg+0x4a/0xe0 [ 2469.369501][ T8019] __memcg_kmem_charge+0xcf/0x1b0 [ 2469.374549][ T8019] __alloc_pages_nodemask+0x26c/0x310 [ 2469.379942][ T8019] alloc_pages_current+0xd1/0x170 [ 2469.385068][ T8019] pte_alloc_one+0x18/0x50 [ 2469.389504][ T8019] __handle_mm_fault+0x2be6/0x2e00 [ 2469.394649][ T8019] handle_mm_fault+0x21b/0x530 [ 2469.399539][ T8019] __do_page_fault+0x456/0x8d0 [ 2469.404322][ T8019] do_page_fault+0x38/0x194 [ 2469.408883][ T8019] page_fault+0x34/0x40 [ 2469.413263][ T8019] RIP: 0033:0x45b349 [ 2469.417174][ T8019] Code: Bad RIP value. [ 2469.421273][ T8019] RSP: 002b:00007f96d7fc4c78 EFLAGS: 00010246 [ 2469.427348][ T8019] RAX: 0000000000000000 RBX: 00007f96d7fc56d4 RCX: 000000000045b349 [ 2469.435430][ T8019] RDX: 0000000000000000 RSI: 0000000000000040 RDI: 0000000020001680 [ 2469.443418][ T8019] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2469.451529][ T8019] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2469.459506][ T8019] R13: 0000000000000071 R14: 00000000004c1bca R15: 000000000075bf2c [ 2469.468123][ T8019] memory: usage 305136kB, limit 307200kB, failcnt 175 [ 2469.475238][ T8019] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2469.482264][ T8019] Memory cgroup stats for /syz2: [ 2469.482536][ T8019] anon 281313280 [ 2469.482536][ T8019] file 40960 [ 2469.482536][ T8019] kernel_stack 2211840 [ 2469.482536][ T8019] slab 8364032 [ 2469.482536][ T8019] sock 172032 [ 2469.482536][ T8019] shmem 69632 [ 2469.482536][ T8019] file_mapped 0 [ 2469.482536][ T8019] file_dirty 0 [ 2469.482536][ T8019] file_writeback 0 [ 2469.482536][ T8019] anon_thp 268435456 [ 2469.482536][ T8019] inactive_anon 176128 [ 2469.482536][ T8019] active_anon 281313280 [ 2469.482536][ T8019] inactive_file 0 [ 2469.482536][ T8019] active_file 94208 [ 2469.482536][ T8019] unevictable 36864 14:25:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r7, r7, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r8) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r11, r11, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r12, 0x0) r13 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r13, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r14 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r14, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r14, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r7, r8, r11, r12, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r13, r14, 0x5}) getgroups(0x3, &(0x7f00000000c0)=[r12, r4, 0xee00]) r15 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) r16 = socket$inet_tcp(0x2, 0x1, 0x0) r17 = fcntl$dupfd(r15, 0x406, r16) getsockopt$sock_cred(r17, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r18, r18, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r19) r20 = socket$inet_tcp(0x2, 0x1, 0x0) r21 = fcntl$dupfd(r20, 0x0, r20) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r22, r22, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r24 = socket$inet_tcp(0x2, 0x1, 0x0) r25 = fcntl$dupfd(r24, 0x0, r24) getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r26, r26, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27) r28 = socket$inet_tcp(0x2, 0x1, 0x0) r29 = fcntl$dupfd(r28, 0x0, r28) getsockopt$sock_cred(r29, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r30, r30, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r31, 0x0) r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r33 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r33, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r33, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r30, r31, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r32, r33, 0x5}) getgroups(0x3, &(0x7f00000000c0)=[r31, r19, 0xee00]) r34 = socket$inet_tcp(0x2, 0x1, 0x0) r35 = fcntl$dupfd(r34, 0x0, r34) getsockopt$sock_cred(r35, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r37 = socket$inet_tcp(0x2, 0x1, 0x0) r38 = fcntl$dupfd(r37, 0x0, r37) getsockopt$sock_cred(r38, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r39, r39, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r40) r41 = socket$inet_tcp(0x2, 0x1, 0x0) r42 = fcntl$dupfd(r41, 0x0, r41) getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r43, r43, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r44, 0x0) r45 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r46 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r46, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r46, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r39, r40, r43, r44, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r45, r46, 0x5}) setresuid(r36, r36, r39) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r47) socket$inet_tcp(0x2, 0x1, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000380)='/dev/md0\x00', 0x208400, 0x0) r48 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r48, 0x40096102, 0x0) recvmmsg(r48, &(0x7f0000004380)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)=""/110, 0x6e}], 0x1, &(0x7f0000000a80)=""/113, 0x71}, 0x8}, {{&(0x7f0000000b00)=@l2, 0x80, &(0x7f0000002b80)=[{&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/4096, 0x1000}], 0x2, &(0x7f0000002bc0)=""/195, 0xc3}, 0x2}], 0x2, 0x40010121, &(0x7f0000004480)={0x0, 0x1c9c380}) ioctl$ASHMEM_GET_PIN_STATUS(r48, 0x7709, 0x0) syz_open_dev$mice(&(0x7f00000003c0)='/dev/input/mice\x00', 0x0, 0x502001) r49 = socket$nl_generic(0x10, 0x3, 0x10) r50 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r49, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r50, 0x400, 0x8000000, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}}, 0x0) r51 = dup(r49) ioctl$KDADDIO(r51, 0x4b34, 0xffffffffffffffff) r52 = socket$nl_generic(0x10, 0x3, 0x10) r53 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r52, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r53, 0x400, 0x8000000, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}}, 0x0) dup(r52) r54 = fcntl$dupfd(r51, 0x406, r52) getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r55, r55, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r56, 0x0) r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r57, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r36, r47, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5}) r59 = socket$inet_tcp(0x2, 0x1, 0x0) r60 = fcntl$dupfd(r59, 0x0, r59) getsockopt$sock_cred(r60, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r62, r62, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r63) r64 = socket$inet_tcp(0x2, 0x1, 0x0) r65 = fcntl$dupfd(r64, 0x0, r64) getsockopt$sock_cred(r65, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r66, r66, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r67, 0x0) r68 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r68, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r69 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r69, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r69, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r62, r63, r66, r67, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r68, r69, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r47, 0xffffffffffffffff, r67, 0x0, 0xee00]) setregid(r23, r70) r71 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r71, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r33, &(0x7f0000000500), 0x2, &(0x7f0000000280)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r18, r19, r22, r23, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r61, r71, 0x5}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r72) r73 = socket$inet_tcp(0x2, 0x1, 0x0) r74 = fcntl$dupfd(r73, 0x0, r73) getsockopt$sock_cred(r74, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r76 = socket$inet_tcp(0x2, 0x1, 0x0) r77 = fcntl$dupfd(r76, 0x0, r76) getsockopt$sock_cred(r77, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r78, r78, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r79) r80 = socket$inet_tcp(0x2, 0x1, 0x0) r81 = fcntl$dupfd(r80, 0x0, r80) getsockopt$sock_cred(r81, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r82, r82, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r83, 0x0) r84 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r85 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r85, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r85, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r78, r79, r82, r83, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r84, r85, 0x5}) setresuid(r75, r75, r78) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r86) r87 = socket$inet_tcp(0x2, 0x1, 0x0) r88 = fcntl$dupfd(r87, 0x0, r87) getsockopt$sock_cred(r88, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r89, r89, 0x0) stat(&(0x7f00000004c0)='./file1\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r90, 0x0) r91 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r91, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r92 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r92, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r92, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r75, r86, r89, r90, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r91, r92, 0x5}) r93 = socket$inet_tcp(0x2, 0x1, 0x0) r94 = fcntl$dupfd(r93, 0x0, r93) getsockopt$sock_cred(r94, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r95, r95, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r96) r97 = socket$inet_tcp(0x2, 0x1, 0x0) r98 = fcntl$dupfd(r97, 0x0, r97) getsockopt$sock_cred(r98, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r99, r99, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r100, 0x0) r101 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r101, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r102 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r102, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r102, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r95, r96, r99, r100, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r101, r102, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r86, 0xffffffffffffffff, r100, 0x0, 0xee00]) r103 = socket$inet_tcp(0x2, 0x1, 0x0) r104 = fcntl$dupfd(r103, 0x0, r103) getsockopt$sock_cred(r104, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r106 = socket$inet_tcp(0x2, 0x1, 0x0) r107 = fcntl$dupfd(r106, 0x0, r106) getsockopt$sock_cred(r107, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r108, r108, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r109) r110 = socket$inet_tcp(0x2, 0x1, 0x0) r111 = fcntl$dupfd(r110, 0x0, r110) getsockopt$sock_cred(r111, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r112, r112, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r113, 0x0) r114 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r115 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r115, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r115, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r108, r109, r112, r113, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r114, r115, 0x5}) setresuid(r105, r105, r108) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r116) r117 = socket$inet_tcp(0x2, 0x1, 0x0) r118 = fcntl$dupfd(r117, 0x0, r117) getsockopt$sock_cred(r118, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r119, r119, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r120, 0x0) r121 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r121, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r122 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r122, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r122, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r105, r116, r119, r120, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r121, r122, 0x5}) r123 = socket$inet_tcp(0x2, 0x1, 0x0) r124 = fcntl$dupfd(r123, 0x0, r123) getsockopt$sock_cred(r124, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r125, r125, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r126) r127 = socket$inet_tcp(0x2, 0x1, 0x0) r128 = fcntl$dupfd(r127, 0x0, r127) getsockopt$sock_cred(r128, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r129, r129, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r130, 0x0) r131 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r131, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r132 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r132, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r132, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r125, r126, r129, r130, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r131, r132, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r116, 0xffffffffffffffff, r130, 0x0, 0xee00]) getgroups(0x9, &(0x7f00000000c0)=[0xffffffffffffffff, r19, 0xee00, r72, 0xffffffffffffffff, r86, r116, 0xffffffffffffffff, 0xee01]) getresgid(&(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000200)) getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r133) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r134) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r135) r136 = socket$inet_tcp(0x2, 0x1, 0x0) r137 = fcntl$dupfd(r136, 0x0, r136) getsockopt$sock_cred(r137, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r138, r138, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r139) r140 = socket$inet_tcp(0x2, 0x1, 0x0) r141 = fcntl$dupfd(r140, 0x0, r140) getsockopt$sock_cred(r141, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r142, r142, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r143, 0x0) r144 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r145 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r145, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r145, &(0x7f0000000580), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r138, r139, r142, r143, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r144, r145, 0x5}) perf_event_open(&(0x7f0000000000)={0x2, 0xfffffffffffffdb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext={0x9}, 0x12ce9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2469.482536][ T8019] slab_reclaimable 1216512 [ 2469.482536][ T8019] slab_unreclaimable 7147520 [ 2469.482536][ T8019] pgfault 252714 [ 2469.482536][ T8019] pgmajfault 0 [ 2469.482536][ T8019] workingset_refault 0 [ 2469.482536][ T8019] workingset_activate 0 [ 2469.482536][ T8019] workingset_nodereclaim 0 [ 2469.482536][ T8019] pgrefill 206 [ 2469.482536][ T8019] pgscan 206 [ 2469.482536][ T8019] pgsteal 36 [ 2469.650400][ T8019] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=9893,uid=0 [ 2469.666353][ T8019] Memory cgroup out of memory: Killed process 9893 (syz-executor.2) total-vm:73112kB, anon-rss:4296kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:1000 [ 2469.680189][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2469.685861][ T929] oom_reaper: reaped process 9893 (syz-executor.2), now anon-rss:0kB, file-rss:34688kB, shmem-rss:0kB [ 2469.689999][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2470.170217][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2470.176152][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2470.182149][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2470.187917][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:25:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000140)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) perf_event_open(&(0x7f0000000000)={0x0, 0xfffffffffffffdb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa, @perf_config_ext, 0x12ce9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:25:20 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="020b000007000000000021003f5403620500010001009a934dd520175e3b8f8886264fe600001000e0c99f3d653c00f0ff9da499df0005dc"], 0x38}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x20, 0x0) recvmmsg(r0, &(0x7f0000000140), 0x400000000000151, 0x0, &(0x7f00000001c0)={0x77359400}) 14:25:20 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) sendto$inet(r0, &(0x7f0000000400)='s', 0x1, 0x8840, &(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendmmsg(r0, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="7fc61b6d932dbc563145fefc191dbe34ca8e9ecdb27e56bc6ba8809e7cf04caace2b341d936860e16f71d90cf2a63ea103c29cc8aafd0c67226acce150360262eaae8207", 0x44}], 0x1}}], 0x40000a1, 0x0) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f0000001500)=[{0x0}, {&(0x7f0000000440)=""/150, 0x96}], 0x2}}], 0x300, 0x3, 0x0) 14:25:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r7, r7, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r8) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r11, r11, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r12, 0x0) r13 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r13, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r14 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r14, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r14, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r7, r8, r11, r12, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r13, r14, 0x5}) getgroups(0x3, &(0x7f00000000c0)=[r12, r4, 0xee00]) r15 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) r16 = socket$inet_tcp(0x2, 0x1, 0x0) r17 = fcntl$dupfd(r15, 0x406, r16) getsockopt$sock_cred(r17, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r18, r18, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r19) r20 = socket$inet_tcp(0x2, 0x1, 0x0) r21 = fcntl$dupfd(r20, 0x0, r20) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r22, r22, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r24 = socket$inet_tcp(0x2, 0x1, 0x0) r25 = fcntl$dupfd(r24, 0x0, r24) getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r26, r26, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27) r28 = socket$inet_tcp(0x2, 0x1, 0x0) r29 = fcntl$dupfd(r28, 0x0, r28) getsockopt$sock_cred(r29, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r30, r30, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r31, 0x0) r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r33 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r33, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r33, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r30, r31, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r32, r33, 0x5}) getgroups(0x3, &(0x7f00000000c0)=[r31, r19, 0xee00]) r34 = socket$inet_tcp(0x2, 0x1, 0x0) r35 = fcntl$dupfd(r34, 0x0, r34) getsockopt$sock_cred(r35, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r37 = socket$inet_tcp(0x2, 0x1, 0x0) r38 = fcntl$dupfd(r37, 0x0, r37) getsockopt$sock_cred(r38, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r39, r39, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r40) r41 = socket$inet_tcp(0x2, 0x1, 0x0) r42 = fcntl$dupfd(r41, 0x0, r41) getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r43, r43, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r44, 0x0) r45 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r46 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r46, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r46, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r39, r40, r43, r44, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r45, r46, 0x5}) setresuid(r36, r36, r39) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r47) socket$inet_tcp(0x2, 0x1, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000380)='/dev/md0\x00', 0x208400, 0x0) r48 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r48, 0x40096102, 0x0) recvmmsg(r48, &(0x7f0000004380)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)=""/110, 0x6e}], 0x1, &(0x7f0000000a80)=""/113, 0x71}, 0x8}, {{&(0x7f0000000b00)=@l2, 0x80, &(0x7f0000002b80)=[{&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/4096, 0x1000}], 0x2, &(0x7f0000002bc0)=""/195, 0xc3}, 0x2}], 0x2, 0x40010121, &(0x7f0000004480)={0x0, 0x1c9c380}) ioctl$ASHMEM_GET_PIN_STATUS(r48, 0x7709, 0x0) syz_open_dev$mice(&(0x7f00000003c0)='/dev/input/mice\x00', 0x0, 0x502001) r49 = socket$nl_generic(0x10, 0x3, 0x10) r50 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r49, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r50, 0x400, 0x8000000, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}}, 0x0) r51 = dup(r49) ioctl$KDADDIO(r51, 0x4b34, 0xffffffffffffffff) r52 = socket$nl_generic(0x10, 0x3, 0x10) r53 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r52, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r53, 0x400, 0x8000000, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}}, 0x0) dup(r52) r54 = fcntl$dupfd(r51, 0x406, r52) getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r55, r55, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r56, 0x0) r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r57, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r36, r47, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5}) r59 = socket$inet_tcp(0x2, 0x1, 0x0) r60 = fcntl$dupfd(r59, 0x0, r59) getsockopt$sock_cred(r60, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r62, r62, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r63) r64 = socket$inet_tcp(0x2, 0x1, 0x0) r65 = fcntl$dupfd(r64, 0x0, r64) getsockopt$sock_cred(r65, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r66, r66, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r67, 0x0) r68 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r68, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r69 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r69, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r69, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r62, r63, r66, r67, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r68, r69, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r47, 0xffffffffffffffff, r67, 0x0, 0xee00]) setregid(r23, r70) r71 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r71, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r33, &(0x7f0000000500), 0x2, &(0x7f0000000280)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r18, r19, r22, r23, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r61, r71, 0x5}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r72) r73 = socket$inet_tcp(0x2, 0x1, 0x0) r74 = fcntl$dupfd(r73, 0x0, r73) getsockopt$sock_cred(r74, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r76 = socket$inet_tcp(0x2, 0x1, 0x0) r77 = fcntl$dupfd(r76, 0x0, r76) getsockopt$sock_cred(r77, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r78, r78, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r79) r80 = socket$inet_tcp(0x2, 0x1, 0x0) r81 = fcntl$dupfd(r80, 0x0, r80) getsockopt$sock_cred(r81, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r82, r82, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r83, 0x0) r84 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r85 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r85, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r85, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r78, r79, r82, r83, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r84, r85, 0x5}) setresuid(r75, r75, r78) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r86) r87 = socket$inet_tcp(0x2, 0x1, 0x0) r88 = fcntl$dupfd(r87, 0x0, r87) getsockopt$sock_cred(r88, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r89, r89, 0x0) stat(&(0x7f00000004c0)='./file1\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r90, 0x0) r91 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r91, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r92 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r92, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r92, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r75, r86, r89, r90, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r91, r92, 0x5}) r93 = socket$inet_tcp(0x2, 0x1, 0x0) r94 = fcntl$dupfd(r93, 0x0, r93) getsockopt$sock_cred(r94, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r95, r95, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r96) r97 = socket$inet_tcp(0x2, 0x1, 0x0) r98 = fcntl$dupfd(r97, 0x0, r97) getsockopt$sock_cred(r98, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r99, r99, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r100, 0x0) r101 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r101, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r102 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r102, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r102, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r95, r96, r99, r100, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r101, r102, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r86, 0xffffffffffffffff, r100, 0x0, 0xee00]) r103 = socket$inet_tcp(0x2, 0x1, 0x0) r104 = fcntl$dupfd(r103, 0x0, r103) getsockopt$sock_cred(r104, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r106 = socket$inet_tcp(0x2, 0x1, 0x0) r107 = fcntl$dupfd(r106, 0x0, r106) getsockopt$sock_cred(r107, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r108, r108, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r109) r110 = socket$inet_tcp(0x2, 0x1, 0x0) r111 = fcntl$dupfd(r110, 0x0, r110) getsockopt$sock_cred(r111, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r112, r112, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r113, 0x0) r114 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r115 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r115, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r115, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r108, r109, r112, r113, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r114, r115, 0x5}) setresuid(r105, r105, r108) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r116) r117 = socket$inet_tcp(0x2, 0x1, 0x0) r118 = fcntl$dupfd(r117, 0x0, r117) getsockopt$sock_cred(r118, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r119, r119, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r120, 0x0) r121 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r121, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r122 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r122, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r122, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r105, r116, r119, r120, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r121, r122, 0x5}) r123 = socket$inet_tcp(0x2, 0x1, 0x0) r124 = fcntl$dupfd(r123, 0x0, r123) getsockopt$sock_cred(r124, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r125, r125, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r126) r127 = socket$inet_tcp(0x2, 0x1, 0x0) r128 = fcntl$dupfd(r127, 0x0, r127) getsockopt$sock_cred(r128, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r129, r129, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r130, 0x0) r131 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r131, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r132 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r132, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r132, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r125, r126, r129, r130, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r131, r132, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r116, 0xffffffffffffffff, r130, 0x0, 0xee00]) getgroups(0x9, &(0x7f00000000c0)=[0xffffffffffffffff, r19, 0xee00, r72, 0xffffffffffffffff, r86, r116, 0xffffffffffffffff, 0xee01]) getresgid(&(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000200)=0x0) r135 = getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r136) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r137) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r138) r139 = socket$inet_tcp(0x2, 0x1, 0x0) r140 = fcntl$dupfd(r139, 0x0, r139) getsockopt$sock_cred(r140, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r141, r141, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r142) r143 = socket$inet_tcp(0x2, 0x1, 0x0) r144 = fcntl$dupfd(r143, 0x0, r143) getsockopt$sock_cred(r144, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r145, r145, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r146, 0x0) r147 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r148 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r148, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r148, &(0x7f0000000580), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r141, r142, r145, r146, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r147, r148, 0x5}) setgroups(0x9, &(0x7f0000000240)=[r12, r133, r134, r135, r136, r137, r138, r146, 0xee00]) 14:25:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r7, r7, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r8) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r11, r11, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r12, 0x0) r13 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r13, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r14 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r14, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r14, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r7, r8, r11, r12, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r13, r14, 0x5}) getgroups(0x3, &(0x7f00000000c0)=[r12, r4, 0xee00]) r15 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) r16 = socket$inet_tcp(0x2, 0x1, 0x0) r17 = fcntl$dupfd(r15, 0x406, r16) getsockopt$sock_cred(r17, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r18, r18, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r19) r20 = socket$inet_tcp(0x2, 0x1, 0x0) r21 = fcntl$dupfd(r20, 0x0, r20) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r22, r22, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r24 = socket$inet_tcp(0x2, 0x1, 0x0) r25 = fcntl$dupfd(r24, 0x0, r24) getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r26, r26, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27) r28 = socket$inet_tcp(0x2, 0x1, 0x0) r29 = fcntl$dupfd(r28, 0x0, r28) getsockopt$sock_cred(r29, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r30, r30, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r31, 0x0) r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r33 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r33, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r33, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r30, r31, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r32, r33, 0x5}) getgroups(0x3, &(0x7f00000000c0)=[r31, r19, 0xee00]) r34 = socket$inet_tcp(0x2, 0x1, 0x0) r35 = fcntl$dupfd(r34, 0x0, r34) getsockopt$sock_cred(r35, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r37 = socket$inet_tcp(0x2, 0x1, 0x0) r38 = fcntl$dupfd(r37, 0x0, r37) getsockopt$sock_cred(r38, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r39, r39, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r40) r41 = socket$inet_tcp(0x2, 0x1, 0x0) r42 = fcntl$dupfd(r41, 0x0, r41) getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r43, r43, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r44, 0x0) r45 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r46 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r46, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r46, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r39, r40, r43, r44, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r45, r46, 0x5}) setresuid(r36, r36, r39) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r47) socket$inet_tcp(0x2, 0x1, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000380)='/dev/md0\x00', 0x208400, 0x0) r48 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r48, 0x40096102, 0x0) recvmmsg(r48, &(0x7f0000004380)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)=""/110, 0x6e}], 0x1, &(0x7f0000000a80)=""/113, 0x71}, 0x8}, {{&(0x7f0000000b00)=@l2, 0x80, &(0x7f0000002b80)=[{&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/4096, 0x1000}], 0x2, &(0x7f0000002bc0)=""/195, 0xc3}, 0x2}], 0x2, 0x40010121, &(0x7f0000004480)={0x0, 0x1c9c380}) ioctl$ASHMEM_GET_PIN_STATUS(r48, 0x7709, 0x0) syz_open_dev$mice(&(0x7f00000003c0)='/dev/input/mice\x00', 0x0, 0x502001) r49 = socket$nl_generic(0x10, 0x3, 0x10) r50 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r49, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r50, 0x400, 0x8000000, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}}, 0x0) r51 = dup(r49) ioctl$KDADDIO(r51, 0x4b34, 0xffffffffffffffff) r52 = socket$nl_generic(0x10, 0x3, 0x10) r53 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r52, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r53, 0x400, 0x8000000, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}}, 0x0) dup(r52) r54 = fcntl$dupfd(r51, 0x406, r52) getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r55, r55, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r56, 0x0) r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r57, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r36, r47, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5}) r59 = socket$inet_tcp(0x2, 0x1, 0x0) r60 = fcntl$dupfd(r59, 0x0, r59) getsockopt$sock_cred(r60, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r62, r62, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r63) r64 = socket$inet_tcp(0x2, 0x1, 0x0) r65 = fcntl$dupfd(r64, 0x0, r64) getsockopt$sock_cred(r65, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r66, r66, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r67, 0x0) r68 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r68, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r69 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r69, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r69, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r62, r63, r66, r67, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r68, r69, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r47, 0xffffffffffffffff, r67, 0x0, 0xee00]) setregid(r23, r70) r71 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r71, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r33, &(0x7f0000000500), 0x2, &(0x7f0000000280)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r18, r19, r22, r23, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r61, r71, 0x5}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r72) r73 = socket$inet_tcp(0x2, 0x1, 0x0) r74 = fcntl$dupfd(r73, 0x0, r73) getsockopt$sock_cred(r74, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r76 = socket$inet_tcp(0x2, 0x1, 0x0) r77 = fcntl$dupfd(r76, 0x0, r76) getsockopt$sock_cred(r77, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r78, r78, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r79) r80 = socket$inet_tcp(0x2, 0x1, 0x0) r81 = fcntl$dupfd(r80, 0x0, r80) getsockopt$sock_cred(r81, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r82, r82, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r83, 0x0) r84 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r85 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r85, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r85, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r78, r79, r82, r83, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r84, r85, 0x5}) setresuid(r75, r75, r78) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r86) r87 = socket$inet_tcp(0x2, 0x1, 0x0) r88 = fcntl$dupfd(r87, 0x0, r87) getsockopt$sock_cred(r88, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r89, r89, 0x0) stat(&(0x7f00000004c0)='./file1\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r90, 0x0) r91 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r91, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r92 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r92, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r92, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r75, r86, r89, r90, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r91, r92, 0x5}) r93 = socket$inet_tcp(0x2, 0x1, 0x0) r94 = fcntl$dupfd(r93, 0x0, r93) getsockopt$sock_cred(r94, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r95, r95, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r96) r97 = socket$inet_tcp(0x2, 0x1, 0x0) r98 = fcntl$dupfd(r97, 0x0, r97) getsockopt$sock_cred(r98, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r99, r99, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r100, 0x0) r101 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r101, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r102 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r102, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r102, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r95, r96, r99, r100, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r101, r102, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r86, 0xffffffffffffffff, r100, 0x0, 0xee00]) r103 = socket$inet_tcp(0x2, 0x1, 0x0) r104 = fcntl$dupfd(r103, 0x0, r103) getsockopt$sock_cred(r104, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r106 = socket$inet_tcp(0x2, 0x1, 0x0) r107 = fcntl$dupfd(r106, 0x0, r106) getsockopt$sock_cred(r107, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r108, r108, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r109) r110 = socket$inet_tcp(0x2, 0x1, 0x0) r111 = fcntl$dupfd(r110, 0x0, r110) getsockopt$sock_cred(r111, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r112, r112, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r113, 0x0) r114 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r115 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r115, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r115, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r108, r109, r112, r113, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r114, r115, 0x5}) setresuid(r105, r105, r108) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r116) r117 = socket$inet_tcp(0x2, 0x1, 0x0) r118 = fcntl$dupfd(r117, 0x0, r117) getsockopt$sock_cred(r118, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r119, r119, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r120, 0x0) r121 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r121, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r122 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r122, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r122, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r105, r116, r119, r120, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r121, r122, 0x5}) r123 = socket$inet_tcp(0x2, 0x1, 0x0) r124 = fcntl$dupfd(r123, 0x0, r123) getsockopt$sock_cred(r124, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r125, r125, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r126) r127 = socket$inet_tcp(0x2, 0x1, 0x0) r128 = fcntl$dupfd(r127, 0x0, r127) getsockopt$sock_cred(r128, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r129, r129, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r130, 0x0) r131 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r131, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r132 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r132, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r132, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r125, r126, r129, r130, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r131, r132, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r116, 0xffffffffffffffff, r130, 0x0, 0xee00]) getgroups(0x9, &(0x7f00000000c0)=[0xffffffffffffffff, r19, 0xee00, r72, 0xffffffffffffffff, r86, r116, 0xffffffffffffffff, 0xee01]) getresgid(&(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000200)=0x0) r135 = getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r136) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r137) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r138) r139 = socket$inet_tcp(0x2, 0x1, 0x0) r140 = fcntl$dupfd(r139, 0x0, r139) getsockopt$sock_cred(r140, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r141, r141, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r142) r143 = socket$inet_tcp(0x2, 0x1, 0x0) r144 = fcntl$dupfd(r143, 0x0, r143) getsockopt$sock_cred(r144, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r145, r145, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r146, 0x0) r147 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r148 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r148, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r148, &(0x7f0000000580), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r141, r142, r145, r146, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r147, r148, 0x5}) setgroups(0x9, &(0x7f0000000240)=[r12, r133, r134, r135, r136, r137, r138, r146, 0xee00]) 14:25:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r7, r7, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r8) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r11, r11, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r12, 0x0) r13 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r13, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r14 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r14, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r14, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r7, r8, r11, r12, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r13, r14, 0x5}) getgroups(0x3, &(0x7f00000000c0)=[r12, r4, 0xee00]) r15 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) r16 = socket$inet_tcp(0x2, 0x1, 0x0) r17 = fcntl$dupfd(r15, 0x406, r16) getsockopt$sock_cred(r17, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r18, r18, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r19) r20 = socket$inet_tcp(0x2, 0x1, 0x0) r21 = fcntl$dupfd(r20, 0x0, r20) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r22, r22, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r24 = socket$inet_tcp(0x2, 0x1, 0x0) r25 = fcntl$dupfd(r24, 0x0, r24) getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r26, r26, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27) r28 = socket$inet_tcp(0x2, 0x1, 0x0) r29 = fcntl$dupfd(r28, 0x0, r28) getsockopt$sock_cred(r29, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r30, r30, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r31, 0x0) r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r33 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r33, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r33, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r30, r31, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r32, r33, 0x5}) getgroups(0x3, &(0x7f00000000c0)=[r31, r19, 0xee00]) r34 = socket$inet_tcp(0x2, 0x1, 0x0) r35 = fcntl$dupfd(r34, 0x0, r34) getsockopt$sock_cred(r35, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r37 = socket$inet_tcp(0x2, 0x1, 0x0) r38 = fcntl$dupfd(r37, 0x0, r37) getsockopt$sock_cred(r38, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r39, r39, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r40) r41 = socket$inet_tcp(0x2, 0x1, 0x0) r42 = fcntl$dupfd(r41, 0x0, r41) getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r43, r43, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r44, 0x0) r45 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r46 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r46, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r46, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r39, r40, r43, r44, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r45, r46, 0x5}) setresuid(r36, r36, r39) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r47) socket$inet_tcp(0x2, 0x1, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000380)='/dev/md0\x00', 0x208400, 0x0) r48 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r48, 0x40096102, 0x0) recvmmsg(r48, &(0x7f0000004380)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)=""/110, 0x6e}], 0x1, &(0x7f0000000a80)=""/113, 0x71}, 0x8}, {{&(0x7f0000000b00)=@l2, 0x80, &(0x7f0000002b80)=[{&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/4096, 0x1000}], 0x2, &(0x7f0000002bc0)=""/195, 0xc3}, 0x2}], 0x2, 0x40010121, &(0x7f0000004480)={0x0, 0x1c9c380}) ioctl$ASHMEM_GET_PIN_STATUS(r48, 0x7709, 0x0) syz_open_dev$mice(&(0x7f00000003c0)='/dev/input/mice\x00', 0x0, 0x502001) r49 = socket$nl_generic(0x10, 0x3, 0x10) r50 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r49, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r50, 0x400, 0x8000000, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}}, 0x0) r51 = dup(r49) ioctl$KDADDIO(r51, 0x4b34, 0xffffffffffffffff) r52 = socket$nl_generic(0x10, 0x3, 0x10) r53 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r52, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r53, 0x400, 0x8000000, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}}, 0x0) dup(r52) r54 = fcntl$dupfd(r51, 0x406, r52) getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r55, r55, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r56, 0x0) r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r57, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r36, r47, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5}) r59 = socket$inet_tcp(0x2, 0x1, 0x0) r60 = fcntl$dupfd(r59, 0x0, r59) getsockopt$sock_cred(r60, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r62, r62, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r63) r64 = socket$inet_tcp(0x2, 0x1, 0x0) r65 = fcntl$dupfd(r64, 0x0, r64) getsockopt$sock_cred(r65, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r66, r66, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r67, 0x0) r68 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r68, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r69 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r69, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r69, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r62, r63, r66, r67, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r68, r69, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r47, 0xffffffffffffffff, r67, 0x0, 0xee00]) setregid(r23, r70) r71 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r71, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r33, &(0x7f0000000500), 0x2, &(0x7f0000000280)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r18, r19, r22, r23, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r61, r71, 0x5}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r72) r73 = socket$inet_tcp(0x2, 0x1, 0x0) r74 = fcntl$dupfd(r73, 0x0, r73) getsockopt$sock_cred(r74, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r76 = socket$inet_tcp(0x2, 0x1, 0x0) r77 = fcntl$dupfd(r76, 0x0, r76) getsockopt$sock_cred(r77, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r78, r78, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r79) r80 = socket$inet_tcp(0x2, 0x1, 0x0) r81 = fcntl$dupfd(r80, 0x0, r80) getsockopt$sock_cred(r81, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r82, r82, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r83, 0x0) r84 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r85 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r85, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r85, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r78, r79, r82, r83, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r84, r85, 0x5}) setresuid(r75, r75, r78) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r86) r87 = socket$inet_tcp(0x2, 0x1, 0x0) r88 = fcntl$dupfd(r87, 0x0, r87) getsockopt$sock_cred(r88, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r89, r89, 0x0) stat(&(0x7f00000004c0)='./file1\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r90, 0x0) r91 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r91, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r92 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r92, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r92, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r75, r86, r89, r90, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r91, r92, 0x5}) r93 = socket$inet_tcp(0x2, 0x1, 0x0) r94 = fcntl$dupfd(r93, 0x0, r93) getsockopt$sock_cred(r94, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r95, r95, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r96) r97 = socket$inet_tcp(0x2, 0x1, 0x0) r98 = fcntl$dupfd(r97, 0x0, r97) getsockopt$sock_cred(r98, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r99, r99, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r100, 0x0) r101 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r101, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r102 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r102, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r102, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r95, r96, r99, r100, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r101, r102, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r86, 0xffffffffffffffff, r100, 0x0, 0xee00]) r103 = socket$inet_tcp(0x2, 0x1, 0x0) r104 = fcntl$dupfd(r103, 0x0, r103) getsockopt$sock_cred(r104, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r106 = socket$inet_tcp(0x2, 0x1, 0x0) r107 = fcntl$dupfd(r106, 0x0, r106) getsockopt$sock_cred(r107, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r108, r108, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r109) r110 = socket$inet_tcp(0x2, 0x1, 0x0) r111 = fcntl$dupfd(r110, 0x0, r110) getsockopt$sock_cred(r111, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r112, r112, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r113, 0x0) r114 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r115 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r115, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r115, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r108, r109, r112, r113, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r114, r115, 0x5}) setresuid(r105, r105, r108) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r116) r117 = socket$inet_tcp(0x2, 0x1, 0x0) r118 = fcntl$dupfd(r117, 0x0, r117) getsockopt$sock_cred(r118, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r119, r119, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r120, 0x0) r121 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r121, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r122 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r122, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r122, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r105, r116, r119, r120, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r121, r122, 0x5}) r123 = socket$inet_tcp(0x2, 0x1, 0x0) r124 = fcntl$dupfd(r123, 0x0, r123) getsockopt$sock_cred(r124, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r125, r125, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r126) r127 = socket$inet_tcp(0x2, 0x1, 0x0) r128 = fcntl$dupfd(r127, 0x0, r127) getsockopt$sock_cred(r128, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r129, r129, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r130, 0x0) r131 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r131, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r132 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r132, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r132, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r125, r126, r129, r130, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r131, r132, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r116, 0xffffffffffffffff, r130, 0x0, 0xee00]) getgroups(0x9, &(0x7f00000000c0)=[0xffffffffffffffff, r19, 0xee00, r72, 0xffffffffffffffff, r86, r116, 0xffffffffffffffff, 0xee01]) getresgid(&(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000200)) getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r133) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r134) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r135) r136 = socket$inet_tcp(0x2, 0x1, 0x0) r137 = fcntl$dupfd(r136, 0x0, r136) getsockopt$sock_cred(r137, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r138, r138, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r139) r140 = socket$inet_tcp(0x2, 0x1, 0x0) r141 = fcntl$dupfd(r140, 0x0, r140) getsockopt$sock_cred(r141, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r142, r142, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r143, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r144 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r144, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r144, &(0x7f0000000580), 0x80000004, &(0x7f0000000180)) perf_event_open(&(0x7f0000000000)={0x2, 0xfffffffffffffdb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext={0x9}, 0x12ce9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2470.400248][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2470.406059][ C0] protocol 88fb is buggy, dev hsr_slave_1 14:25:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000140)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) perf_event_open(&(0x7f0000000000)={0x0, 0xfffffffffffffdb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa, @perf_config_ext, 0x12ce9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:25:21 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) sendto$inet(r0, &(0x7f0000000400)='s', 0x1, 0x8840, &(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendmmsg(r0, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="7fc61b6d932dbc563145fefc191dbe34ca8e9ecdb27e56bc6ba8809e7cf04caace2b341d936860e16f71d90cf2a63ea103c29cc8aafd0c67226acce150360262eaae8207", 0x44}], 0x1}}], 0x40000a1, 0x0) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f0000001500)=[{0x0}, {&(0x7f0000000440)=""/150, 0x96}], 0x2}}], 0x300, 0x3, 0x0) 14:25:21 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="020b000007000000000021003f5403620500010001009a934dd520175e3b8f8886264fe600001000e0c99f3d653c00f0ff9da499df0005dc"], 0x38}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x20, 0x0) recvmmsg(r0, &(0x7f0000000140), 0x400000000000151, 0x0, &(0x7f00000001c0)={0x77359400}) 14:25:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000140)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) perf_event_open(&(0x7f0000000000)={0x0, 0xfffffffffffffdb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa, @perf_config_ext, 0x12ce9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2471.513580][ T8145] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2471.540347][ T8145] CPU: 1 PID: 8145 Comm: syz-executor.1 Not tainted 5.5.0-rc1-syzkaller #0 [ 2471.549066][ T8145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2471.559127][ T8145] Call Trace: [ 2471.562451][ T8145] dump_stack+0x11d/0x181 [ 2471.566795][ T8145] dump_header+0xaa/0x39c [ 2471.571247][ T8145] oom_kill_process.cold+0x10/0x15 [ 2471.576581][ T8145] out_of_memory+0x231/0xa60 [ 2471.581371][ T8145] ? __rcu_read_unlock+0x66/0x3d0 [ 2471.586512][ T8145] mem_cgroup_out_of_memory+0x128/0x150 [ 2471.592147][ T8145] try_charge+0xb6c/0xbf0 [ 2471.596620][ T8145] ? rcu_note_context_switch+0x720/0x760 [ 2471.602275][ T8145] mem_cgroup_try_charge+0xd2/0x260 [ 2471.607560][ T8145] mem_cgroup_try_charge_delay+0x3a/0x80 [ 2471.613204][ T8145] wp_page_copy+0x322/0x1040 [ 2471.617923][ T8145] ? __read_once_size+0x41/0xe0 [ 2471.622987][ T8145] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 2471.628897][ T8145] do_wp_page+0x192/0xeb0 [ 2471.633254][ T8145] __handle_mm_fault+0x1d16/0x2e00 [ 2471.638400][ T8145] handle_mm_fault+0x21b/0x530 [ 2471.643257][ T8145] __do_page_fault+0x456/0x8d0 [ 2471.648052][ T8145] do_page_fault+0x38/0x194 [ 2471.652581][ T8145] page_fault+0x34/0x40 [ 2471.656742][ T8145] RIP: 0033:0x40dd48 [ 2471.660652][ T8145] Code: d9 48 8b 47 78 48 83 f8 ff 0f 84 0b 01 00 00 48 8b 73 18 48 83 fe ff 74 29 48 81 fe e7 03 00 00 0f 87 67 01 00 00 48 c1 e6 04 86 80 80 75 00 01 48 89 86 88 80 75 00 66 2e 0f 1f 84 00 00 00 [ 2471.672267][ T8284] QAT: failed to copy from user cfg_data. [ 2471.680361][ T8145] RSP: 002b:00007ffda533dca0 EFLAGS: 00010206 [ 2471.680374][ T8145] RAX: 0000000000002a36 RBX: 000000000075bfc8 RCX: 0000000000000001 [ 2471.680451][ T8145] RDX: 0000000000000001 RSI: 0000000000000200 RDI: 000000000075bfc8 [ 2471.680462][ T8145] RBP: 000000000075c9a0 R08: 00000000c62a086b R09: 00000000c62a086f [ 2471.680483][ T8145] R10: 00007ffda533dda0 R11: 0000000000000246 R12: 000000000075c070 [ 2471.724354][ T8145] R13: 000000000025b5ec R14: 000000000025b619 R15: 000000000075c07c [ 2471.768640][ T8284] QAT: Invalid ioctl [ 2471.860258][ T8145] memory: usage 307200kB, limit 307200kB, failcnt 6378 [ 2471.896165][ T8145] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2471.968394][ T8145] Memory cgroup stats for /syz1: [ 2471.968559][ T8145] anon 277753856 [ 2471.968559][ T8145] file 24576 [ 2471.968559][ T8145] kernel_stack 2949120 [ 2471.968559][ T8145] slab 9506816 [ 2471.968559][ T8145] sock 36864 [ 2471.968559][ T8145] shmem 0 [ 2471.968559][ T8145] file_mapped 135168 [ 2471.968559][ T8145] file_dirty 135168 [ 2471.968559][ T8145] file_writeback 0 [ 2471.968559][ T8145] anon_thp 255852544 [ 2471.968559][ T8145] inactive_anon 135168 [ 2471.968559][ T8145] active_anon 277831680 14:25:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000140)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) perf_event_open(&(0x7f0000000000)={0x0, 0xfffffffffffffdb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa, @perf_config_ext, 0x12ce9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2471.968559][ T8145] inactive_file 0 [ 2471.968559][ T8145] active_file 49152 [ 2471.968559][ T8145] unevictable 0 [ 2471.968559][ T8145] slab_reclaimable 1757184 [ 2471.968559][ T8145] slab_unreclaimable 7749632 [ 2471.968559][ T8145] pgfault 232881 [ 2471.968559][ T8145] pgmajfault 0 [ 2471.968559][ T8145] workingset_refault 0 [ 2471.968559][ T8145] workingset_activate 0 [ 2471.968559][ T8145] workingset_nodereclaim 0 [ 2471.968559][ T8145] pgrefill 256 [ 2471.968559][ T8145] pgscan 23127 [ 2471.968559][ T8145] pgsteal 22610 14:25:22 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) sendto$inet(r0, &(0x7f0000000400)='s', 0x1, 0x8840, &(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendmmsg(r0, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="7fc61b6d932dbc563145fefc191dbe34ca8e9ecdb27e56bc6ba8809e7cf04caace2b341d936860e16f71d90cf2a63ea103c29cc8aafd0c67226acce150360262eaae8207", 0x44}], 0x1}}], 0x40000a1, 0x0) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f0000001500)=[{0x0}, {&(0x7f0000000440)=""/150, 0x96}], 0x2}}], 0x300, 0x3, 0x0) [ 2472.068458][ T8145] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=8025,uid=0 [ 2472.087271][ T8145] Memory cgroup out of memory: Killed process 8025 (syz-executor.1) total-vm:72848kB, anon-rss:4280kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:1000 [ 2472.220425][ T8270] syz-executor.2 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2472.267222][ T8270] CPU: 1 PID: 8270 Comm: syz-executor.2 Not tainted 5.5.0-rc1-syzkaller #0 [ 2472.275973][ T8270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2472.286077][ T8270] Call Trace: [ 2472.289567][ T8270] dump_stack+0x11d/0x181 [ 2472.294007][ T8270] dump_header+0xaa/0x39c [ 2472.298370][ T8270] oom_kill_process.cold+0x10/0x15 [ 2472.303525][ T8270] out_of_memory+0x231/0xa60 [ 2472.308186][ T8270] mem_cgroup_out_of_memory+0x128/0x150 [ 2472.313875][ T8270] try_charge+0xb6c/0xbf0 [ 2472.318228][ T8270] ? __rcu_read_unlock+0x66/0x3d0 [ 2472.323324][ T8270] __memcg_kmem_charge_memcg+0x4a/0xe0 [ 2472.328808][ T8270] __memcg_kmem_charge+0xcf/0x1b0 [ 2472.333920][ T8270] __alloc_pages_nodemask+0x26c/0x310 [ 2472.339450][ T8270] alloc_pages_current+0xd1/0x170 [ 2472.344582][ T8270] pte_alloc_one+0x18/0x50 [ 2472.349011][ T8270] __pte_alloc+0x2d/0x220 [ 2472.353361][ T8270] copy_page_range+0x135a/0x19b0 [ 2472.358415][ T8270] ? __vma_link_rb+0x3f4/0x440 [ 2472.363234][ T8270] dup_mm+0x74a/0xba0 [ 2472.367398][ T8270] copy_process+0x3138/0x3c40 [ 2472.372146][ T8270] _do_fork+0xfe/0x7a0 [ 2472.376355][ T8270] __do_sys_clone3+0x1bd/0x260 [ 2472.381172][ T8270] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 2472.386923][ T8270] ? _copy_to_user+0x84/0xb0 [ 2472.391601][ T8270] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2472.397976][ T8270] ? put_timespec64+0x94/0xc0 [ 2472.402676][ T8270] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2472.409048][ T8270] __x64_sys_clone3+0x3a/0x50 [ 2472.413747][ T8270] do_syscall_64+0xcc/0x3a0 [ 2472.418320][ T8270] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2472.424225][ T8270] RIP: 0033:0x45b349 [ 2472.428141][ T8270] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2472.447819][ T8270] RSP: 002b:00007f96d7f82c78 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2472.456255][ T8270] RAX: ffffffffffffffda RBX: 00007f96d7f836d4 RCX: 000000000045b349 14:25:22 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="020b000007000000000021003f5403620500010001009a934dd520175e3b8f8886264fe600001000e0c99f3d653c00f0ff9da499df0005dc"], 0x38}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x20, 0x0) recvmmsg(r0, &(0x7f0000000140), 0x400000000000151, 0x0, &(0x7f00000001c0)={0x77359400}) [ 2472.464292][ T8270] RDX: 0000000000000000 RSI: 0000000000000040 RDI: 0000000020001680 [ 2472.472281][ T8270] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 2472.480388][ T8270] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2472.488440][ T8270] R13: 0000000000000071 R14: 00000000004c1bca R15: 000000000075c07c 14:25:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000140)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) perf_event_open(&(0x7f0000000000)={0x0, 0xfffffffffffffdb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa, @perf_config_ext, 0x12ce9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2472.800238][ T8270] memory: usage 307176kB, limit 307200kB, failcnt 191 [ 2472.824217][ T8270] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2472.888169][ T8270] Memory cgroup stats for /syz2: [ 2472.888623][ T8270] anon 281980928 [ 2472.888623][ T8270] file 40960 [ 2472.888623][ T8270] kernel_stack 2322432 [ 2472.888623][ T8270] slab 8527872 [ 2472.888623][ T8270] sock 172032 [ 2472.888623][ T8270] shmem 69632 [ 2472.888623][ T8270] file_mapped 0 [ 2472.888623][ T8270] file_dirty 0 [ 2472.888623][ T8270] file_writeback 0 [ 2472.888623][ T8270] anon_thp 268435456 [ 2472.888623][ T8270] inactive_anon 176128 [ 2472.888623][ T8270] active_anon 281980928 [ 2472.888623][ T8270] inactive_file 0 [ 2472.888623][ T8270] active_file 94208 [ 2472.888623][ T8270] unevictable 36864 [ 2472.888623][ T8270] slab_reclaimable 1216512 [ 2472.888623][ T8270] slab_unreclaimable 7311360 [ 2472.888623][ T8270] pgfault 253209 [ 2472.888623][ T8270] pgmajfault 0 [ 2472.888623][ T8270] workingset_refault 0 [ 2472.888623][ T8270] workingset_activate 0 [ 2472.888623][ T8270] workingset_nodereclaim 0 [ 2472.888623][ T8270] pgrefill 272 [ 2472.888623][ T8270] pgscan 239 [ 2472.888623][ T8270] pgsteal 36 14:25:23 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) sendto$inet(r0, &(0x7f0000000400)='s', 0x1, 0x8840, &(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendmmsg(r0, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="7fc61b6d932dbc563145fefc191dbe34ca8e9ecdb27e56bc6ba8809e7cf04caace2b341d936860e16f71d90cf2a63ea103c29cc8aafd0c67226acce150360262eaae8207", 0x44}], 0x1}}], 0x40000a1, 0x0) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f0000001500)=[{0x0}, {&(0x7f0000000440)=""/150, 0x96}], 0x2}}], 0x300, 0x3, 0x0) [ 2473.170949][ T8270] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=8149,uid=0 [ 2473.186900][ T8270] Memory cgroup out of memory: Killed process 8149 (syz-executor.2) total-vm:73112kB, anon-rss:4288kB, file-rss:35780kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 2473.206233][ T8145] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2473.223193][ T8145] CPU: 1 PID: 8145 Comm: syz-executor.1 Not tainted 5.5.0-rc1-syzkaller #0 [ 2473.231862][ T8145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2473.242076][ T8145] Call Trace: [ 2473.245383][ T8145] dump_stack+0x11d/0x181 [ 2473.249820][ T8145] dump_header+0xaa/0x39c [ 2473.254420][ T8145] oom_kill_process.cold+0x10/0x15 [ 2473.259556][ T8145] out_of_memory+0x231/0xa60 [ 2473.264165][ T8145] mem_cgroup_out_of_memory+0x128/0x150 [ 2473.269750][ T8145] try_charge+0xb6c/0xbf0 [ 2473.274106][ T8145] ? rcu_note_context_switch+0x720/0x760 [ 2473.279796][ T8145] mem_cgroup_try_charge+0xd2/0x260 [ 2473.285125][ T8145] mem_cgroup_try_charge_delay+0x3a/0x80 [ 2473.290859][ T8145] wp_page_copy+0x322/0x1040 [ 2473.295502][ T8145] ? __read_once_size+0x41/0xe0 [ 2473.300367][ T8145] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 2473.306438][ T8145] do_wp_page+0x192/0xeb0 [ 2473.310780][ T8145] ? record_times+0x16/0x90 [ 2473.315302][ T8145] __handle_mm_fault+0x1d16/0x2e00 [ 2473.320443][ T8145] ? try_to_free_mem_cgroup_pages+0x258/0x4d0 [ 2473.326559][ T8145] handle_mm_fault+0x21b/0x530 [ 2473.331355][ T8145] __do_page_fault+0x456/0x8d0 [ 2473.336143][ T8145] do_page_fault+0x38/0x194 [ 2473.340738][ T8145] page_fault+0x34/0x40 [ 2473.344900][ T8145] RIP: 0033:0x410398 [ 2473.348810][ T8145] Code: 8b 34 c6 4a 8d 04 2e 48 3d ff ff ff 7e 0f 86 77 ff ff ff bf 75 0c 4c 00 31 c0 e8 13 1b ff ff 31 ff e8 5c 17 ff ff 0f 1f 40 00 <89> 3c b5 00 00 73 00 eb b6 31 ed 0f 1f 44 00 00 80 3d ae 22 66 00 [ 2473.368419][ T8145] RSP: 002b:00007ffda533dc00 EFLAGS: 00010246 [ 2473.374502][ T8145] RAX: 00000000dcbc2545 RBX: 000000008f1fdff8 RCX: 0000001b30620000 [ 2473.382485][ T8145] RDX: 0000000000000000 RSI: 0000000000000545 RDI: ffffffffdcbc2543 [ 2473.390479][ T8145] RBP: 000000000000000b R08: 00000000dcbc2543 R09: 00000000dcbc2547 [ 2473.398491][ T8145] R10: 00007ffda533dda0 R11: 0000000000000246 R12: 000000000075bfa8 [ 2473.406478][ T8145] R13: 0000000080000000 R14: 00007fedcdcd2008 R15: 00000000000001fd [ 2473.418110][ T929] oom_reaper: reaped process 8149 (syz-executor.2), now anon-rss:0kB, file-rss:34892kB, shmem-rss:0kB [ 2473.741509][ T8145] memory: usage 306620kB, limit 307200kB, failcnt 6427 [ 2473.748536][ T8145] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2473.755906][ T8145] Memory cgroup stats for /syz1: [ 2473.756130][ T8145] anon 277438464 [ 2473.756130][ T8145] file 24576 [ 2473.756130][ T8145] kernel_stack 2875392 [ 2473.756130][ T8145] slab 9506816 [ 2473.756130][ T8145] sock 36864 [ 2473.756130][ T8145] shmem 0 [ 2473.756130][ T8145] file_mapped 135168 [ 2473.756130][ T8145] file_dirty 135168 [ 2473.756130][ T8145] file_writeback 0 [ 2473.756130][ T8145] anon_thp 255852544 [ 2473.756130][ T8145] inactive_anon 135168 [ 2473.756130][ T8145] active_anon 277561344 [ 2473.756130][ T8145] inactive_file 0 [ 2473.756130][ T8145] active_file 49152 [ 2473.756130][ T8145] unevictable 0 [ 2473.756130][ T8145] slab_reclaimable 1757184 [ 2473.756130][ T8145] slab_unreclaimable 7749632 [ 2473.756130][ T8145] pgfault 232914 [ 2473.756130][ T8145] pgmajfault 0 [ 2473.756130][ T8145] workingset_refault 0 [ 2473.756130][ T8145] workingset_activate 0 [ 2473.756130][ T8145] workingset_nodereclaim 0 [ 2473.756130][ T8145] pgrefill 256 [ 2473.756130][ T8145] pgscan 23127 [ 2473.756130][ T8145] pgsteal 22610 [ 2473.851621][ T8145] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=8024,uid=0 [ 2473.867438][ T8145] Memory cgroup out of memory: Killed process 8024 (syz-executor.1) total-vm:72848kB, anon-rss:4280kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:1000 [ 2473.887404][ T929] oom_reaper: reaped process 8024 (syz-executor.1), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB 14:25:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r7, r7, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r8) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r11, r11, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r12, 0x0) r13 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r13, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r14 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r14, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r14, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r7, r8, r11, r12, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r13, r14, 0x5}) getgroups(0x3, &(0x7f00000000c0)=[r12, r4, 0xee00]) r15 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) r16 = socket$inet_tcp(0x2, 0x1, 0x0) r17 = fcntl$dupfd(r15, 0x406, r16) getsockopt$sock_cred(r17, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r18, r18, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r19) r20 = socket$inet_tcp(0x2, 0x1, 0x0) r21 = fcntl$dupfd(r20, 0x0, r20) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r22, r22, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r24 = socket$inet_tcp(0x2, 0x1, 0x0) r25 = fcntl$dupfd(r24, 0x0, r24) getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r26, r26, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27) r28 = socket$inet_tcp(0x2, 0x1, 0x0) r29 = fcntl$dupfd(r28, 0x0, r28) getsockopt$sock_cred(r29, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r30, r30, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r31, 0x0) r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r33 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r33, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r33, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r30, r31, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r32, r33, 0x5}) getgroups(0x3, &(0x7f00000000c0)=[r31, r19, 0xee00]) r34 = socket$inet_tcp(0x2, 0x1, 0x0) r35 = fcntl$dupfd(r34, 0x0, r34) getsockopt$sock_cred(r35, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r37 = socket$inet_tcp(0x2, 0x1, 0x0) r38 = fcntl$dupfd(r37, 0x0, r37) getsockopt$sock_cred(r38, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r39, r39, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r40) r41 = socket$inet_tcp(0x2, 0x1, 0x0) r42 = fcntl$dupfd(r41, 0x0, r41) getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r43, r43, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r44, 0x0) r45 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r46 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r46, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r46, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r39, r40, r43, r44, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r45, r46, 0x5}) setresuid(r36, r36, r39) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r47) socket$inet_tcp(0x2, 0x1, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000380)='/dev/md0\x00', 0x208400, 0x0) r48 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r48, 0x40096102, 0x0) recvmmsg(r48, &(0x7f0000004380)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)=""/110, 0x6e}], 0x1, &(0x7f0000000a80)=""/113, 0x71}, 0x8}, {{&(0x7f0000000b00)=@l2, 0x80, &(0x7f0000002b80)=[{&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/4096, 0x1000}], 0x2, &(0x7f0000002bc0)=""/195, 0xc3}, 0x2}], 0x2, 0x40010121, &(0x7f0000004480)={0x0, 0x1c9c380}) ioctl$ASHMEM_GET_PIN_STATUS(r48, 0x7709, 0x0) syz_open_dev$mice(&(0x7f00000003c0)='/dev/input/mice\x00', 0x0, 0x502001) r49 = socket$nl_generic(0x10, 0x3, 0x10) r50 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r49, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r50, 0x400, 0x8000000, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}}, 0x0) r51 = dup(r49) ioctl$KDADDIO(r51, 0x4b34, 0xffffffffffffffff) r52 = socket$nl_generic(0x10, 0x3, 0x10) r53 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r52, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r53, 0x400, 0x8000000, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}}, 0x0) dup(r52) r54 = fcntl$dupfd(r51, 0x406, r52) getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r55, r55, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r56, 0x0) r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r57, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r36, r47, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5}) r59 = socket$inet_tcp(0x2, 0x1, 0x0) r60 = fcntl$dupfd(r59, 0x0, r59) getsockopt$sock_cred(r60, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r62, r62, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r63) r64 = socket$inet_tcp(0x2, 0x1, 0x0) r65 = fcntl$dupfd(r64, 0x0, r64) getsockopt$sock_cred(r65, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r66, r66, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r67, 0x0) r68 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r68, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r69 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r69, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r69, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r62, r63, r66, r67, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r68, r69, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r47, 0xffffffffffffffff, r67, 0x0, 0xee00]) setregid(r23, r70) r71 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r71, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r33, &(0x7f0000000500), 0x2, &(0x7f0000000280)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r18, r19, r22, r23, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r61, r71, 0x5}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r72) r73 = socket$inet_tcp(0x2, 0x1, 0x0) r74 = fcntl$dupfd(r73, 0x0, r73) getsockopt$sock_cred(r74, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r76 = socket$inet_tcp(0x2, 0x1, 0x0) r77 = fcntl$dupfd(r76, 0x0, r76) getsockopt$sock_cred(r77, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r78, r78, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r79) r80 = socket$inet_tcp(0x2, 0x1, 0x0) r81 = fcntl$dupfd(r80, 0x0, r80) getsockopt$sock_cred(r81, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r82, r82, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r83, 0x0) r84 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r85 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r85, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r85, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r78, r79, r82, r83, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r84, r85, 0x5}) setresuid(r75, r75, r78) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r86) r87 = socket$inet_tcp(0x2, 0x1, 0x0) r88 = fcntl$dupfd(r87, 0x0, r87) getsockopt$sock_cred(r88, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r89, r89, 0x0) stat(&(0x7f00000004c0)='./file1\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r90, 0x0) r91 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r91, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r92 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r92, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r92, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r75, r86, r89, r90, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r91, r92, 0x5}) r93 = socket$inet_tcp(0x2, 0x1, 0x0) r94 = fcntl$dupfd(r93, 0x0, r93) getsockopt$sock_cred(r94, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r95, r95, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r96) r97 = socket$inet_tcp(0x2, 0x1, 0x0) r98 = fcntl$dupfd(r97, 0x0, r97) getsockopt$sock_cred(r98, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r99, r99, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r100, 0x0) r101 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r101, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r102 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r102, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r102, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r95, r96, r99, r100, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r101, r102, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r86, 0xffffffffffffffff, r100, 0x0, 0xee00]) r103 = socket$inet_tcp(0x2, 0x1, 0x0) r104 = fcntl$dupfd(r103, 0x0, r103) getsockopt$sock_cred(r104, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r106 = socket$inet_tcp(0x2, 0x1, 0x0) r107 = fcntl$dupfd(r106, 0x0, r106) getsockopt$sock_cred(r107, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r108, r108, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r109) r110 = socket$inet_tcp(0x2, 0x1, 0x0) r111 = fcntl$dupfd(r110, 0x0, r110) getsockopt$sock_cred(r111, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r112, r112, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r113, 0x0) r114 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r115 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r115, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r115, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r108, r109, r112, r113, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r114, r115, 0x5}) setresuid(r105, r105, r108) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r116) r117 = socket$inet_tcp(0x2, 0x1, 0x0) r118 = fcntl$dupfd(r117, 0x0, r117) getsockopt$sock_cred(r118, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r119, r119, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r120, 0x0) r121 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r121, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r122 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r122, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r122, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r105, r116, r119, r120, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r121, r122, 0x5}) r123 = socket$inet_tcp(0x2, 0x1, 0x0) r124 = fcntl$dupfd(r123, 0x0, r123) getsockopt$sock_cred(r124, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r125, r125, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r126) r127 = socket$inet_tcp(0x2, 0x1, 0x0) r128 = fcntl$dupfd(r127, 0x0, r127) getsockopt$sock_cred(r128, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r129, r129, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r130, 0x0) r131 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r131, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r132 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r132, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r132, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r125, r126, r129, r130, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r131, r132, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r116, 0xffffffffffffffff, r130, 0x0, 0xee00]) getgroups(0x9, &(0x7f00000000c0)=[0xffffffffffffffff, r19, 0xee00, r72, 0xffffffffffffffff, r86, r116, 0xffffffffffffffff, 0xee01]) getresgid(&(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000200)=0x0) r135 = getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r136) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r137) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r138) r139 = socket$inet_tcp(0x2, 0x1, 0x0) r140 = fcntl$dupfd(r139, 0x0, r139) getsockopt$sock_cred(r140, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r141, r141, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r142) r143 = socket$inet_tcp(0x2, 0x1, 0x0) r144 = fcntl$dupfd(r143, 0x0, r143) getsockopt$sock_cred(r144, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r145, r145, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r146, 0x0) r147 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r148 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r148, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r148, &(0x7f0000000580), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r141, r142, r145, r146, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r147, r148, 0x5}) setgroups(0x9, &(0x7f0000000240)=[r12, r133, r134, r135, r136, r137, r138, r146, 0xee00]) 14:25:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r7, r7, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r8) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r11, r11, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r12, 0x0) r13 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r13, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r14 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r14, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r14, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r7, r8, r11, r12, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r13, r14, 0x5}) getgroups(0x3, &(0x7f00000000c0)=[r12, r4, 0xee00]) r15 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) r16 = socket$inet_tcp(0x2, 0x1, 0x0) r17 = fcntl$dupfd(r15, 0x406, r16) getsockopt$sock_cred(r17, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r18, r18, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r19) r20 = socket$inet_tcp(0x2, 0x1, 0x0) r21 = fcntl$dupfd(r20, 0x0, r20) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r22, r22, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r24 = socket$inet_tcp(0x2, 0x1, 0x0) r25 = fcntl$dupfd(r24, 0x0, r24) getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r26, r26, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27) r28 = socket$inet_tcp(0x2, 0x1, 0x0) r29 = fcntl$dupfd(r28, 0x0, r28) getsockopt$sock_cred(r29, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r30, r30, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r31, 0x0) r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r33 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r33, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r33, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r30, r31, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r32, r33, 0x5}) getgroups(0x3, &(0x7f00000000c0)=[r31, r19, 0xee00]) r34 = socket$inet_tcp(0x2, 0x1, 0x0) r35 = fcntl$dupfd(r34, 0x0, r34) getsockopt$sock_cred(r35, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r37 = socket$inet_tcp(0x2, 0x1, 0x0) r38 = fcntl$dupfd(r37, 0x0, r37) getsockopt$sock_cred(r38, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r39, r39, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r40) r41 = socket$inet_tcp(0x2, 0x1, 0x0) r42 = fcntl$dupfd(r41, 0x0, r41) getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r43, r43, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r44, 0x0) r45 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r46 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r46, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r46, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r39, r40, r43, r44, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r45, r46, 0x5}) setresuid(r36, r36, r39) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r47) socket$inet_tcp(0x2, 0x1, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000380)='/dev/md0\x00', 0x208400, 0x0) r48 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r48, 0x40096102, 0x0) recvmmsg(r48, &(0x7f0000004380)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)=""/110, 0x6e}], 0x1, &(0x7f0000000a80)=""/113, 0x71}, 0x8}, {{&(0x7f0000000b00)=@l2, 0x80, &(0x7f0000002b80)=[{&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/4096, 0x1000}], 0x2, &(0x7f0000002bc0)=""/195, 0xc3}, 0x2}], 0x2, 0x40010121, &(0x7f0000004480)={0x0, 0x1c9c380}) ioctl$ASHMEM_GET_PIN_STATUS(r48, 0x7709, 0x0) syz_open_dev$mice(&(0x7f00000003c0)='/dev/input/mice\x00', 0x0, 0x502001) r49 = socket$nl_generic(0x10, 0x3, 0x10) r50 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r49, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r50, 0x400, 0x8000000, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}}, 0x0) r51 = dup(r49) ioctl$KDADDIO(r51, 0x4b34, 0xffffffffffffffff) r52 = socket$nl_generic(0x10, 0x3, 0x10) r53 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r52, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r53, 0x400, 0x8000000, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}}, 0x0) dup(r52) r54 = fcntl$dupfd(r51, 0x406, r52) getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r55, r55, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r56, 0x0) r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r57, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r36, r47, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5}) r59 = socket$inet_tcp(0x2, 0x1, 0x0) r60 = fcntl$dupfd(r59, 0x0, r59) getsockopt$sock_cred(r60, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r62, r62, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r63) r64 = socket$inet_tcp(0x2, 0x1, 0x0) r65 = fcntl$dupfd(r64, 0x0, r64) getsockopt$sock_cred(r65, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r66, r66, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r67, 0x0) r68 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r68, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r69 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r69, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r69, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r62, r63, r66, r67, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r68, r69, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r47, 0xffffffffffffffff, r67, 0x0, 0xee00]) setregid(r23, r70) r71 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r71, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r33, &(0x7f0000000500), 0x2, &(0x7f0000000280)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r18, r19, r22, r23, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r61, r71, 0x5}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r72) r73 = socket$inet_tcp(0x2, 0x1, 0x0) r74 = fcntl$dupfd(r73, 0x0, r73) getsockopt$sock_cred(r74, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r76 = socket$inet_tcp(0x2, 0x1, 0x0) r77 = fcntl$dupfd(r76, 0x0, r76) getsockopt$sock_cred(r77, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r78, r78, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r79) r80 = socket$inet_tcp(0x2, 0x1, 0x0) r81 = fcntl$dupfd(r80, 0x0, r80) getsockopt$sock_cred(r81, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r82, r82, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r83, 0x0) r84 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r85 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r85, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r85, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r78, r79, r82, r83, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r84, r85, 0x5}) setresuid(r75, r75, r78) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r86) r87 = socket$inet_tcp(0x2, 0x1, 0x0) r88 = fcntl$dupfd(r87, 0x0, r87) getsockopt$sock_cred(r88, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r89, r89, 0x0) stat(&(0x7f00000004c0)='./file1\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r90, 0x0) r91 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r91, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r92 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r92, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r92, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r75, r86, r89, r90, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r91, r92, 0x5}) r93 = socket$inet_tcp(0x2, 0x1, 0x0) r94 = fcntl$dupfd(r93, 0x0, r93) getsockopt$sock_cred(r94, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r95, r95, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r96) r97 = socket$inet_tcp(0x2, 0x1, 0x0) r98 = fcntl$dupfd(r97, 0x0, r97) getsockopt$sock_cred(r98, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r99, r99, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r100, 0x0) r101 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r101, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r102 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r102, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r102, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r95, r96, r99, r100, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r101, r102, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r86, 0xffffffffffffffff, r100, 0x0, 0xee00]) r103 = socket$inet_tcp(0x2, 0x1, 0x0) r104 = fcntl$dupfd(r103, 0x0, r103) getsockopt$sock_cred(r104, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r106 = socket$inet_tcp(0x2, 0x1, 0x0) r107 = fcntl$dupfd(r106, 0x0, r106) getsockopt$sock_cred(r107, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r108, r108, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r109) r110 = socket$inet_tcp(0x2, 0x1, 0x0) r111 = fcntl$dupfd(r110, 0x0, r110) getsockopt$sock_cred(r111, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r112, r112, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r113, 0x0) r114 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r115 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r115, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r115, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r108, r109, r112, r113, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r114, r115, 0x5}) setresuid(r105, r105, r108) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r116) r117 = socket$inet_tcp(0x2, 0x1, 0x0) r118 = fcntl$dupfd(r117, 0x0, r117) getsockopt$sock_cred(r118, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r119, r119, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r120, 0x0) r121 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r121, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r122 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r122, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r122, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r105, r116, r119, r120, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r121, r122, 0x5}) r123 = socket$inet_tcp(0x2, 0x1, 0x0) r124 = fcntl$dupfd(r123, 0x0, r123) getsockopt$sock_cred(r124, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r125, r125, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r126) r127 = socket$inet_tcp(0x2, 0x1, 0x0) r128 = fcntl$dupfd(r127, 0x0, r127) getsockopt$sock_cred(r128, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r129, r129, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r130, 0x0) r131 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r131, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r132 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r132, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r132, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r125, r126, r129, r130, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r131, r132, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r116, 0xffffffffffffffff, r130, 0x0, 0xee00]) getgroups(0x9, &(0x7f00000000c0)=[0xffffffffffffffff, r19, 0xee00, r72, 0xffffffffffffffff, r86, r116, 0xffffffffffffffff, 0xee01]) getresgid(&(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000200)=0x0) r135 = getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r136) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r137) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r138) r139 = socket$inet_tcp(0x2, 0x1, 0x0) r140 = fcntl$dupfd(r139, 0x0, r139) getsockopt$sock_cred(r140, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r141, r141, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r142) r143 = socket$inet_tcp(0x2, 0x1, 0x0) r144 = fcntl$dupfd(r143, 0x0, r143) getsockopt$sock_cred(r144, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r145, r145, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r146, 0x0) r147 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r148 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r148, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r148, &(0x7f0000000580), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r141, r142, r145, r146, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r147, r148, 0x5}) setgroups(0x9, &(0x7f0000000240)=[r12, r133, r134, r135, r136, r137, r138, r146, 0xee00]) 14:25:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000140)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) perf_event_open(&(0x7f0000000000)={0x0, 0xfffffffffffffdb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa, @perf_config_ext, 0x12ce9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:25:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r7, r7, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r8) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r11, r11, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r12, 0x0) r13 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r13, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r14 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r14, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r14, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r7, r8, r11, r12, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r13, r14, 0x5}) getgroups(0x3, &(0x7f00000000c0)=[r12, r4, 0xee00]) r15 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) r16 = socket$inet_tcp(0x2, 0x1, 0x0) r17 = fcntl$dupfd(r15, 0x406, r16) getsockopt$sock_cred(r17, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r18, r18, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r19) r20 = socket$inet_tcp(0x2, 0x1, 0x0) r21 = fcntl$dupfd(r20, 0x0, r20) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r22, r22, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r24 = socket$inet_tcp(0x2, 0x1, 0x0) r25 = fcntl$dupfd(r24, 0x0, r24) getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r26, r26, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27) r28 = socket$inet_tcp(0x2, 0x1, 0x0) r29 = fcntl$dupfd(r28, 0x0, r28) getsockopt$sock_cred(r29, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r30, r30, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r31, 0x0) r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r33 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r33, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r33, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r30, r31, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r32, r33, 0x5}) getgroups(0x3, &(0x7f00000000c0)=[r31, r19, 0xee00]) r34 = socket$inet_tcp(0x2, 0x1, 0x0) r35 = fcntl$dupfd(r34, 0x0, r34) getsockopt$sock_cred(r35, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r37 = socket$inet_tcp(0x2, 0x1, 0x0) r38 = fcntl$dupfd(r37, 0x0, r37) getsockopt$sock_cred(r38, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r39, r39, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r40) r41 = socket$inet_tcp(0x2, 0x1, 0x0) r42 = fcntl$dupfd(r41, 0x0, r41) getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r43, r43, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r44, 0x0) r45 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r46 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r46, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r46, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r39, r40, r43, r44, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r45, r46, 0x5}) setresuid(r36, r36, r39) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r47) socket$inet_tcp(0x2, 0x1, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000380)='/dev/md0\x00', 0x208400, 0x0) r48 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r48, 0x40096102, 0x0) recvmmsg(r48, &(0x7f0000004380)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)=""/110, 0x6e}], 0x1, &(0x7f0000000a80)=""/113, 0x71}, 0x8}, {{&(0x7f0000000b00)=@l2, 0x80, &(0x7f0000002b80)=[{&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/4096, 0x1000}], 0x2, &(0x7f0000002bc0)=""/195, 0xc3}, 0x2}], 0x2, 0x40010121, &(0x7f0000004480)={0x0, 0x1c9c380}) ioctl$ASHMEM_GET_PIN_STATUS(r48, 0x7709, 0x0) syz_open_dev$mice(&(0x7f00000003c0)='/dev/input/mice\x00', 0x0, 0x502001) r49 = socket$nl_generic(0x10, 0x3, 0x10) r50 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r49, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r50, 0x400, 0x8000000, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}}, 0x0) r51 = dup(r49) ioctl$KDADDIO(r51, 0x4b34, 0xffffffffffffffff) r52 = socket$nl_generic(0x10, 0x3, 0x10) r53 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r52, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r53, 0x400, 0x8000000, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}}, 0x0) dup(r52) r54 = fcntl$dupfd(r51, 0x406, r52) getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r55, r55, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r56, 0x0) r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r57, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r36, r47, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5}) r59 = socket$inet_tcp(0x2, 0x1, 0x0) r60 = fcntl$dupfd(r59, 0x0, r59) getsockopt$sock_cred(r60, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r62, r62, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r63) r64 = socket$inet_tcp(0x2, 0x1, 0x0) r65 = fcntl$dupfd(r64, 0x0, r64) getsockopt$sock_cred(r65, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r66, r66, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r67, 0x0) r68 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r68, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r69 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r69, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r69, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r62, r63, r66, r67, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r68, r69, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r47, 0xffffffffffffffff, r67, 0x0, 0xee00]) setregid(r23, r70) r71 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r71, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r33, &(0x7f0000000500), 0x2, &(0x7f0000000280)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r18, r19, r22, r23, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r61, r71, 0x5}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r72) r73 = socket$inet_tcp(0x2, 0x1, 0x0) r74 = fcntl$dupfd(r73, 0x0, r73) getsockopt$sock_cred(r74, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r76 = socket$inet_tcp(0x2, 0x1, 0x0) r77 = fcntl$dupfd(r76, 0x0, r76) getsockopt$sock_cred(r77, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r78, r78, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r79) r80 = socket$inet_tcp(0x2, 0x1, 0x0) r81 = fcntl$dupfd(r80, 0x0, r80) getsockopt$sock_cred(r81, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r82, r82, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r83, 0x0) r84 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r85 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r85, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r85, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r78, r79, r82, r83, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r84, r85, 0x5}) setresuid(r75, r75, r78) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r86) r87 = socket$inet_tcp(0x2, 0x1, 0x0) r88 = fcntl$dupfd(r87, 0x0, r87) getsockopt$sock_cred(r88, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r89, r89, 0x0) stat(&(0x7f00000004c0)='./file1\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r90, 0x0) r91 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r91, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r92 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r92, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r92, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r75, r86, r89, r90, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r91, r92, 0x5}) r93 = socket$inet_tcp(0x2, 0x1, 0x0) r94 = fcntl$dupfd(r93, 0x0, r93) getsockopt$sock_cred(r94, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r95, r95, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r96) r97 = socket$inet_tcp(0x2, 0x1, 0x0) r98 = fcntl$dupfd(r97, 0x0, r97) getsockopt$sock_cred(r98, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r99, r99, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r100, 0x0) r101 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r101, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r102 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r102, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r102, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r95, r96, r99, r100, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r101, r102, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r86, 0xffffffffffffffff, r100, 0x0, 0xee00]) r103 = socket$inet_tcp(0x2, 0x1, 0x0) r104 = fcntl$dupfd(r103, 0x0, r103) getsockopt$sock_cred(r104, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r106 = socket$inet_tcp(0x2, 0x1, 0x0) r107 = fcntl$dupfd(r106, 0x0, r106) getsockopt$sock_cred(r107, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r108, r108, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r109) r110 = socket$inet_tcp(0x2, 0x1, 0x0) r111 = fcntl$dupfd(r110, 0x0, r110) getsockopt$sock_cred(r111, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r112, r112, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r113, 0x0) r114 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r115 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r115, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r115, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r108, r109, r112, r113, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r114, r115, 0x5}) setresuid(r105, r105, r108) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r116) r117 = socket$inet_tcp(0x2, 0x1, 0x0) r118 = fcntl$dupfd(r117, 0x0, r117) getsockopt$sock_cred(r118, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r119, r119, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r120, 0x0) r121 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r121, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r122 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r122, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r122, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r105, r116, r119, r120, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r121, r122, 0x5}) r123 = socket$inet_tcp(0x2, 0x1, 0x0) r124 = fcntl$dupfd(r123, 0x0, r123) getsockopt$sock_cred(r124, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r125, r125, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r126) r127 = socket$inet_tcp(0x2, 0x1, 0x0) r128 = fcntl$dupfd(r127, 0x0, r127) getsockopt$sock_cred(r128, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r129, r129, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r130, 0x0) r131 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r131, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r132 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r132, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r132, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r125, r126, r129, r130, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r131, r132, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r116, 0xffffffffffffffff, r130, 0x0, 0xee00]) getgroups(0x9, &(0x7f00000000c0)=[0xffffffffffffffff, r19, 0xee00, r72, 0xffffffffffffffff, r86, r116, 0xffffffffffffffff, 0xee01]) getresgid(&(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000200)) getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r133) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r134) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r135) r136 = socket$inet_tcp(0x2, 0x1, 0x0) r137 = fcntl$dupfd(r136, 0x0, r136) getsockopt$sock_cred(r137, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r138, r138, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r139) r140 = socket$inet_tcp(0x2, 0x1, 0x0) r141 = fcntl$dupfd(r140, 0x0, r140) getsockopt$sock_cred(r141, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r142, r142, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r143, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r144 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r144, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r144, &(0x7f0000000580), 0x80000004, &(0x7f0000000180)) perf_event_open(&(0x7f0000000000)={0x2, 0xfffffffffffffdb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext={0x9}, 0x12ce9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:25:24 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="020b000007000000000021003f5403620500010001009a934dd520175e3b8f8886264fe600001000e0c99f3d653c00f0ff9da499df0005dc"], 0x38}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x20, 0x0) recvmmsg(r0, &(0x7f0000000140), 0x0, 0x2000000022, 0x0) 14:25:24 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) sendto$inet(r0, &(0x7f0000000400)='s', 0x1, 0x8840, &(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendmmsg(r0, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="7fc61b6d932dbc563145fefc191dbe34ca8e9ecdb27e56bc6ba8809e7cf04caace2b341d936860e16f71d90cf2a63ea103c29cc8aafd0c67226acce150360262eaae8207", 0x44}], 0x1}}], 0x40000a1, 0x0) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f0000001500)=[{0x0}, {&(0x7f0000000440)=""/150, 0x96}], 0x2}}], 0x300, 0x3, 0x0) 14:25:24 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="020b000007000000000021003f5403620500010001009a934dd520175e3b8f8886264fe600001000e0c99f3d653c00f0ff9da499df0005dc"], 0x38}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x20, 0x0) recvmmsg(r0, &(0x7f0000000140), 0x0, 0x2000000022, 0x0) [ 2474.320573][ C1] net_ratelimit: 18 callbacks suppressed [ 2474.326470][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2474.332327][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2474.339038][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2474.345550][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:25:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r7, r7, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r8) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r11, r11, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r12, 0x0) r13 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r13, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r14 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r14, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r14, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r7, r8, r11, r12, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r13, r14, 0x5}) getgroups(0x3, &(0x7f00000000c0)=[r12, r4, 0xee00]) r15 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) r16 = socket$inet_tcp(0x2, 0x1, 0x0) r17 = fcntl$dupfd(r15, 0x406, r16) getsockopt$sock_cred(r17, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r18, r18, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r19) r20 = socket$inet_tcp(0x2, 0x1, 0x0) r21 = fcntl$dupfd(r20, 0x0, r20) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r22, r22, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r24 = socket$inet_tcp(0x2, 0x1, 0x0) r25 = fcntl$dupfd(r24, 0x0, r24) getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r26, r26, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27) r28 = socket$inet_tcp(0x2, 0x1, 0x0) r29 = fcntl$dupfd(r28, 0x0, r28) getsockopt$sock_cred(r29, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r30, r30, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r31, 0x0) r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r33 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r33, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r33, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r30, r31, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r32, r33, 0x5}) getgroups(0x3, &(0x7f00000000c0)=[r31, r19, 0xee00]) r34 = socket$inet_tcp(0x2, 0x1, 0x0) r35 = fcntl$dupfd(r34, 0x0, r34) getsockopt$sock_cred(r35, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r37 = socket$inet_tcp(0x2, 0x1, 0x0) r38 = fcntl$dupfd(r37, 0x0, r37) getsockopt$sock_cred(r38, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r39, r39, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r40) r41 = socket$inet_tcp(0x2, 0x1, 0x0) r42 = fcntl$dupfd(r41, 0x0, r41) getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r43, r43, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r44, 0x0) r45 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r46 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r46, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r46, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r39, r40, r43, r44, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r45, r46, 0x5}) setresuid(r36, r36, r39) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r47) socket$inet_tcp(0x2, 0x1, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000380)='/dev/md0\x00', 0x208400, 0x0) r48 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r48, 0x40096102, 0x0) recvmmsg(r48, &(0x7f0000004380)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)=""/110, 0x6e}], 0x1, &(0x7f0000000a80)=""/113, 0x71}, 0x8}, {{&(0x7f0000000b00)=@l2, 0x80, &(0x7f0000002b80)=[{&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/4096, 0x1000}], 0x2, &(0x7f0000002bc0)=""/195, 0xc3}, 0x2}], 0x2, 0x40010121, &(0x7f0000004480)={0x0, 0x1c9c380}) ioctl$ASHMEM_GET_PIN_STATUS(r48, 0x7709, 0x0) syz_open_dev$mice(&(0x7f00000003c0)='/dev/input/mice\x00', 0x0, 0x502001) r49 = socket$nl_generic(0x10, 0x3, 0x10) r50 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r49, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r50, 0x400, 0x8000000, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}}, 0x0) r51 = dup(r49) ioctl$KDADDIO(r51, 0x4b34, 0xffffffffffffffff) r52 = socket$nl_generic(0x10, 0x3, 0x10) r53 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r52, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r53, 0x400, 0x8000000, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}}, 0x0) dup(r52) r54 = fcntl$dupfd(r51, 0x406, r52) getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r55, r55, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r56, 0x0) r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r57, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r36, r47, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5}) r59 = socket$inet_tcp(0x2, 0x1, 0x0) r60 = fcntl$dupfd(r59, 0x0, r59) getsockopt$sock_cred(r60, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r62, r62, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r63) r64 = socket$inet_tcp(0x2, 0x1, 0x0) r65 = fcntl$dupfd(r64, 0x0, r64) getsockopt$sock_cred(r65, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r66, r66, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r67, 0x0) r68 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r68, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r69 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r69, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r69, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r62, r63, r66, r67, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r68, r69, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r47, 0xffffffffffffffff, r67, 0x0, 0xee00]) setregid(r23, r70) r71 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r71, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r33, &(0x7f0000000500), 0x2, &(0x7f0000000280)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r18, r19, r22, r23, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r61, r71, 0x5}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r72) r73 = socket$inet_tcp(0x2, 0x1, 0x0) r74 = fcntl$dupfd(r73, 0x0, r73) getsockopt$sock_cred(r74, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r76 = socket$inet_tcp(0x2, 0x1, 0x0) r77 = fcntl$dupfd(r76, 0x0, r76) getsockopt$sock_cred(r77, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r78, r78, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r79) r80 = socket$inet_tcp(0x2, 0x1, 0x0) r81 = fcntl$dupfd(r80, 0x0, r80) getsockopt$sock_cred(r81, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r82, r82, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r83, 0x0) r84 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r85 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r85, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r85, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r78, r79, r82, r83, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r84, r85, 0x5}) setresuid(r75, r75, r78) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r86) r87 = socket$inet_tcp(0x2, 0x1, 0x0) r88 = fcntl$dupfd(r87, 0x0, r87) getsockopt$sock_cred(r88, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r89, r89, 0x0) stat(&(0x7f00000004c0)='./file1\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r90, 0x0) r91 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r91, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r92 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r92, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r92, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r75, r86, r89, r90, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r91, r92, 0x5}) r93 = socket$inet_tcp(0x2, 0x1, 0x0) r94 = fcntl$dupfd(r93, 0x0, r93) getsockopt$sock_cred(r94, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r95, r95, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r96) r97 = socket$inet_tcp(0x2, 0x1, 0x0) r98 = fcntl$dupfd(r97, 0x0, r97) getsockopt$sock_cred(r98, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r99, r99, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r100, 0x0) r101 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r101, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r102 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r102, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r102, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r95, r96, r99, r100, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r101, r102, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r86, 0xffffffffffffffff, r100, 0x0, 0xee00]) r103 = socket$inet_tcp(0x2, 0x1, 0x0) r104 = fcntl$dupfd(r103, 0x0, r103) getsockopt$sock_cred(r104, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r106 = socket$inet_tcp(0x2, 0x1, 0x0) r107 = fcntl$dupfd(r106, 0x0, r106) getsockopt$sock_cred(r107, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r108, r108, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r109) r110 = socket$inet_tcp(0x2, 0x1, 0x0) r111 = fcntl$dupfd(r110, 0x0, r110) getsockopt$sock_cred(r111, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r112, r112, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r113, 0x0) r114 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r115 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r115, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r115, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r108, r109, r112, r113, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r114, r115, 0x5}) setresuid(r105, r105, r108) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r116) r117 = socket$inet_tcp(0x2, 0x1, 0x0) r118 = fcntl$dupfd(r117, 0x0, r117) getsockopt$sock_cred(r118, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r119, r119, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r120, 0x0) r121 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r121, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r122 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r122, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r122, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r105, r116, r119, r120, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r121, r122, 0x5}) r123 = socket$inet_tcp(0x2, 0x1, 0x0) r124 = fcntl$dupfd(r123, 0x0, r123) getsockopt$sock_cred(r124, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r125, r125, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r126) r127 = socket$inet_tcp(0x2, 0x1, 0x0) r128 = fcntl$dupfd(r127, 0x0, r127) getsockopt$sock_cred(r128, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r129, r129, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r130, 0x0) r131 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r131, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r132 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r132, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r132, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r125, r126, r129, r130, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r131, r132, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r116, 0xffffffffffffffff, r130, 0x0, 0xee00]) getgroups(0x9, &(0x7f00000000c0)=[0xffffffffffffffff, r19, 0xee00, r72, 0xffffffffffffffff, r86, r116, 0xffffffffffffffff, 0xee01]) getresgid(&(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000200)=0x0) r135 = getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r136) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r137) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r138) r139 = socket$inet_tcp(0x2, 0x1, 0x0) r140 = fcntl$dupfd(r139, 0x0, r139) getsockopt$sock_cred(r140, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r141, r141, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r142) r143 = socket$inet_tcp(0x2, 0x1, 0x0) r144 = fcntl$dupfd(r143, 0x0, r143) getsockopt$sock_cred(r144, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r145, r145, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r146, 0x0) r147 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r148 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r148, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r148, &(0x7f0000000580), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r141, r142, r145, r146, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r147, r148, 0x5}) setgroups(0x9, &(0x7f0000000240)=[r12, r133, r134, r135, r136, r137, r138, r146, 0xee00]) [ 2474.560205][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2474.566009][ C0] protocol 88fb is buggy, dev hsr_slave_1 14:25:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000140)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) perf_event_open(&(0x7f0000000000)={0x0, 0xfffffffffffffdb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa, @perf_config_ext, 0x12ce9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:25:25 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="020b000007000000000021003f5403620500010001009a934dd520175e3b8f8886264fe600001000e0c99f3d653c00f0ff9da499df0005dc"], 0x38}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x20, 0x0) recvmmsg(r0, &(0x7f0000000140), 0x0, 0x2000000022, 0x0) 14:25:25 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) sendto$inet(r0, &(0x7f0000000400)='s', 0x1, 0x8840, &(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendmmsg(r0, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="7fc61b6d932dbc563145fefc191dbe34ca8e9ecdb27e56bc6ba8809e7cf04caace2b341d936860e16f71d90cf2a63ea103c29cc8aafd0c67226acce150360262eaae8207", 0x44}], 0x1}}], 0x40000a1, 0x0) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f0000001500)=[{0x0}, {&(0x7f0000000440)=""/150, 0x96}], 0x2}}], 0x300, 0x3, 0x0) 14:25:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r7, r7, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r8) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r11, r11, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r12, 0x0) r13 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r13, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r14 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r14, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r14, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r7, r8, r11, r12, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r13, r14, 0x5}) getgroups(0x3, &(0x7f00000000c0)=[r12, r4, 0xee00]) r15 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) r16 = socket$inet_tcp(0x2, 0x1, 0x0) r17 = fcntl$dupfd(r15, 0x406, r16) getsockopt$sock_cred(r17, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r18, r18, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r19) r20 = socket$inet_tcp(0x2, 0x1, 0x0) r21 = fcntl$dupfd(r20, 0x0, r20) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r22, r22, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r24 = socket$inet_tcp(0x2, 0x1, 0x0) r25 = fcntl$dupfd(r24, 0x0, r24) getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r26, r26, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27) r28 = socket$inet_tcp(0x2, 0x1, 0x0) r29 = fcntl$dupfd(r28, 0x0, r28) getsockopt$sock_cred(r29, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r30, r30, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r31, 0x0) r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r33 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r33, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r33, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r30, r31, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r32, r33, 0x5}) getgroups(0x3, &(0x7f00000000c0)=[r31, r19, 0xee00]) r34 = socket$inet_tcp(0x2, 0x1, 0x0) r35 = fcntl$dupfd(r34, 0x0, r34) getsockopt$sock_cred(r35, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r37 = socket$inet_tcp(0x2, 0x1, 0x0) r38 = fcntl$dupfd(r37, 0x0, r37) getsockopt$sock_cred(r38, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r39, r39, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r40) r41 = socket$inet_tcp(0x2, 0x1, 0x0) r42 = fcntl$dupfd(r41, 0x0, r41) getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r43, r43, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r44, 0x0) r45 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r46 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r46, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r46, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r39, r40, r43, r44, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r45, r46, 0x5}) setresuid(r36, r36, r39) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r47) socket$inet_tcp(0x2, 0x1, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000380)='/dev/md0\x00', 0x208400, 0x0) r48 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r48, 0x40096102, 0x0) recvmmsg(r48, &(0x7f0000004380)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)=""/110, 0x6e}], 0x1, &(0x7f0000000a80)=""/113, 0x71}, 0x8}, {{&(0x7f0000000b00)=@l2, 0x80, &(0x7f0000002b80)=[{&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/4096, 0x1000}], 0x2, &(0x7f0000002bc0)=""/195, 0xc3}, 0x2}], 0x2, 0x40010121, &(0x7f0000004480)={0x0, 0x1c9c380}) ioctl$ASHMEM_GET_PIN_STATUS(r48, 0x7709, 0x0) syz_open_dev$mice(&(0x7f00000003c0)='/dev/input/mice\x00', 0x0, 0x502001) r49 = socket$nl_generic(0x10, 0x3, 0x10) r50 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r49, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r50, 0x400, 0x8000000, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}}, 0x0) r51 = dup(r49) ioctl$KDADDIO(r51, 0x4b34, 0xffffffffffffffff) r52 = socket$nl_generic(0x10, 0x3, 0x10) r53 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r52, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r53, 0x400, 0x8000000, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}}, 0x0) dup(r52) r54 = fcntl$dupfd(r51, 0x406, r52) getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r55, r55, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r56, 0x0) r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r57, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r36, r47, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5}) r59 = socket$inet_tcp(0x2, 0x1, 0x0) r60 = fcntl$dupfd(r59, 0x0, r59) getsockopt$sock_cred(r60, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r62, r62, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r63) r64 = socket$inet_tcp(0x2, 0x1, 0x0) r65 = fcntl$dupfd(r64, 0x0, r64) getsockopt$sock_cred(r65, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r66, r66, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r67, 0x0) r68 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r68, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r69 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r69, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r69, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r62, r63, r66, r67, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r68, r69, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r47, 0xffffffffffffffff, r67, 0x0, 0xee00]) setregid(r23, r70) r71 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r71, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r33, &(0x7f0000000500), 0x2, &(0x7f0000000280)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r18, r19, r22, r23, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r61, r71, 0x5}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r72) r73 = socket$inet_tcp(0x2, 0x1, 0x0) r74 = fcntl$dupfd(r73, 0x0, r73) getsockopt$sock_cred(r74, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r76 = socket$inet_tcp(0x2, 0x1, 0x0) r77 = fcntl$dupfd(r76, 0x0, r76) getsockopt$sock_cred(r77, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r78, r78, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r79) r80 = socket$inet_tcp(0x2, 0x1, 0x0) r81 = fcntl$dupfd(r80, 0x0, r80) getsockopt$sock_cred(r81, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r82, r82, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r83, 0x0) r84 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r85 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r85, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r85, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r78, r79, r82, r83, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r84, r85, 0x5}) setresuid(r75, r75, r78) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r86) r87 = socket$inet_tcp(0x2, 0x1, 0x0) r88 = fcntl$dupfd(r87, 0x0, r87) getsockopt$sock_cred(r88, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r89, r89, 0x0) stat(&(0x7f00000004c0)='./file1\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r90, 0x0) r91 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r91, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r92 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r92, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r92, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r75, r86, r89, r90, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r91, r92, 0x5}) r93 = socket$inet_tcp(0x2, 0x1, 0x0) r94 = fcntl$dupfd(r93, 0x0, r93) getsockopt$sock_cred(r94, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r95, r95, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r96) r97 = socket$inet_tcp(0x2, 0x1, 0x0) r98 = fcntl$dupfd(r97, 0x0, r97) getsockopt$sock_cred(r98, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r99, r99, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r100, 0x0) r101 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r101, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r102 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r102, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r102, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r95, r96, r99, r100, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r101, r102, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r86, 0xffffffffffffffff, r100, 0x0, 0xee00]) r103 = socket$inet_tcp(0x2, 0x1, 0x0) r104 = fcntl$dupfd(r103, 0x0, r103) getsockopt$sock_cred(r104, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r106 = socket$inet_tcp(0x2, 0x1, 0x0) r107 = fcntl$dupfd(r106, 0x0, r106) getsockopt$sock_cred(r107, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r108, r108, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r109) r110 = socket$inet_tcp(0x2, 0x1, 0x0) r111 = fcntl$dupfd(r110, 0x0, r110) getsockopt$sock_cred(r111, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r112, r112, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r113, 0x0) r114 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r115 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r115, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r115, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r108, r109, r112, r113, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r114, r115, 0x5}) setresuid(r105, r105, r108) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r116) r117 = socket$inet_tcp(0x2, 0x1, 0x0) r118 = fcntl$dupfd(r117, 0x0, r117) getsockopt$sock_cred(r118, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r119, r119, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r120, 0x0) r121 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r121, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r122 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r122, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r122, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r105, r116, r119, r120, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r121, r122, 0x5}) r123 = socket$inet_tcp(0x2, 0x1, 0x0) r124 = fcntl$dupfd(r123, 0x0, r123) getsockopt$sock_cred(r124, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r125, r125, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r126) r127 = socket$inet_tcp(0x2, 0x1, 0x0) r128 = fcntl$dupfd(r127, 0x0, r127) getsockopt$sock_cred(r128, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r129, r129, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r130, 0x0) r131 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r131, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r132 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r132, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r132, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r125, r126, r129, r130, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r131, r132, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r116, 0xffffffffffffffff, r130, 0x0, 0xee00]) getgroups(0x9, &(0x7f00000000c0)=[0xffffffffffffffff, r19, 0xee00, r72, 0xffffffffffffffff, r86, r116, 0xffffffffffffffff, 0xee01]) getresgid(&(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000200)=0x0) r135 = getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r136) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r137) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r138) r139 = socket$inet_tcp(0x2, 0x1, 0x0) r140 = fcntl$dupfd(r139, 0x0, r139) getsockopt$sock_cred(r140, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r141, r141, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r142) r143 = socket$inet_tcp(0x2, 0x1, 0x0) r144 = fcntl$dupfd(r143, 0x0, r143) getsockopt$sock_cred(r144, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r145, r145, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r146, 0x0) r147 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r148 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r148, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r148, &(0x7f0000000580), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r141, r142, r145, r146, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r147, r148, 0x5}) setgroups(0x9, &(0x7f0000000240)=[r12, r133, r134, r135, r136, r137, r138, r146, 0xee00]) [ 2475.040206][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2475.045985][ C0] protocol 88fb is buggy, dev hsr_slave_1 14:25:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r7, r7, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r8) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r11, r11, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r12, 0x0) r13 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r13, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r14 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r14, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r14, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r7, r8, r11, r12, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r13, r14, 0x5}) getgroups(0x3, &(0x7f00000000c0)=[r12, r4, 0xee00]) r15 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) r16 = socket$inet_tcp(0x2, 0x1, 0x0) r17 = fcntl$dupfd(r15, 0x406, r16) getsockopt$sock_cred(r17, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r18, r18, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r19) r20 = socket$inet_tcp(0x2, 0x1, 0x0) r21 = fcntl$dupfd(r20, 0x0, r20) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r22, r22, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r24 = socket$inet_tcp(0x2, 0x1, 0x0) r25 = fcntl$dupfd(r24, 0x0, r24) getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r26, r26, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27) r28 = socket$inet_tcp(0x2, 0x1, 0x0) r29 = fcntl$dupfd(r28, 0x0, r28) getsockopt$sock_cred(r29, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r30, r30, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r31, 0x0) r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r33 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r33, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r33, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r30, r31, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r32, r33, 0x5}) getgroups(0x3, &(0x7f00000000c0)=[r31, r19, 0xee00]) r34 = socket$inet_tcp(0x2, 0x1, 0x0) r35 = fcntl$dupfd(r34, 0x0, r34) getsockopt$sock_cred(r35, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r37 = socket$inet_tcp(0x2, 0x1, 0x0) r38 = fcntl$dupfd(r37, 0x0, r37) getsockopt$sock_cred(r38, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r39, r39, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r40) r41 = socket$inet_tcp(0x2, 0x1, 0x0) r42 = fcntl$dupfd(r41, 0x0, r41) getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r43, r43, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r44, 0x0) r45 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r46 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r46, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r46, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r39, r40, r43, r44, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r45, r46, 0x5}) setresuid(r36, r36, r39) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r47) socket$inet_tcp(0x2, 0x1, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000380)='/dev/md0\x00', 0x208400, 0x0) r48 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r48, 0x40096102, 0x0) recvmmsg(r48, &(0x7f0000004380)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)=""/110, 0x6e}], 0x1, &(0x7f0000000a80)=""/113, 0x71}, 0x8}, {{&(0x7f0000000b00)=@l2, 0x80, &(0x7f0000002b80)=[{&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/4096, 0x1000}], 0x2, &(0x7f0000002bc0)=""/195, 0xc3}, 0x2}], 0x2, 0x40010121, &(0x7f0000004480)={0x0, 0x1c9c380}) ioctl$ASHMEM_GET_PIN_STATUS(r48, 0x7709, 0x0) syz_open_dev$mice(&(0x7f00000003c0)='/dev/input/mice\x00', 0x0, 0x502001) r49 = socket$nl_generic(0x10, 0x3, 0x10) r50 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r49, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r50, 0x400, 0x8000000, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}}, 0x0) r51 = dup(r49) ioctl$KDADDIO(r51, 0x4b34, 0xffffffffffffffff) r52 = socket$nl_generic(0x10, 0x3, 0x10) r53 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r52, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r53, 0x400, 0x8000000, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}}, 0x0) dup(r52) r54 = fcntl$dupfd(r51, 0x406, r52) getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r55, r55, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r56, 0x0) r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r57, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r36, r47, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5}) r59 = socket$inet_tcp(0x2, 0x1, 0x0) r60 = fcntl$dupfd(r59, 0x0, r59) getsockopt$sock_cred(r60, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r62, r62, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r63) r64 = socket$inet_tcp(0x2, 0x1, 0x0) r65 = fcntl$dupfd(r64, 0x0, r64) getsockopt$sock_cred(r65, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r66, r66, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r67, 0x0) r68 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r68, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r69 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r69, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r69, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r62, r63, r66, r67, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r68, r69, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r47, 0xffffffffffffffff, r67, 0x0, 0xee00]) setregid(r23, r70) r71 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r71, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r33, &(0x7f0000000500), 0x2, &(0x7f0000000280)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r18, r19, r22, r23, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r61, r71, 0x5}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r72) r73 = socket$inet_tcp(0x2, 0x1, 0x0) r74 = fcntl$dupfd(r73, 0x0, r73) getsockopt$sock_cred(r74, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r76 = socket$inet_tcp(0x2, 0x1, 0x0) r77 = fcntl$dupfd(r76, 0x0, r76) getsockopt$sock_cred(r77, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r78, r78, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r79) r80 = socket$inet_tcp(0x2, 0x1, 0x0) r81 = fcntl$dupfd(r80, 0x0, r80) getsockopt$sock_cred(r81, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r82, r82, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r83, 0x0) r84 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r85 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r85, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r85, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r78, r79, r82, r83, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r84, r85, 0x5}) setresuid(r75, r75, r78) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r86) r87 = socket$inet_tcp(0x2, 0x1, 0x0) r88 = fcntl$dupfd(r87, 0x0, r87) getsockopt$sock_cred(r88, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r89, r89, 0x0) stat(&(0x7f00000004c0)='./file1\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r90, 0x0) r91 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r91, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r92 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r92, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r92, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r75, r86, r89, r90, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r91, r92, 0x5}) r93 = socket$inet_tcp(0x2, 0x1, 0x0) r94 = fcntl$dupfd(r93, 0x0, r93) getsockopt$sock_cred(r94, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r95, r95, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r96) r97 = socket$inet_tcp(0x2, 0x1, 0x0) r98 = fcntl$dupfd(r97, 0x0, r97) getsockopt$sock_cred(r98, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r99, r99, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r100, 0x0) r101 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r101, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r102 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r102, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r102, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r95, r96, r99, r100, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r101, r102, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r86, 0xffffffffffffffff, r100, 0x0, 0xee00]) r103 = socket$inet_tcp(0x2, 0x1, 0x0) r104 = fcntl$dupfd(r103, 0x0, r103) getsockopt$sock_cred(r104, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r106 = socket$inet_tcp(0x2, 0x1, 0x0) r107 = fcntl$dupfd(r106, 0x0, r106) getsockopt$sock_cred(r107, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r108, r108, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r109) r110 = socket$inet_tcp(0x2, 0x1, 0x0) r111 = fcntl$dupfd(r110, 0x0, r110) getsockopt$sock_cred(r111, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r112, r112, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r113, 0x0) r114 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r115 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r115, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r115, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r108, r109, r112, r113, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r114, r115, 0x5}) setresuid(r105, r105, r108) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r116) r117 = socket$inet_tcp(0x2, 0x1, 0x0) r118 = fcntl$dupfd(r117, 0x0, r117) getsockopt$sock_cred(r118, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r119, r119, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r120, 0x0) r121 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r121, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r122 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r122, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r122, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r105, r116, r119, r120, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r121, r122, 0x5}) r123 = socket$inet_tcp(0x2, 0x1, 0x0) r124 = fcntl$dupfd(r123, 0x0, r123) getsockopt$sock_cred(r124, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r125, r125, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r126) r127 = socket$inet_tcp(0x2, 0x1, 0x0) r128 = fcntl$dupfd(r127, 0x0, r127) getsockopt$sock_cred(r128, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r129, r129, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r130, 0x0) r131 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r131, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r132 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r132, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r132, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r125, r126, r129, r130, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r131, r132, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r116, 0xffffffffffffffff, r130, 0x0, 0xee00]) getgroups(0x9, &(0x7f00000000c0)=[0xffffffffffffffff, r19, 0xee00, r72, 0xffffffffffffffff, r86, r116, 0xffffffffffffffff, 0xee01]) getresgid(&(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000200)=0x0) r135 = getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r136) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r137) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r138) r139 = socket$inet_tcp(0x2, 0x1, 0x0) r140 = fcntl$dupfd(r139, 0x0, r139) getsockopt$sock_cred(r140, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r141, r141, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r142) r143 = socket$inet_tcp(0x2, 0x1, 0x0) r144 = fcntl$dupfd(r143, 0x0, r143) getsockopt$sock_cred(r144, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r145, r145, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r146, 0x0) r147 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r148 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r148, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r148, &(0x7f0000000580), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r141, r142, r145, r146, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r147, r148, 0x5}) setgroups(0x9, &(0x7f0000000240)=[r12, r133, r134, r135, r136, r137, r138, r146, 0xee00]) [ 2475.280929][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2475.287360][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2475.304144][ T8328] QAT: failed to copy from user cfg_data. [ 2475.314302][ T8328] QAT: Invalid ioctl [ 2475.334421][ T8328] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2475.346910][ T8328] CPU: 0 PID: 8328 Comm: syz-executor.1 Not tainted 5.5.0-rc1-syzkaller #0 [ 2475.356022][ T8328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2475.366135][ T8328] Call Trace: [ 2475.369440][ T8328] dump_stack+0x11d/0x181 [ 2475.373789][ T8328] dump_header+0xaa/0x39c [ 2475.378256][ T8328] oom_kill_process.cold+0x10/0x15 [ 2475.383421][ T8328] out_of_memory+0x231/0xa60 [ 2475.388161][ T8328] mem_cgroup_out_of_memory+0x128/0x150 [ 2475.393869][ T8328] try_charge+0xb6c/0xbf0 [ 2475.398223][ T8328] ? __rcu_read_unlock+0x66/0x3d0 [ 2475.403344][ T8328] __memcg_kmem_charge_memcg+0x4a/0xe0 [ 2475.408924][ T8328] __memcg_kmem_charge+0xcf/0x1b0 [ 2475.414066][ T8328] __alloc_pages_nodemask+0x26c/0x310 [ 2475.419465][ T8328] alloc_pages_current+0xd1/0x170 [ 2475.424552][ T8328] pte_alloc_one+0x18/0x50 [ 2475.428985][ T8328] __pte_alloc+0x2d/0x220 [ 2475.433330][ T8328] copy_page_range+0x135a/0x19b0 [ 2475.438389][ T8328] ? __vma_link_rb+0x3f4/0x440 [ 2475.443233][ T8328] dup_mm+0x74a/0xba0 [ 2475.447318][ T8328] copy_process+0x3138/0x3c40 [ 2475.452033][ T8328] _do_fork+0xfe/0x7a0 [ 2475.456130][ T8328] __do_sys_clone3+0x1bd/0x260 [ 2475.461162][ T8328] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 2475.466889][ T8328] ? _copy_to_user+0x84/0xb0 [ 2475.471490][ T8328] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2475.477743][ T8328] ? put_timespec64+0x94/0xc0 [ 2475.482450][ T8328] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2475.488845][ T8328] __x64_sys_clone3+0x3a/0x50 [ 2475.493611][ T8328] do_syscall_64+0xcc/0x3a0 [ 2475.498252][ T8328] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2475.504212][ T8328] RIP: 0033:0x45b349 [ 2475.508133][ T8328] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2475.527868][ T8328] RSP: 002b:00007fedcbcd0c78 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2475.536317][ T8328] RAX: ffffffffffffffda RBX: 00007fedcbcd16d4 RCX: 000000000045b349 [ 2475.544406][ T8328] RDX: 0000000000000000 RSI: 0000000000000040 RDI: 0000000020001680 [ 2475.552408][ T8328] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2475.560389][ T8328] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2475.568369][ T8328] R13: 0000000000000071 R14: 00000000004c1bca R15: 000000000075bf2c [ 2475.612640][ T8328] memory: usage 307200kB, limit 307200kB, failcnt 6456 [ 2475.642376][ T8328] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2475.672651][ T8328] Memory cgroup stats for /syz1: [ 2475.672934][ T8328] anon 277680128 [ 2475.672934][ T8328] file 24576 [ 2475.672934][ T8328] kernel_stack 2912256 [ 2475.672934][ T8328] slab 9506816 [ 2475.672934][ T8328] sock 36864 [ 2475.672934][ T8328] shmem 0 [ 2475.672934][ T8328] file_mapped 135168 [ 2475.672934][ T8328] file_dirty 135168 [ 2475.672934][ T8328] file_writeback 0 [ 2475.672934][ T8328] anon_thp 255852544 [ 2475.672934][ T8328] inactive_anon 135168 [ 2475.672934][ T8328] active_anon 277561344 [ 2475.672934][ T8328] inactive_file 0 [ 2475.672934][ T8328] active_file 49152 [ 2475.672934][ T8328] unevictable 0 [ 2475.672934][ T8328] slab_reclaimable 1757184 [ 2475.672934][ T8328] slab_unreclaimable 7749632 [ 2475.672934][ T8328] pgfault 233145 [ 2475.672934][ T8328] pgmajfault 0 [ 2475.672934][ T8328] workingset_refault 0 [ 2475.672934][ T8328] workingset_activate 0 [ 2475.672934][ T8328] workingset_nodereclaim 0 [ 2475.672934][ T8328] pgrefill 322 [ 2475.672934][ T8328] pgscan 23160 [ 2475.672934][ T8328] pgsteal 22610 [ 2475.869930][ T8328] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=8021,uid=0 [ 2476.055628][ T8328] Memory cgroup out of memory: Killed process 8021 (syz-executor.1) total-vm:72848kB, anon-rss:4280kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:1000 [ 2476.079437][ T929] oom_reaper: reaped process 8021 (syz-executor.1), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 2476.164694][ T8321] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2476.224804][ T8321] CPU: 0 PID: 8321 Comm: syz-executor.1 Not tainted 5.5.0-rc1-syzkaller #0 [ 2476.233429][ T8321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2476.243592][ T8321] Call Trace: [ 2476.246894][ T8321] dump_stack+0x11d/0x181 [ 2476.251248][ T8321] dump_header+0xaa/0x39c [ 2476.255603][ T8321] oom_kill_process.cold+0x10/0x15 [ 2476.260955][ T8321] out_of_memory+0x231/0xa60 [ 2476.265571][ T8321] mem_cgroup_out_of_memory+0x128/0x150 [ 2476.271327][ T8321] try_charge+0xb6c/0xbf0 [ 2476.275752][ T8321] ? rcu_note_context_switch+0x720/0x760 [ 2476.281414][ T8321] mem_cgroup_try_charge+0xd2/0x260 [ 2476.286662][ T8321] mem_cgroup_try_charge_delay+0x3a/0x80 [ 2476.292352][ T8321] wp_page_copy+0x322/0x1040 [ 2476.297055][ T8321] ? get_futex_key+0x55e/0xa10 [ 2476.301845][ T8321] ? __read_once_size+0x41/0xe0 [ 2476.306718][ T8321] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 2476.312638][ T8321] do_wp_page+0x192/0xeb0 [ 2476.316983][ T8321] __handle_mm_fault+0x1d16/0x2e00 [ 2476.322129][ T8321] ? try_to_free_mem_cgroup_pages+0x258/0x4d0 [ 2476.328247][ T8321] handle_mm_fault+0x21b/0x530 [ 2476.333034][ T8321] __do_page_fault+0x456/0x8d0 [ 2476.337833][ T8321] do_page_fault+0x38/0x194 [ 2476.342418][ T8321] page_fault+0x34/0x40 [ 2476.346712][ T8321] RIP: 0033:0x41240c [ 2476.350625][ T8321] Code: 66 00 48 f7 d0 49 21 c5 4b 8d 8c 28 00 08 00 00 4c 89 ad 70 ff ff ff 48 21 c8 48 39 c3 0f 82 1b 04 00 00 be 01 00 00 00 31 c0 0f b1 35 84 02 66 00 74 1a 48 8d 3d 7b 02 66 00 48 81 ec 80 00 [ 2476.371307][ T8321] RSP: 002b:00007ffda533dbe0 EFLAGS: 00010246 [ 2476.377434][ T8321] RAX: 0000000000000000 RBX: 0000000000020000 RCX: 0000000000003a3f [ 2476.385542][ T8321] RDX: 0000000000001000 RSI: 0000000000000001 RDI: 00007ffda533dd98 [ 2476.393566][ T8321] RBP: 00007ffda533dcc0 R08: 000000000000223f R09: ffffffffffffffff [ 2476.401685][ T8321] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffda533ddb0 [ 2476.409670][ T8321] R13: 0000000000001000 R14: 0000000000000002 R15: 000000000075c07c [ 2476.600216][ T8321] memory: usage 307060kB, limit 307200kB, failcnt 6501 [ 2476.607148][ T8321] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2476.630479][ T8321] Memory cgroup stats for /syz1: [ 2476.630744][ T8321] anon 277680128 [ 2476.630744][ T8321] file 24576 [ 2476.630744][ T8321] kernel_stack 2912256 [ 2476.630744][ T8321] slab 9506816 [ 2476.630744][ T8321] sock 36864 [ 2476.630744][ T8321] shmem 0 [ 2476.630744][ T8321] file_mapped 135168 [ 2476.630744][ T8321] file_dirty 135168 [ 2476.630744][ T8321] file_writeback 0 [ 2476.630744][ T8321] anon_thp 255852544 [ 2476.630744][ T8321] inactive_anon 135168 [ 2476.630744][ T8321] active_anon 277561344 [ 2476.630744][ T8321] inactive_file 0 [ 2476.630744][ T8321] active_file 49152 [ 2476.630744][ T8321] unevictable 0 [ 2476.630744][ T8321] slab_reclaimable 1757184 [ 2476.630744][ T8321] slab_unreclaimable 7749632 [ 2476.630744][ T8321] pgfault 233145 [ 2476.630744][ T8321] pgmajfault 0 [ 2476.630744][ T8321] workingset_refault 0 [ 2476.630744][ T8321] workingset_activate 0 [ 2476.630744][ T8321] workingset_nodereclaim 0 [ 2476.630744][ T8321] pgrefill 322 [ 2476.630744][ T8321] pgscan 23160 [ 2476.630744][ T8321] pgsteal 22610 [ 2476.667329][ T8330] QAT: failed to copy from user cfg_data. [ 2476.737293][ T8448] QAT: Invalid ioctl [ 2476.773335][ T8321] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=8018,uid=0 [ 2476.789422][ T8321] Memory cgroup out of memory: Killed process 8018 (syz-executor.1) total-vm:72848kB, anon-rss:4280kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:1000 [ 2476.814480][ T929] oom_reaper: reaped process 8018 (syz-executor.1), now anon-rss:0kB, file-rss:34688kB, shmem-rss:0kB [ 2476.932188][ T8336] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2476.968627][ T8336] CPU: 0 PID: 8336 Comm: syz-executor.1 Not tainted 5.5.0-rc1-syzkaller #0 [ 2476.977253][ T8336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2476.987354][ T8336] Call Trace: [ 2476.990780][ T8336] dump_stack+0x11d/0x181 [ 2476.996709][ T8336] dump_header+0xaa/0x39c [ 2477.001096][ T8336] oom_kill_process.cold+0x10/0x15 [ 2477.006300][ T8336] out_of_memory+0x231/0xa60 [ 2477.010993][ T8336] mem_cgroup_out_of_memory+0x128/0x150 [ 2477.016580][ T8336] try_charge+0x800/0xbf0 [ 2477.020928][ T8336] ? irq_work_interrupt+0xa/0x20 [ 2477.025975][ T8336] ? rcu_note_context_switch+0x720/0x760 [ 2477.031674][ T8336] mem_cgroup_try_charge+0xd2/0x260 [ 2477.037050][ T8336] mem_cgroup_try_charge_delay+0x3a/0x80 [ 2477.042718][ T8336] wp_page_copy+0x322/0x1040 [ 2477.047329][ T8336] ? __read_once_size+0x41/0xe0 [ 2477.052217][ T8336] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 2477.058215][ T8336] do_wp_page+0x192/0xeb0 [ 2477.062664][ T8336] ? __sanitizer_cov_trace_pc+0x14/0x50 [ 2477.068292][ T8336] __handle_mm_fault+0x1d16/0x2e00 [ 2477.073545][ T8336] handle_mm_fault+0x21b/0x530 [ 2477.078344][ T8336] __do_page_fault+0x456/0x8d0 [ 2477.083208][ T8336] do_page_fault+0x38/0x194 [ 2477.087750][ T8336] page_fault+0x34/0x40 [ 2477.091984][ T8336] RIP: 0033:0x403f80 [ 2477.095903][ T8336] Code: 80 3d fb e6 66 00 00 c6 85 84 00 00 00 00 74 0f 8b 05 e8 e6 66 00 39 45 24 0f 84 46 02 00 00 44 8b a5 80 00 00 00 48 8b 5d 78 fb e6 ff ff 48 2b 05 84 40 33 00 8b 75 00 4c 89 f1 45 89 e1 49 [ 2477.115821][ T8336] RSP: 002b:00007fedcbcafc90 EFLAGS: 00010246 [ 2477.121918][ T8336] RAX: 00007fedcdad2000 RBX: 0000000000002a41 RCX: 0000000000000000 [ 2477.129903][ T8336] RDX: 000000000003ffff RSI: 0000000000403ecc RDI: 0000000020001680 [ 2477.137891][ T8336] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 2477.145996][ T8336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2477.153983][ T8336] R13: 0000000000000071 R14: 00000000004c1bca R15: 000000000075bfd4 [ 2477.165768][ T8567] QAT: failed to copy from user cfg_data. [ 2477.220751][ T8567] QAT: Invalid ioctl [ 2477.439486][ T8336] memory: usage 305872kB, limit 307200kB, failcnt 6501 [ 2477.447698][ T8336] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2477.455421][ T8336] Memory cgroup stats for /syz1: [ 2477.458697][ T8336] anon 277368832 [ 2477.458697][ T8336] file 24576 [ 2477.458697][ T8336] kernel_stack 2838528 [ 2477.458697][ T8336] slab 9506816 [ 2477.458697][ T8336] sock 36864 [ 2477.458697][ T8336] shmem 0 [ 2477.458697][ T8336] file_mapped 135168 [ 2477.458697][ T8336] file_dirty 135168 [ 2477.458697][ T8336] file_writeback 0 [ 2477.458697][ T8336] anon_thp 255852544 [ 2477.458697][ T8336] inactive_anon 135168 [ 2477.458697][ T8336] active_anon 277426176 [ 2477.458697][ T8336] inactive_file 0 [ 2477.458697][ T8336] active_file 49152 [ 2477.458697][ T8336] unevictable 0 [ 2477.458697][ T8336] slab_reclaimable 1757184 [ 2477.458697][ T8336] slab_unreclaimable 7749632 [ 2477.458697][ T8336] pgfault 233178 [ 2477.458697][ T8336] pgmajfault 0 [ 2477.458697][ T8336] workingset_refault 0 [ 2477.458697][ T8336] workingset_activate 0 [ 2477.458697][ T8336] workingset_nodereclaim 0 [ 2477.458697][ T8336] pgrefill 322 [ 2477.458697][ T8336] pgscan 23160 [ 2477.458697][ T8336] pgsteal 22610 [ 2477.605723][ T8336] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=8016,uid=0 [ 2477.625938][ T8336] Memory cgroup out of memory: Killed process 8016 (syz-executor.1) total-vm:72848kB, anon-rss:4280kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:1000 [ 2477.670792][ T8448] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2477.722466][ T8448] CPU: 1 PID: 8448 Comm: syz-executor.2 Not tainted 5.5.0-rc1-syzkaller #0 [ 2477.731094][ T8448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2477.741270][ T8448] Call Trace: [ 2477.744588][ T8448] dump_stack+0x11d/0x181 [ 2477.748945][ T8448] dump_header+0xaa/0x39c [ 2477.753337][ T8448] oom_kill_process.cold+0x10/0x15 [ 2477.758480][ T8448] out_of_memory+0x231/0xa60 [ 2477.763176][ T8448] mem_cgroup_out_of_memory+0x128/0x150 [ 2477.768786][ T8448] try_charge+0xb6c/0xbf0 [ 2477.773177][ T8448] ? rcu_note_context_switch+0x720/0x760 [ 2477.778914][ T8448] mem_cgroup_try_charge+0xd2/0x260 [ 2477.784138][ T8448] mem_cgroup_try_charge_delay+0x3a/0x80 [ 2477.789907][ T8448] wp_page_copy+0x322/0x1040 [ 2477.794588][ T8448] ? __read_once_size+0x41/0xe0 [ 2477.799513][ T8448] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 2477.805434][ T8448] do_wp_page+0x192/0xeb0 [ 2477.809788][ T8448] ? record_times+0x16/0x90 [ 2477.814378][ T8448] __handle_mm_fault+0x1d16/0x2e00 [ 2477.819620][ T8448] handle_mm_fault+0x21b/0x530 [ 2477.824415][ T8448] __do_page_fault+0x456/0x8d0 [ 2477.829319][ T8448] do_page_fault+0x38/0x194 [ 2477.833879][ T8448] page_fault+0x34/0x40 [ 2477.838160][ T8448] RIP: 0033:0x40419e [ 2477.842076][ T8448] Code: 48 dc ff ff 0f 1f 84 00 00 00 00 00 0f b6 b5 84 00 00 00 bf 61 02 4c 00 31 c0 e8 0d dd ff ff e9 30 fe ff ff 8b 0b 48 83 f8 ff <48> 89 45 78 89 8d 80 00 00 00 0f 85 8d fd ff ff 85 c9 0f 85 85 fd [ 2477.861795][ T8448] RSP: 002b:00007f96d7fa3c90 EFLAGS: 00010217 [ 2477.867874][ T8448] RAX: 00000000000025d0 RBX: 00007f96d7fa46d4 RCX: 0000000000000000 [ 2477.875892][ T8448] RDX: 0000000000000001 RSI: 0000000000403ecc RDI: 0000000020001680 [ 2477.883977][ T8448] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 2477.892046][ T8448] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2477.900036][ T8448] R13: 0000000000000071 R14: 00000000004c1bca R15: 000000000075bfd4 [ 2477.935580][ T8448] memory: usage 307200kB, limit 307200kB, failcnt 274 [ 2477.942982][ T8448] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2477.950004][ T8448] Memory cgroup stats for /syz2: [ 2477.953809][ T8448] anon 281976832 [ 2477.953809][ T8448] file 40960 [ 2477.953809][ T8448] kernel_stack 2322432 [ 2477.953809][ T8448] slab 8671232 [ 2477.953809][ T8448] sock 172032 [ 2477.953809][ T8448] shmem 69632 [ 2477.953809][ T8448] file_mapped 0 [ 2477.953809][ T8448] file_dirty 0 [ 2477.953809][ T8448] file_writeback 0 [ 2477.953809][ T8448] anon_thp 268435456 [ 2477.953809][ T8448] inactive_anon 176128 [ 2477.953809][ T8448] active_anon 281976832 [ 2477.953809][ T8448] inactive_file 0 [ 2477.953809][ T8448] active_file 94208 [ 2477.953809][ T8448] unevictable 36864 [ 2477.953809][ T8448] slab_reclaimable 1216512 [ 2477.953809][ T8448] slab_unreclaimable 7454720 [ 2477.953809][ T8448] pgfault 253671 [ 2477.953809][ T8448] pgmajfault 0 [ 2477.953809][ T8448] workingset_refault 0 [ 2477.953809][ T8448] workingset_activate 0 [ 2477.953809][ T8448] workingset_nodereclaim 0 [ 2477.953809][ T8448] pgrefill 338 [ 2477.953809][ T8448] pgscan 338 [ 2477.953809][ T8448] pgsteal 36 [ 2478.061991][ T8448] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=8318,uid=0 [ 2478.082526][ T8448] Memory cgroup out of memory: Killed process 8318 (syz-executor.2) total-vm:72848kB, anon-rss:4272kB, file-rss:35824kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 2478.112059][ T929] oom_reaper: reaped process 8318 (syz-executor.2), now anon-rss:0kB, file-rss:34932kB, shmem-rss:0kB [ 2478.139793][ T8697] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2478.211629][ T8697] CPU: 1 PID: 8697 Comm: syz-executor.2 Not tainted 5.5.0-rc1-syzkaller #0 [ 2478.220350][ T8697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2478.230417][ T8697] Call Trace: [ 2478.233766][ T8697] dump_stack+0x11d/0x181 [ 2478.238149][ T8697] dump_header+0xaa/0x39c [ 2478.242573][ T8697] oom_kill_process.cold+0x10/0x15 [ 2478.247718][ T8697] out_of_memory+0x231/0xa60 [ 2478.252443][ T8697] mem_cgroup_out_of_memory+0x128/0x150 [ 2478.258043][ T8697] try_charge+0x800/0xbf0 [ 2478.262401][ T8697] ? rcu_note_context_switch+0x720/0x760 [ 2478.268133][ T8697] mem_cgroup_try_charge+0xd2/0x260 [ 2478.273480][ T8697] mem_cgroup_try_charge_delay+0x3a/0x80 [ 2478.279148][ T8697] wp_page_copy+0x322/0x1040 [ 2478.283853][ T8697] ? __read_once_size+0x41/0xe0 [ 2478.288782][ T8697] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 2478.294696][ T8697] do_wp_page+0x192/0xeb0 [ 2478.299147][ T8697] __handle_mm_fault+0x1d16/0x2e00 [ 2478.304375][ T8697] ? try_to_free_mem_cgroup_pages+0x258/0x4d0 [ 2478.310723][ T8697] handle_mm_fault+0x21b/0x530 [ 2478.315503][ T8697] __do_page_fault+0x456/0x8d0 [ 2478.320317][ T8697] do_page_fault+0x38/0x194 [ 2478.324953][ T8697] page_fault+0x34/0x40 [ 2478.329128][ T8697] RIP: 0033:0x40419e [ 2478.333091][ T8697] Code: 48 dc ff ff 0f 1f 84 00 00 00 00 00 0f b6 b5 84 00 00 00 bf 61 02 4c 00 31 c0 e8 0d dd ff ff e9 30 fe ff ff 8b 0b 48 83 f8 ff <48> 89 45 78 89 8d 80 00 00 00 0f 85 8d fd ff ff 85 c9 0f 85 85 fd [ 2478.353008][ T8697] RSP: 002b:00007f96d7f82c90 EFLAGS: 00010213 [ 2478.359221][ T8697] RAX: 0000000000000000 RBX: 00007f96d7f836d4 RCX: 0000000000000000 [ 2478.367208][ T8697] RDX: 0000000000000001 RSI: 0000000000403ecc RDI: 0000000020001680 [ 2478.375302][ T8697] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 2478.383286][ T8697] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2478.391336][ T8697] R13: 0000000000000071 R14: 00000000004c1bca R15: 000000000075c07c 14:25:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r7, r7, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r8) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r11, r11, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r12, 0x0) r13 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r13, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r14 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r14, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r14, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r7, r8, r11, r12, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r13, r14, 0x5}) getgroups(0x3, &(0x7f00000000c0)=[r12, r4, 0xee00]) r15 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) r16 = socket$inet_tcp(0x2, 0x1, 0x0) r17 = fcntl$dupfd(r15, 0x406, r16) getsockopt$sock_cred(r17, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r18, r18, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r19) r20 = socket$inet_tcp(0x2, 0x1, 0x0) r21 = fcntl$dupfd(r20, 0x0, r20) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r22, r22, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r24 = socket$inet_tcp(0x2, 0x1, 0x0) r25 = fcntl$dupfd(r24, 0x0, r24) getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r26, r26, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27) r28 = socket$inet_tcp(0x2, 0x1, 0x0) r29 = fcntl$dupfd(r28, 0x0, r28) getsockopt$sock_cred(r29, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r30, r30, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r31, 0x0) r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r33 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r33, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r33, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r30, r31, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r32, r33, 0x5}) getgroups(0x3, &(0x7f00000000c0)=[r31, r19, 0xee00]) r34 = socket$inet_tcp(0x2, 0x1, 0x0) r35 = fcntl$dupfd(r34, 0x0, r34) getsockopt$sock_cred(r35, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r37 = socket$inet_tcp(0x2, 0x1, 0x0) r38 = fcntl$dupfd(r37, 0x0, r37) getsockopt$sock_cred(r38, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r39, r39, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r40) r41 = socket$inet_tcp(0x2, 0x1, 0x0) r42 = fcntl$dupfd(r41, 0x0, r41) getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r43, r43, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r44, 0x0) r45 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r46 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r46, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r46, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r39, r40, r43, r44, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r45, r46, 0x5}) setresuid(r36, r36, r39) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r47) socket$inet_tcp(0x2, 0x1, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000380)='/dev/md0\x00', 0x208400, 0x0) r48 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r48, 0x40096102, 0x0) recvmmsg(r48, &(0x7f0000004380)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)=""/110, 0x6e}], 0x1, &(0x7f0000000a80)=""/113, 0x71}, 0x8}, {{&(0x7f0000000b00)=@l2, 0x80, &(0x7f0000002b80)=[{&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/4096, 0x1000}], 0x2, &(0x7f0000002bc0)=""/195, 0xc3}, 0x2}], 0x2, 0x40010121, &(0x7f0000004480)={0x0, 0x1c9c380}) ioctl$ASHMEM_GET_PIN_STATUS(r48, 0x7709, 0x0) syz_open_dev$mice(&(0x7f00000003c0)='/dev/input/mice\x00', 0x0, 0x502001) r49 = socket$nl_generic(0x10, 0x3, 0x10) r50 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r49, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r50, 0x400, 0x8000000, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}}, 0x0) r51 = dup(r49) ioctl$KDADDIO(r51, 0x4b34, 0xffffffffffffffff) r52 = socket$nl_generic(0x10, 0x3, 0x10) r53 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r52, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r53, 0x400, 0x8000000, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}}, 0x0) dup(r52) r54 = fcntl$dupfd(r51, 0x406, r52) getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r55, r55, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r56, 0x0) r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r57, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r36, r47, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5}) r59 = socket$inet_tcp(0x2, 0x1, 0x0) r60 = fcntl$dupfd(r59, 0x0, r59) getsockopt$sock_cred(r60, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r62, r62, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r63) r64 = socket$inet_tcp(0x2, 0x1, 0x0) r65 = fcntl$dupfd(r64, 0x0, r64) getsockopt$sock_cred(r65, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r66, r66, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r67, 0x0) r68 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r68, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r69 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r69, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r69, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r62, r63, r66, r67, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r68, r69, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r47, 0xffffffffffffffff, r67, 0x0, 0xee00]) setregid(r23, r70) r71 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r71, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r33, &(0x7f0000000500), 0x2, &(0x7f0000000280)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r18, r19, r22, r23, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r61, r71, 0x5}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r72) r73 = socket$inet_tcp(0x2, 0x1, 0x0) r74 = fcntl$dupfd(r73, 0x0, r73) getsockopt$sock_cred(r74, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r76 = socket$inet_tcp(0x2, 0x1, 0x0) r77 = fcntl$dupfd(r76, 0x0, r76) getsockopt$sock_cred(r77, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r78, r78, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r79) r80 = socket$inet_tcp(0x2, 0x1, 0x0) r81 = fcntl$dupfd(r80, 0x0, r80) getsockopt$sock_cred(r81, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r82, r82, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r83, 0x0) r84 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r85 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r85, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r85, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r78, r79, r82, r83, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r84, r85, 0x5}) setresuid(r75, r75, r78) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r86) r87 = socket$inet_tcp(0x2, 0x1, 0x0) r88 = fcntl$dupfd(r87, 0x0, r87) getsockopt$sock_cred(r88, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r89, r89, 0x0) stat(&(0x7f00000004c0)='./file1\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r90, 0x0) r91 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r91, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r92 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r92, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r92, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r75, r86, r89, r90, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r91, r92, 0x5}) r93 = socket$inet_tcp(0x2, 0x1, 0x0) r94 = fcntl$dupfd(r93, 0x0, r93) getsockopt$sock_cred(r94, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r95, r95, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r96) r97 = socket$inet_tcp(0x2, 0x1, 0x0) r98 = fcntl$dupfd(r97, 0x0, r97) getsockopt$sock_cred(r98, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r99, r99, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r100, 0x0) r101 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r101, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r102 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r102, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r102, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r95, r96, r99, r100, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r101, r102, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r86, 0xffffffffffffffff, r100, 0x0, 0xee00]) r103 = socket$inet_tcp(0x2, 0x1, 0x0) r104 = fcntl$dupfd(r103, 0x0, r103) getsockopt$sock_cred(r104, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r106 = socket$inet_tcp(0x2, 0x1, 0x0) r107 = fcntl$dupfd(r106, 0x0, r106) getsockopt$sock_cred(r107, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r108, r108, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r109) r110 = socket$inet_tcp(0x2, 0x1, 0x0) r111 = fcntl$dupfd(r110, 0x0, r110) getsockopt$sock_cred(r111, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r112, r112, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r113, 0x0) r114 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r115 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r115, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r115, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r108, r109, r112, r113, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r114, r115, 0x5}) setresuid(r105, r105, r108) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r116) r117 = socket$inet_tcp(0x2, 0x1, 0x0) r118 = fcntl$dupfd(r117, 0x0, r117) getsockopt$sock_cred(r118, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r119, r119, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r120, 0x0) r121 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r121, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r122 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r122, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r122, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r105, r116, r119, r120, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r121, r122, 0x5}) r123 = socket$inet_tcp(0x2, 0x1, 0x0) r124 = fcntl$dupfd(r123, 0x0, r123) getsockopt$sock_cred(r124, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r125, r125, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r126) r127 = socket$inet_tcp(0x2, 0x1, 0x0) r128 = fcntl$dupfd(r127, 0x0, r127) getsockopt$sock_cred(r128, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r129, r129, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r130, 0x0) r131 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r131, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r132 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r132, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r132, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r125, r126, r129, r130, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r131, r132, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r116, 0xffffffffffffffff, r130, 0x0, 0xee00]) getgroups(0x9, &(0x7f00000000c0)=[0xffffffffffffffff, r19, 0xee00, r72, 0xffffffffffffffff, r86, r116, 0xffffffffffffffff, 0xee01]) getresgid(&(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000200)=0x0) r135 = getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r136) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r137) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r138) r139 = socket$inet_tcp(0x2, 0x1, 0x0) r140 = fcntl$dupfd(r139, 0x0, r139) getsockopt$sock_cred(r140, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r141, r141, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r142) r143 = socket$inet_tcp(0x2, 0x1, 0x0) r144 = fcntl$dupfd(r143, 0x0, r143) getsockopt$sock_cred(r144, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r145, r145, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r146, 0x0) r147 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r148 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r148, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r148, &(0x7f0000000580), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r141, r142, r145, r146, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r147, r148, 0x5}) setgroups(0x9, &(0x7f0000000240)=[r12, r133, r134, r135, r136, r137, r138, r146, 0xee00]) 14:25:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r7, r7, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r8) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r11, r11, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r12, 0x0) r13 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r13, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r14 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r14, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r14, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r7, r8, r11, r12, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r13, r14, 0x5}) getgroups(0x3, &(0x7f00000000c0)=[r12, r4, 0xee00]) r15 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) r16 = socket$inet_tcp(0x2, 0x1, 0x0) r17 = fcntl$dupfd(r15, 0x406, r16) getsockopt$sock_cred(r17, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r18, r18, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r19) r20 = socket$inet_tcp(0x2, 0x1, 0x0) r21 = fcntl$dupfd(r20, 0x0, r20) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r22, r22, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r24 = socket$inet_tcp(0x2, 0x1, 0x0) r25 = fcntl$dupfd(r24, 0x0, r24) getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r26, r26, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27) r28 = socket$inet_tcp(0x2, 0x1, 0x0) r29 = fcntl$dupfd(r28, 0x0, r28) getsockopt$sock_cred(r29, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r30, r30, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r31, 0x0) r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r33 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r33, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r33, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r30, r31, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r32, r33, 0x5}) getgroups(0x3, &(0x7f00000000c0)=[r31, r19, 0xee00]) r34 = socket$inet_tcp(0x2, 0x1, 0x0) r35 = fcntl$dupfd(r34, 0x0, r34) getsockopt$sock_cred(r35, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r37 = socket$inet_tcp(0x2, 0x1, 0x0) r38 = fcntl$dupfd(r37, 0x0, r37) getsockopt$sock_cred(r38, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r39, r39, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r40) r41 = socket$inet_tcp(0x2, 0x1, 0x0) r42 = fcntl$dupfd(r41, 0x0, r41) getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r43, r43, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r44, 0x0) r45 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r46 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r46, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r46, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r39, r40, r43, r44, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r45, r46, 0x5}) setresuid(r36, r36, r39) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r47) socket$inet_tcp(0x2, 0x1, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000380)='/dev/md0\x00', 0x208400, 0x0) r48 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r48, 0x40096102, 0x0) recvmmsg(r48, &(0x7f0000004380)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)=""/110, 0x6e}], 0x1, &(0x7f0000000a80)=""/113, 0x71}, 0x8}, {{&(0x7f0000000b00)=@l2, 0x80, &(0x7f0000002b80)=[{&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/4096, 0x1000}], 0x2, &(0x7f0000002bc0)=""/195, 0xc3}, 0x2}], 0x2, 0x40010121, &(0x7f0000004480)={0x0, 0x1c9c380}) ioctl$ASHMEM_GET_PIN_STATUS(r48, 0x7709, 0x0) syz_open_dev$mice(&(0x7f00000003c0)='/dev/input/mice\x00', 0x0, 0x502001) r49 = socket$nl_generic(0x10, 0x3, 0x10) r50 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r49, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r50, 0x400, 0x8000000, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}}, 0x0) r51 = dup(r49) ioctl$KDADDIO(r51, 0x4b34, 0xffffffffffffffff) r52 = socket$nl_generic(0x10, 0x3, 0x10) r53 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r52, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r53, 0x400, 0x8000000, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}}, 0x0) dup(r52) r54 = fcntl$dupfd(r51, 0x406, r52) getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r55, r55, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r56, 0x0) r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r57, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r36, r47, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5}) r59 = socket$inet_tcp(0x2, 0x1, 0x0) r60 = fcntl$dupfd(r59, 0x0, r59) getsockopt$sock_cred(r60, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r62, r62, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r63) r64 = socket$inet_tcp(0x2, 0x1, 0x0) r65 = fcntl$dupfd(r64, 0x0, r64) getsockopt$sock_cred(r65, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r66, r66, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r67, 0x0) r68 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r68, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r69 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r69, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r69, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r62, r63, r66, r67, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r68, r69, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r47, 0xffffffffffffffff, r67, 0x0, 0xee00]) setregid(r23, r70) r71 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r71, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r33, &(0x7f0000000500), 0x2, &(0x7f0000000280)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r18, r19, r22, r23, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r61, r71, 0x5}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r72) r73 = socket$inet_tcp(0x2, 0x1, 0x0) r74 = fcntl$dupfd(r73, 0x0, r73) getsockopt$sock_cred(r74, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r76 = socket$inet_tcp(0x2, 0x1, 0x0) r77 = fcntl$dupfd(r76, 0x0, r76) getsockopt$sock_cred(r77, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r78, r78, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r79) r80 = socket$inet_tcp(0x2, 0x1, 0x0) r81 = fcntl$dupfd(r80, 0x0, r80) getsockopt$sock_cred(r81, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r82, r82, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r83, 0x0) r84 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r85 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r85, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r85, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r78, r79, r82, r83, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r84, r85, 0x5}) setresuid(r75, r75, r78) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r86) r87 = socket$inet_tcp(0x2, 0x1, 0x0) r88 = fcntl$dupfd(r87, 0x0, r87) getsockopt$sock_cred(r88, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r89, r89, 0x0) stat(&(0x7f00000004c0)='./file1\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r90, 0x0) r91 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r91, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r92 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r92, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r92, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r75, r86, r89, r90, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r91, r92, 0x5}) r93 = socket$inet_tcp(0x2, 0x1, 0x0) r94 = fcntl$dupfd(r93, 0x0, r93) getsockopt$sock_cred(r94, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r95, r95, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r96) r97 = socket$inet_tcp(0x2, 0x1, 0x0) r98 = fcntl$dupfd(r97, 0x0, r97) getsockopt$sock_cred(r98, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r99, r99, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r100, 0x0) r101 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r101, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r102 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r102, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r102, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r95, r96, r99, r100, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r101, r102, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r86, 0xffffffffffffffff, r100, 0x0, 0xee00]) r103 = socket$inet_tcp(0x2, 0x1, 0x0) r104 = fcntl$dupfd(r103, 0x0, r103) getsockopt$sock_cred(r104, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r106 = socket$inet_tcp(0x2, 0x1, 0x0) r107 = fcntl$dupfd(r106, 0x0, r106) getsockopt$sock_cred(r107, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r108, r108, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r109) r110 = socket$inet_tcp(0x2, 0x1, 0x0) r111 = fcntl$dupfd(r110, 0x0, r110) getsockopt$sock_cred(r111, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r112, r112, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r113, 0x0) r114 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r115 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r115, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r115, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r108, r109, r112, r113, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r114, r115, 0x5}) setresuid(r105, r105, r108) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r116) r117 = socket$inet_tcp(0x2, 0x1, 0x0) r118 = fcntl$dupfd(r117, 0x0, r117) getsockopt$sock_cred(r118, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r119, r119, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r120, 0x0) r121 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r121, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r122 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r122, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r122, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r105, r116, r119, r120, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r121, r122, 0x5}) r123 = socket$inet_tcp(0x2, 0x1, 0x0) r124 = fcntl$dupfd(r123, 0x0, r123) getsockopt$sock_cred(r124, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r125, r125, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r126) r127 = socket$inet_tcp(0x2, 0x1, 0x0) r128 = fcntl$dupfd(r127, 0x0, r127) getsockopt$sock_cred(r128, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r129, r129, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r130, 0x0) r131 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r131, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r132 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r132, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r132, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r125, r126, r129, r130, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r131, r132, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r116, 0xffffffffffffffff, r130, 0x0, 0xee00]) getgroups(0x9, &(0x7f00000000c0)=[0xffffffffffffffff, r19, 0xee00, r72, 0xffffffffffffffff, r86, r116, 0xffffffffffffffff, 0xee01]) getresgid(&(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000200)) getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r133) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r134) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r135) r136 = socket$inet_tcp(0x2, 0x1, 0x0) r137 = fcntl$dupfd(r136, 0x0, r136) getsockopt$sock_cred(r137, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r138, r138, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r139) r140 = socket$inet_tcp(0x2, 0x1, 0x0) r141 = fcntl$dupfd(r140, 0x0, r140) getsockopt$sock_cred(r141, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r142, r142, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r143, 0x0) r144 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r145 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r145, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r145, &(0x7f0000000580), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r138, r139, r142, r143, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r144, r145, 0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2478.423290][ T8697] memory: usage 307136kB, limit 307200kB, failcnt 277 [ 2478.430107][ T8697] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2478.519197][ T8697] Memory cgroup stats for /syz2: [ 2478.519348][ T8697] anon 281976832 [ 2478.519348][ T8697] file 40960 [ 2478.519348][ T8697] kernel_stack 2285568 [ 2478.519348][ T8697] slab 8671232 [ 2478.519348][ T8697] sock 172032 [ 2478.519348][ T8697] shmem 69632 [ 2478.519348][ T8697] file_mapped 0 [ 2478.519348][ T8697] file_dirty 0 [ 2478.519348][ T8697] file_writeback 0 [ 2478.519348][ T8697] anon_thp 268435456 [ 2478.519348][ T8697] inactive_anon 176128 [ 2478.519348][ T8697] active_anon 281976832 14:25:29 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) sendto$inet(r0, &(0x7f0000000400)='s', 0x1, 0x8840, &(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendmmsg(r0, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="7fc61b6d932dbc563145fefc191dbe34ca8e9ecdb27e56bc6ba8809e7cf04caace2b341d936860e16f71d90cf2a63ea103c29cc8aafd0c67226acce150360262eaae8207", 0x44}], 0x1}}], 0x40000a1, 0x0) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f0000001500)=[{0x0}, {&(0x7f0000000440)=""/150, 0x96}], 0x2}}], 0x300, 0x3, 0x0) 14:25:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000140)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) perf_event_open(&(0x7f0000000000)={0x0, 0xfffffffffffffdb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa, @perf_config_ext, 0x12ce9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2478.519348][ T8697] inactive_file 0 [ 2478.519348][ T8697] active_file 94208 [ 2478.519348][ T8697] unevictable 36864 [ 2478.519348][ T8697] slab_reclaimable 1216512 [ 2478.519348][ T8697] slab_unreclaimable 7454720 [ 2478.519348][ T8697] pgfault 253671 [ 2478.519348][ T8697] pgmajfault 0 [ 2478.519348][ T8697] workingset_refault 0 [ 2478.519348][ T8697] workingset_activate 0 [ 2478.519348][ T8697] workingset_nodereclaim 0 [ 2478.519348][ T8697] pgrefill 338 [ 2478.519348][ T8697] pgscan 338 [ 2478.519348][ T8697] pgsteal 36 14:25:29 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r7, r7, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r8) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r11, r11, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r12, 0x0) r13 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r13, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r14 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r14, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r14, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r7, r8, r11, r12, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r13, r14, 0x5}) getgroups(0x3, &(0x7f00000000c0)=[r12, r4, 0xee00]) r15 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) r16 = socket$inet_tcp(0x2, 0x1, 0x0) r17 = fcntl$dupfd(r15, 0x406, r16) getsockopt$sock_cred(r17, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r18, r18, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r19) r20 = socket$inet_tcp(0x2, 0x1, 0x0) r21 = fcntl$dupfd(r20, 0x0, r20) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r22, r22, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r24 = socket$inet_tcp(0x2, 0x1, 0x0) r25 = fcntl$dupfd(r24, 0x0, r24) getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r26, r26, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27) r28 = socket$inet_tcp(0x2, 0x1, 0x0) r29 = fcntl$dupfd(r28, 0x0, r28) getsockopt$sock_cred(r29, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r30, r30, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r31, 0x0) r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r33 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r33, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r33, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r30, r31, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r32, r33, 0x5}) getgroups(0x3, &(0x7f00000000c0)=[r31, r19, 0xee00]) r34 = socket$inet_tcp(0x2, 0x1, 0x0) r35 = fcntl$dupfd(r34, 0x0, r34) getsockopt$sock_cred(r35, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r37 = socket$inet_tcp(0x2, 0x1, 0x0) r38 = fcntl$dupfd(r37, 0x0, r37) getsockopt$sock_cred(r38, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r39, r39, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r40) r41 = socket$inet_tcp(0x2, 0x1, 0x0) r42 = fcntl$dupfd(r41, 0x0, r41) getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r43, r43, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r44, 0x0) r45 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r46 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r46, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r46, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r39, r40, r43, r44, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r45, r46, 0x5}) setresuid(r36, r36, r39) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r47) socket$inet_tcp(0x2, 0x1, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000380)='/dev/md0\x00', 0x208400, 0x0) r48 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r48, 0x40096102, 0x0) recvmmsg(r48, &(0x7f0000004380)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)=""/110, 0x6e}], 0x1, &(0x7f0000000a80)=""/113, 0x71}, 0x8}, {{&(0x7f0000000b00)=@l2, 0x80, &(0x7f0000002b80)=[{&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/4096, 0x1000}], 0x2, &(0x7f0000002bc0)=""/195, 0xc3}, 0x2}], 0x2, 0x40010121, &(0x7f0000004480)={0x0, 0x1c9c380}) ioctl$ASHMEM_GET_PIN_STATUS(r48, 0x7709, 0x0) syz_open_dev$mice(&(0x7f00000003c0)='/dev/input/mice\x00', 0x0, 0x502001) r49 = socket$nl_generic(0x10, 0x3, 0x10) r50 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r49, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r50, 0x400, 0x8000000, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}}, 0x0) r51 = dup(r49) ioctl$KDADDIO(r51, 0x4b34, 0xffffffffffffffff) r52 = socket$nl_generic(0x10, 0x3, 0x10) r53 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r52, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r53, 0x400, 0x8000000, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}}, 0x0) dup(r52) r54 = fcntl$dupfd(r51, 0x406, r52) getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r55, r55, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r56, 0x0) r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r57, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r36, r47, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5}) r59 = socket$inet_tcp(0x2, 0x1, 0x0) r60 = fcntl$dupfd(r59, 0x0, r59) getsockopt$sock_cred(r60, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r62, r62, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r63) r64 = socket$inet_tcp(0x2, 0x1, 0x0) r65 = fcntl$dupfd(r64, 0x0, r64) getsockopt$sock_cred(r65, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r66, r66, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r67, 0x0) r68 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r68, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r69 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r69, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r69, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r62, r63, r66, r67, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r68, r69, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r47, 0xffffffffffffffff, r67, 0x0, 0xee00]) setregid(r23, r70) r71 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r71, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r33, &(0x7f0000000500), 0x2, &(0x7f0000000280)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r18, r19, r22, r23, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r61, r71, 0x5}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r72) r73 = socket$inet_tcp(0x2, 0x1, 0x0) r74 = fcntl$dupfd(r73, 0x0, r73) getsockopt$sock_cred(r74, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r76 = socket$inet_tcp(0x2, 0x1, 0x0) r77 = fcntl$dupfd(r76, 0x0, r76) getsockopt$sock_cred(r77, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r78, r78, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r79) r80 = socket$inet_tcp(0x2, 0x1, 0x0) r81 = fcntl$dupfd(r80, 0x0, r80) getsockopt$sock_cred(r81, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r82, r82, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r83, 0x0) r84 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r85 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r85, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r85, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r78, r79, r82, r83, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r84, r85, 0x5}) setresuid(r75, r75, r78) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r86) r87 = socket$inet_tcp(0x2, 0x1, 0x0) r88 = fcntl$dupfd(r87, 0x0, r87) getsockopt$sock_cred(r88, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r89, r89, 0x0) stat(&(0x7f00000004c0)='./file1\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r90, 0x0) r91 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r91, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r92 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r92, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r92, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r75, r86, r89, r90, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r91, r92, 0x5}) r93 = socket$inet_tcp(0x2, 0x1, 0x0) r94 = fcntl$dupfd(r93, 0x0, r93) getsockopt$sock_cred(r94, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r95, r95, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r96) r97 = socket$inet_tcp(0x2, 0x1, 0x0) r98 = fcntl$dupfd(r97, 0x0, r97) getsockopt$sock_cred(r98, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r99, r99, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r100, 0x0) r101 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r101, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r102 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r102, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r102, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r95, r96, r99, r100, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r101, r102, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r86, 0xffffffffffffffff, r100, 0x0, 0xee00]) r103 = socket$inet_tcp(0x2, 0x1, 0x0) r104 = fcntl$dupfd(r103, 0x0, r103) getsockopt$sock_cred(r104, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r106 = socket$inet_tcp(0x2, 0x1, 0x0) r107 = fcntl$dupfd(r106, 0x0, r106) getsockopt$sock_cred(r107, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r108, r108, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r109) r110 = socket$inet_tcp(0x2, 0x1, 0x0) r111 = fcntl$dupfd(r110, 0x0, r110) getsockopt$sock_cred(r111, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r112, r112, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r113, 0x0) r114 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r115 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r115, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r115, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r108, r109, r112, r113, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r114, r115, 0x5}) setresuid(r105, r105, r108) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r116) r117 = socket$inet_tcp(0x2, 0x1, 0x0) r118 = fcntl$dupfd(r117, 0x0, r117) getsockopt$sock_cred(r118, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r119, r119, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r120, 0x0) r121 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r121, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r122 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r122, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r122, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r105, r116, r119, r120, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r121, r122, 0x5}) r123 = socket$inet_tcp(0x2, 0x1, 0x0) r124 = fcntl$dupfd(r123, 0x0, r123) getsockopt$sock_cred(r124, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r125, r125, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r126) r127 = socket$inet_tcp(0x2, 0x1, 0x0) r128 = fcntl$dupfd(r127, 0x0, r127) getsockopt$sock_cred(r128, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r129, r129, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r130, 0x0) r131 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r131, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r132 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r132, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r132, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r125, r126, r129, r130, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r131, r132, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r116, 0xffffffffffffffff, r130, 0x0, 0xee00]) getgroups(0x9, &(0x7f00000000c0)=[0xffffffffffffffff, r19, 0xee00, r72, 0xffffffffffffffff, r86, r116, 0xffffffffffffffff, 0xee01]) getresgid(&(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000200)) getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r133) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r134) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r135) r136 = socket$inet_tcp(0x2, 0x1, 0x0) r137 = fcntl$dupfd(r136, 0x0, r136) getsockopt$sock_cred(r137, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r138, r138, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r139) r140 = socket$inet_tcp(0x2, 0x1, 0x0) r141 = fcntl$dupfd(r140, 0x0, r140) getsockopt$sock_cred(r141, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r142, r142, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r143, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r144 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r144, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r144, &(0x7f0000000580), 0x80000004, &(0x7f0000000180)) perf_event_open(&(0x7f0000000000)={0x2, 0xfffffffffffffdb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext={0x9}, 0x12ce9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2478.637077][ T8697] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=6789,uid=0 14:25:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r7, r7, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r8) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r11, r11, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r12, 0x0) r13 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r13, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r14 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r14, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r14, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r7, r8, r11, r12, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r13, r14, 0x5}) getgroups(0x3, &(0x7f00000000c0)=[r12, r4, 0xee00]) r15 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) r16 = socket$inet_tcp(0x2, 0x1, 0x0) r17 = fcntl$dupfd(r15, 0x406, r16) getsockopt$sock_cred(r17, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r18, r18, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r19) r20 = socket$inet_tcp(0x2, 0x1, 0x0) r21 = fcntl$dupfd(r20, 0x0, r20) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r22, r22, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r24 = socket$inet_tcp(0x2, 0x1, 0x0) r25 = fcntl$dupfd(r24, 0x0, r24) getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r26, r26, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27) r28 = socket$inet_tcp(0x2, 0x1, 0x0) r29 = fcntl$dupfd(r28, 0x0, r28) getsockopt$sock_cred(r29, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r30, r30, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r31, 0x0) r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r33 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r33, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r33, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r30, r31, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r32, r33, 0x5}) getgroups(0x3, &(0x7f00000000c0)=[r31, r19, 0xee00]) r34 = socket$inet_tcp(0x2, 0x1, 0x0) r35 = fcntl$dupfd(r34, 0x0, r34) getsockopt$sock_cred(r35, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r37 = socket$inet_tcp(0x2, 0x1, 0x0) r38 = fcntl$dupfd(r37, 0x0, r37) getsockopt$sock_cred(r38, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r39, r39, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r40) r41 = socket$inet_tcp(0x2, 0x1, 0x0) r42 = fcntl$dupfd(r41, 0x0, r41) getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r43, r43, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r44, 0x0) r45 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r46 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r46, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r46, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r39, r40, r43, r44, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r45, r46, 0x5}) setresuid(r36, r36, r39) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r47) socket$inet_tcp(0x2, 0x1, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000380)='/dev/md0\x00', 0x208400, 0x0) r48 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r48, 0x40096102, 0x0) recvmmsg(r48, &(0x7f0000004380)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)=""/110, 0x6e}], 0x1, &(0x7f0000000a80)=""/113, 0x71}, 0x8}, {{&(0x7f0000000b00)=@l2, 0x80, &(0x7f0000002b80)=[{&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/4096, 0x1000}], 0x2, &(0x7f0000002bc0)=""/195, 0xc3}, 0x2}], 0x2, 0x40010121, &(0x7f0000004480)={0x0, 0x1c9c380}) ioctl$ASHMEM_GET_PIN_STATUS(r48, 0x7709, 0x0) syz_open_dev$mice(&(0x7f00000003c0)='/dev/input/mice\x00', 0x0, 0x502001) r49 = socket$nl_generic(0x10, 0x3, 0x10) r50 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r49, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r50, 0x400, 0x8000000, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}}, 0x0) r51 = dup(r49) ioctl$KDADDIO(r51, 0x4b34, 0xffffffffffffffff) r52 = socket$nl_generic(0x10, 0x3, 0x10) r53 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r52, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r53, 0x400, 0x8000000, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}}, 0x0) dup(r52) r54 = fcntl$dupfd(r51, 0x406, r52) getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r55, r55, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r56, 0x0) r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r57, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r36, r47, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5}) r59 = socket$inet_tcp(0x2, 0x1, 0x0) r60 = fcntl$dupfd(r59, 0x0, r59) getsockopt$sock_cred(r60, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r62, r62, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r63) r64 = socket$inet_tcp(0x2, 0x1, 0x0) r65 = fcntl$dupfd(r64, 0x0, r64) getsockopt$sock_cred(r65, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r66, r66, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r67, 0x0) r68 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r68, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r69 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r69, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r69, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r62, r63, r66, r67, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r68, r69, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r47, 0xffffffffffffffff, r67, 0x0, 0xee00]) setregid(r23, r70) r71 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r71, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r33, &(0x7f0000000500), 0x2, &(0x7f0000000280)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r18, r19, r22, r23, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r61, r71, 0x5}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r72) r73 = socket$inet_tcp(0x2, 0x1, 0x0) r74 = fcntl$dupfd(r73, 0x0, r73) getsockopt$sock_cred(r74, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r76 = socket$inet_tcp(0x2, 0x1, 0x0) r77 = fcntl$dupfd(r76, 0x0, r76) getsockopt$sock_cred(r77, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r78, r78, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r79) r80 = socket$inet_tcp(0x2, 0x1, 0x0) r81 = fcntl$dupfd(r80, 0x0, r80) getsockopt$sock_cred(r81, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r82, r82, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r83, 0x0) r84 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r85 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r85, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r85, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r78, r79, r82, r83, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r84, r85, 0x5}) setresuid(r75, r75, r78) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r86) r87 = socket$inet_tcp(0x2, 0x1, 0x0) r88 = fcntl$dupfd(r87, 0x0, r87) getsockopt$sock_cred(r88, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r89, r89, 0x0) stat(&(0x7f00000004c0)='./file1\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r90, 0x0) r91 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r91, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r92 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r92, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r92, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r75, r86, r89, r90, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r91, r92, 0x5}) r93 = socket$inet_tcp(0x2, 0x1, 0x0) r94 = fcntl$dupfd(r93, 0x0, r93) getsockopt$sock_cred(r94, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r95, r95, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r96) r97 = socket$inet_tcp(0x2, 0x1, 0x0) r98 = fcntl$dupfd(r97, 0x0, r97) getsockopt$sock_cred(r98, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r99, r99, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r100, 0x0) r101 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r101, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r102 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r102, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r102, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r95, r96, r99, r100, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r101, r102, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r86, 0xffffffffffffffff, r100, 0x0, 0xee00]) r103 = socket$inet_tcp(0x2, 0x1, 0x0) r104 = fcntl$dupfd(r103, 0x0, r103) getsockopt$sock_cred(r104, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r106 = socket$inet_tcp(0x2, 0x1, 0x0) r107 = fcntl$dupfd(r106, 0x0, r106) getsockopt$sock_cred(r107, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r108, r108, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r109) r110 = socket$inet_tcp(0x2, 0x1, 0x0) r111 = fcntl$dupfd(r110, 0x0, r110) getsockopt$sock_cred(r111, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r112, r112, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r113, 0x0) r114 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r115 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r115, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r115, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r108, r109, r112, r113, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r114, r115, 0x5}) setresuid(r105, r105, r108) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r116) r117 = socket$inet_tcp(0x2, 0x1, 0x0) r118 = fcntl$dupfd(r117, 0x0, r117) getsockopt$sock_cred(r118, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r119, r119, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r120, 0x0) r121 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r121, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r122 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r122, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r122, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r105, r116, r119, r120, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r121, r122, 0x5}) r123 = socket$inet_tcp(0x2, 0x1, 0x0) r124 = fcntl$dupfd(r123, 0x0, r123) getsockopt$sock_cred(r124, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r125, r125, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r126) r127 = socket$inet_tcp(0x2, 0x1, 0x0) r128 = fcntl$dupfd(r127, 0x0, r127) getsockopt$sock_cred(r128, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r129, r129, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r130, 0x0) r131 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r131, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r132 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r132, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r132, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r125, r126, r129, r130, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r131, r132, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r116, 0xffffffffffffffff, r130, 0x0, 0xee00]) getgroups(0x9, &(0x7f00000000c0)=[0xffffffffffffffff, r19, 0xee00, r72, 0xffffffffffffffff, r86, r116, 0xffffffffffffffff, 0xee01]) getresgid(&(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000200)=0x0) r135 = getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r136) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r137) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r138) r139 = socket$inet_tcp(0x2, 0x1, 0x0) r140 = fcntl$dupfd(r139, 0x0, r139) getsockopt$sock_cred(r140, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r141, r141, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r142) r143 = socket$inet_tcp(0x2, 0x1, 0x0) r144 = fcntl$dupfd(r143, 0x0, r143) getsockopt$sock_cred(r144, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r145, r145, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r146, 0x0) r147 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r148 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r148, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r148, &(0x7f0000000580), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r141, r142, r145, r146, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r147, r148, 0x5}) setgroups(0x9, &(0x7f0000000240)=[r12, r133, r134, r135, r136, r137, r138, r146, 0xee00]) 14:25:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000140)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) perf_event_open(&(0x7f0000000000)={0x0, 0xfffffffffffffdb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa, @perf_config_ext, 0x12ce9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2479.129415][ T8697] Memory cgroup out of memory: Killed process 6789 (syz-executor.2) total-vm:73112kB, anon-rss:4292kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:1000 [ 2479.440696][ C0] net_ratelimit: 22 callbacks suppressed [ 2479.446515][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2479.452736][ C0] protocol 88fb is buggy, dev hsr_slave_1 14:25:30 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) sendto$inet(r0, &(0x7f0000000400)='s', 0x1, 0x8840, &(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendmmsg(r0, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="7fc61b6d932dbc563145fefc191dbe34ca8e9ecdb27e56bc6ba8809e7cf04caace2b341d936860e16f71d90cf2a63ea103c29cc8aafd0c67226acce150360262eaae8207", 0x44}], 0x1}}], 0x40000a1, 0x0) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f0000001500)=[{0x0}, {&(0x7f0000000440)=""/150, 0x96}], 0x2}}], 0x300, 0x3, 0x0) 14:25:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000140)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) perf_event_open(&(0x7f0000000000)={0x0, 0xfffffffffffffdb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa, @perf_config_ext, 0x12ce9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:25:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r7, r7, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r8) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r11, r11, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r12, 0x0) r13 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r13, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r14 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r14, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r14, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r7, r8, r11, r12, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r13, r14, 0x5}) getgroups(0x3, &(0x7f00000000c0)=[r12, r4, 0xee00]) r15 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) r16 = socket$inet_tcp(0x2, 0x1, 0x0) r17 = fcntl$dupfd(r15, 0x406, r16) getsockopt$sock_cred(r17, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r18, r18, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r19) r20 = socket$inet_tcp(0x2, 0x1, 0x0) r21 = fcntl$dupfd(r20, 0x0, r20) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r22, r22, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r24 = socket$inet_tcp(0x2, 0x1, 0x0) r25 = fcntl$dupfd(r24, 0x0, r24) getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r26, r26, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27) r28 = socket$inet_tcp(0x2, 0x1, 0x0) r29 = fcntl$dupfd(r28, 0x0, r28) getsockopt$sock_cred(r29, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r30, r30, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r31, 0x0) r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r33 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r33, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r33, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r30, r31, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r32, r33, 0x5}) getgroups(0x3, &(0x7f00000000c0)=[r31, r19, 0xee00]) r34 = socket$inet_tcp(0x2, 0x1, 0x0) r35 = fcntl$dupfd(r34, 0x0, r34) getsockopt$sock_cred(r35, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r37 = socket$inet_tcp(0x2, 0x1, 0x0) r38 = fcntl$dupfd(r37, 0x0, r37) getsockopt$sock_cred(r38, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r39, r39, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r40) r41 = socket$inet_tcp(0x2, 0x1, 0x0) r42 = fcntl$dupfd(r41, 0x0, r41) getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r43, r43, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r44, 0x0) r45 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r46 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r46, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r46, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r39, r40, r43, r44, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r45, r46, 0x5}) setresuid(r36, r36, r39) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r47) socket$inet_tcp(0x2, 0x1, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000380)='/dev/md0\x00', 0x208400, 0x0) r48 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r48, 0x40096102, 0x0) recvmmsg(r48, &(0x7f0000004380)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)=""/110, 0x6e}], 0x1, &(0x7f0000000a80)=""/113, 0x71}, 0x8}, {{&(0x7f0000000b00)=@l2, 0x80, &(0x7f0000002b80)=[{&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/4096, 0x1000}], 0x2, &(0x7f0000002bc0)=""/195, 0xc3}, 0x2}], 0x2, 0x40010121, &(0x7f0000004480)={0x0, 0x1c9c380}) ioctl$ASHMEM_GET_PIN_STATUS(r48, 0x7709, 0x0) syz_open_dev$mice(&(0x7f00000003c0)='/dev/input/mice\x00', 0x0, 0x502001) r49 = socket$nl_generic(0x10, 0x3, 0x10) r50 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r49, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r50, 0x400, 0x8000000, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}}, 0x0) r51 = dup(r49) ioctl$KDADDIO(r51, 0x4b34, 0xffffffffffffffff) r52 = socket$nl_generic(0x10, 0x3, 0x10) r53 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r52, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r53, 0x400, 0x8000000, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}}, 0x0) dup(r52) r54 = fcntl$dupfd(r51, 0x406, r52) getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r55, r55, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r56, 0x0) r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r57, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r36, r47, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5}) r59 = socket$inet_tcp(0x2, 0x1, 0x0) r60 = fcntl$dupfd(r59, 0x0, r59) getsockopt$sock_cred(r60, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r62, r62, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r63) r64 = socket$inet_tcp(0x2, 0x1, 0x0) r65 = fcntl$dupfd(r64, 0x0, r64) getsockopt$sock_cred(r65, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r66, r66, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r67, 0x0) r68 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r68, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r69 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r69, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r69, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r62, r63, r66, r67, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r68, r69, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r47, 0xffffffffffffffff, r67, 0x0, 0xee00]) setregid(r23, r70) r71 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r71, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r33, &(0x7f0000000500), 0x2, &(0x7f0000000280)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r18, r19, r22, r23, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r61, r71, 0x5}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r72) r73 = socket$inet_tcp(0x2, 0x1, 0x0) r74 = fcntl$dupfd(r73, 0x0, r73) getsockopt$sock_cred(r74, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r76 = socket$inet_tcp(0x2, 0x1, 0x0) r77 = fcntl$dupfd(r76, 0x0, r76) getsockopt$sock_cred(r77, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r78, r78, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r79) r80 = socket$inet_tcp(0x2, 0x1, 0x0) r81 = fcntl$dupfd(r80, 0x0, r80) getsockopt$sock_cred(r81, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r82, r82, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r83, 0x0) r84 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r85 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r85, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r85, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r78, r79, r82, r83, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r84, r85, 0x5}) setresuid(r75, r75, r78) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r86) r87 = socket$inet_tcp(0x2, 0x1, 0x0) r88 = fcntl$dupfd(r87, 0x0, r87) getsockopt$sock_cred(r88, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r89, r89, 0x0) stat(&(0x7f00000004c0)='./file1\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r90, 0x0) r91 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r91, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r92 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r92, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r92, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r75, r86, r89, r90, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r91, r92, 0x5}) r93 = socket$inet_tcp(0x2, 0x1, 0x0) r94 = fcntl$dupfd(r93, 0x0, r93) getsockopt$sock_cred(r94, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r95, r95, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r96) r97 = socket$inet_tcp(0x2, 0x1, 0x0) r98 = fcntl$dupfd(r97, 0x0, r97) getsockopt$sock_cred(r98, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r99, r99, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r100, 0x0) r101 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r101, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r102 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r102, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r102, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r95, r96, r99, r100, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r101, r102, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r86, 0xffffffffffffffff, r100, 0x0, 0xee00]) r103 = socket$inet_tcp(0x2, 0x1, 0x0) r104 = fcntl$dupfd(r103, 0x0, r103) getsockopt$sock_cred(r104, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r106 = socket$inet_tcp(0x2, 0x1, 0x0) r107 = fcntl$dupfd(r106, 0x0, r106) getsockopt$sock_cred(r107, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r108, r108, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r109) r110 = socket$inet_tcp(0x2, 0x1, 0x0) r111 = fcntl$dupfd(r110, 0x0, r110) getsockopt$sock_cred(r111, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r112, r112, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r113, 0x0) r114 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r115 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r115, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r115, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r108, r109, r112, r113, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r114, r115, 0x5}) setresuid(r105, r105, r108) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r116) r117 = socket$inet_tcp(0x2, 0x1, 0x0) r118 = fcntl$dupfd(r117, 0x0, r117) getsockopt$sock_cred(r118, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r119, r119, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r120, 0x0) r121 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r121, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r122 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r122, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r122, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r105, r116, r119, r120, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r121, r122, 0x5}) r123 = socket$inet_tcp(0x2, 0x1, 0x0) r124 = fcntl$dupfd(r123, 0x0, r123) getsockopt$sock_cred(r124, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r125, r125, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r126) r127 = socket$inet_tcp(0x2, 0x1, 0x0) r128 = fcntl$dupfd(r127, 0x0, r127) getsockopt$sock_cred(r128, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r129, r129, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r130, 0x0) r131 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r131, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r132 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r132, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r132, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r125, r126, r129, r130, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r131, r132, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r116, 0xffffffffffffffff, r130, 0x0, 0xee00]) getgroups(0x9, &(0x7f00000000c0)=[0xffffffffffffffff, r19, 0xee00, r72, 0xffffffffffffffff, r86, r116, 0xffffffffffffffff, 0xee01]) getresgid(&(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000200)) getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r133) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r134) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r135) r136 = socket$inet_tcp(0x2, 0x1, 0x0) r137 = fcntl$dupfd(r136, 0x0, r136) getsockopt$sock_cred(r137, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r138, r138, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r139) r140 = socket$inet_tcp(0x2, 0x1, 0x0) r141 = fcntl$dupfd(r140, 0x0, r140) getsockopt$sock_cred(r141, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r142, r142, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r143, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r144 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r144, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r144, &(0x7f0000000580), 0x80000004, &(0x7f0000000180)) perf_event_open(&(0x7f0000000000)={0x2, 0xfffffffffffffdb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext={0x9}, 0x12ce9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2480.080179][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2480.086069][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2480.560724][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2480.567042][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2480.573353][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2480.579443][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2480.666413][ T8707] QAT: failed to copy from user cfg_data. [ 2480.692522][ T8828] QAT: Invalid ioctl [ 2480.800704][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2480.806983][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2481.071202][ T8937] QAT: failed to copy from user cfg_data. [ 2481.102358][ T8937] QAT: Invalid ioctl 14:25:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r7, r7, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r8) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r11, r11, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r12, 0x0) r13 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r13, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r14 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r14, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r14, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r7, r8, r11, r12, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r13, r14, 0x5}) getgroups(0x3, &(0x7f00000000c0)=[r12, r4, 0xee00]) r15 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) r16 = socket$inet_tcp(0x2, 0x1, 0x0) r17 = fcntl$dupfd(r15, 0x406, r16) getsockopt$sock_cred(r17, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r18, r18, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r19) r20 = socket$inet_tcp(0x2, 0x1, 0x0) r21 = fcntl$dupfd(r20, 0x0, r20) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r22, r22, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r24 = socket$inet_tcp(0x2, 0x1, 0x0) r25 = fcntl$dupfd(r24, 0x0, r24) getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r26, r26, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27) r28 = socket$inet_tcp(0x2, 0x1, 0x0) r29 = fcntl$dupfd(r28, 0x0, r28) getsockopt$sock_cred(r29, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r30, r30, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r31, 0x0) r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r33 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r33, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r33, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r30, r31, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r32, r33, 0x5}) getgroups(0x3, &(0x7f00000000c0)=[r31, r19, 0xee00]) r34 = socket$inet_tcp(0x2, 0x1, 0x0) r35 = fcntl$dupfd(r34, 0x0, r34) getsockopt$sock_cred(r35, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r37 = socket$inet_tcp(0x2, 0x1, 0x0) r38 = fcntl$dupfd(r37, 0x0, r37) getsockopt$sock_cred(r38, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r39, r39, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r40) r41 = socket$inet_tcp(0x2, 0x1, 0x0) r42 = fcntl$dupfd(r41, 0x0, r41) getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r43, r43, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r44, 0x0) r45 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r46 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r46, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r46, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r39, r40, r43, r44, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r45, r46, 0x5}) setresuid(r36, r36, r39) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r47) socket$inet_tcp(0x2, 0x1, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000380)='/dev/md0\x00', 0x208400, 0x0) r48 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r48, 0x40096102, 0x0) recvmmsg(r48, &(0x7f0000004380)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)=""/110, 0x6e}], 0x1, &(0x7f0000000a80)=""/113, 0x71}, 0x8}, {{&(0x7f0000000b00)=@l2, 0x80, &(0x7f0000002b80)=[{&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/4096, 0x1000}], 0x2, &(0x7f0000002bc0)=""/195, 0xc3}, 0x2}], 0x2, 0x40010121, &(0x7f0000004480)={0x0, 0x1c9c380}) ioctl$ASHMEM_GET_PIN_STATUS(r48, 0x7709, 0x0) syz_open_dev$mice(&(0x7f00000003c0)='/dev/input/mice\x00', 0x0, 0x502001) r49 = socket$nl_generic(0x10, 0x3, 0x10) r50 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r49, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r50, 0x400, 0x8000000, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}}, 0x0) r51 = dup(r49) ioctl$KDADDIO(r51, 0x4b34, 0xffffffffffffffff) r52 = socket$nl_generic(0x10, 0x3, 0x10) r53 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r52, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r53, 0x400, 0x8000000, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}}, 0x0) dup(r52) r54 = fcntl$dupfd(r51, 0x406, r52) getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r55, r55, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r56, 0x0) r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r57, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r36, r47, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5}) r59 = socket$inet_tcp(0x2, 0x1, 0x0) r60 = fcntl$dupfd(r59, 0x0, r59) getsockopt$sock_cred(r60, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r62, r62, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r63) r64 = socket$inet_tcp(0x2, 0x1, 0x0) r65 = fcntl$dupfd(r64, 0x0, r64) getsockopt$sock_cred(r65, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r66, r66, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r67, 0x0) r68 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r68, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r69 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r69, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r69, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r62, r63, r66, r67, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r68, r69, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r47, 0xffffffffffffffff, r67, 0x0, 0xee00]) setregid(r23, r70) r71 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r71, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r33, &(0x7f0000000500), 0x2, &(0x7f0000000280)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r18, r19, r22, r23, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r61, r71, 0x5}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r72) r73 = socket$inet_tcp(0x2, 0x1, 0x0) r74 = fcntl$dupfd(r73, 0x0, r73) getsockopt$sock_cred(r74, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r76 = socket$inet_tcp(0x2, 0x1, 0x0) r77 = fcntl$dupfd(r76, 0x0, r76) getsockopt$sock_cred(r77, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r78, r78, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r79) r80 = socket$inet_tcp(0x2, 0x1, 0x0) r81 = fcntl$dupfd(r80, 0x0, r80) getsockopt$sock_cred(r81, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r82, r82, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r83, 0x0) r84 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r85 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r85, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r85, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r78, r79, r82, r83, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r84, r85, 0x5}) setresuid(r75, r75, r78) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r86) r87 = socket$inet_tcp(0x2, 0x1, 0x0) r88 = fcntl$dupfd(r87, 0x0, r87) getsockopt$sock_cred(r88, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r89, r89, 0x0) stat(&(0x7f00000004c0)='./file1\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r90, 0x0) r91 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r91, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r92 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r92, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r92, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r75, r86, r89, r90, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r91, r92, 0x5}) r93 = socket$inet_tcp(0x2, 0x1, 0x0) r94 = fcntl$dupfd(r93, 0x0, r93) getsockopt$sock_cred(r94, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r95, r95, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r96) r97 = socket$inet_tcp(0x2, 0x1, 0x0) r98 = fcntl$dupfd(r97, 0x0, r97) getsockopt$sock_cred(r98, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r99, r99, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r100, 0x0) r101 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r101, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r102 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r102, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r102, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r95, r96, r99, r100, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r101, r102, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r86, 0xffffffffffffffff, r100, 0x0, 0xee00]) r103 = socket$inet_tcp(0x2, 0x1, 0x0) r104 = fcntl$dupfd(r103, 0x0, r103) getsockopt$sock_cred(r104, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r106 = socket$inet_tcp(0x2, 0x1, 0x0) r107 = fcntl$dupfd(r106, 0x0, r106) getsockopt$sock_cred(r107, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r108, r108, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r109) r110 = socket$inet_tcp(0x2, 0x1, 0x0) r111 = fcntl$dupfd(r110, 0x0, r110) getsockopt$sock_cred(r111, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r112, r112, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r113, 0x0) r114 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r115 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r115, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r115, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r108, r109, r112, r113, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r114, r115, 0x5}) setresuid(r105, r105, r108) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r116) r117 = socket$inet_tcp(0x2, 0x1, 0x0) r118 = fcntl$dupfd(r117, 0x0, r117) getsockopt$sock_cred(r118, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r119, r119, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r120, 0x0) r121 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r121, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r122 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r122, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r122, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r105, r116, r119, r120, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r121, r122, 0x5}) r123 = socket$inet_tcp(0x2, 0x1, 0x0) r124 = fcntl$dupfd(r123, 0x0, r123) getsockopt$sock_cred(r124, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r125, r125, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r126) r127 = socket$inet_tcp(0x2, 0x1, 0x0) r128 = fcntl$dupfd(r127, 0x0, r127) getsockopt$sock_cred(r128, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r129, r129, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r130, 0x0) r131 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r131, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r132 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r132, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r132, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r125, r126, r129, r130, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r131, r132, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r116, 0xffffffffffffffff, r130, 0x0, 0xee00]) getgroups(0x9, &(0x7f00000000c0)=[0xffffffffffffffff, r19, 0xee00, r72, 0xffffffffffffffff, r86, r116, 0xffffffffffffffff, 0xee01]) getresgid(&(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000200)=0x0) r135 = getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r136) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r137) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r138) r139 = socket$inet_tcp(0x2, 0x1, 0x0) r140 = fcntl$dupfd(r139, 0x0, r139) getsockopt$sock_cred(r140, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r141, r141, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r142) r143 = socket$inet_tcp(0x2, 0x1, 0x0) r144 = fcntl$dupfd(r143, 0x0, r143) getsockopt$sock_cred(r144, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r145, r145, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r146, 0x0) r147 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r148 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r148, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r148, &(0x7f0000000580), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r141, r142, r145, r146, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r147, r148, 0x5}) setgroups(0x9, &(0x7f0000000240)=[r12, r133, r134, r135, r136, r137, r138, r146, 0xee00]) 14:25:31 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) sendto$inet(r0, &(0x7f0000000400)='s', 0x1, 0x8840, &(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendmmsg(r0, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="7fc61b6d932dbc563145fefc191dbe34ca8e9ecdb27e56bc6ba8809e7cf04caace2b341d936860e16f71d90cf2a63ea103c29cc8aafd0c67226acce150360262eaae8207", 0x44}], 0x1}}], 0x40000a1, 0x0) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f0000001500)=[{0x0}, {&(0x7f0000000440)=""/150, 0x96}], 0x2}}], 0x300, 0x3, 0x0) 14:25:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r7, r7, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r8) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r11, r11, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r12, 0x0) r13 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r13, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r14 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r14, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r14, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r7, r8, r11, r12, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r13, r14, 0x5}) getgroups(0x3, &(0x7f00000000c0)=[r12, r4, 0xee00]) r15 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) r16 = socket$inet_tcp(0x2, 0x1, 0x0) r17 = fcntl$dupfd(r15, 0x406, r16) getsockopt$sock_cred(r17, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r18, r18, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r19) r20 = socket$inet_tcp(0x2, 0x1, 0x0) r21 = fcntl$dupfd(r20, 0x0, r20) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r22, r22, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r24 = socket$inet_tcp(0x2, 0x1, 0x0) r25 = fcntl$dupfd(r24, 0x0, r24) getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r26, r26, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27) r28 = socket$inet_tcp(0x2, 0x1, 0x0) r29 = fcntl$dupfd(r28, 0x0, r28) getsockopt$sock_cred(r29, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r30, r30, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r31, 0x0) r32 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r32, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r33 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r33, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r33, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r26, r27, r30, r31, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r32, r33, 0x5}) getgroups(0x3, &(0x7f00000000c0)=[r31, r19, 0xee00]) r34 = socket$inet_tcp(0x2, 0x1, 0x0) r35 = fcntl$dupfd(r34, 0x0, r34) getsockopt$sock_cred(r35, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r37 = socket$inet_tcp(0x2, 0x1, 0x0) r38 = fcntl$dupfd(r37, 0x0, r37) getsockopt$sock_cred(r38, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r39, r39, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r40) r41 = socket$inet_tcp(0x2, 0x1, 0x0) r42 = fcntl$dupfd(r41, 0x0, r41) getsockopt$sock_cred(r42, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r43, r43, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r44, 0x0) r45 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r46 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r46, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r46, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r39, r40, r43, r44, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r45, r46, 0x5}) setresuid(r36, r36, r39) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r47) socket$inet_tcp(0x2, 0x1, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000380)='/dev/md0\x00', 0x208400, 0x0) r48 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r48, 0x40096102, 0x0) recvmmsg(r48, &(0x7f0000004380)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)=""/110, 0x6e}], 0x1, &(0x7f0000000a80)=""/113, 0x71}, 0x8}, {{&(0x7f0000000b00)=@l2, 0x80, &(0x7f0000002b80)=[{&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/4096, 0x1000}], 0x2, &(0x7f0000002bc0)=""/195, 0xc3}, 0x2}], 0x2, 0x40010121, &(0x7f0000004480)={0x0, 0x1c9c380}) ioctl$ASHMEM_GET_PIN_STATUS(r48, 0x7709, 0x0) syz_open_dev$mice(&(0x7f00000003c0)='/dev/input/mice\x00', 0x0, 0x502001) r49 = socket$nl_generic(0x10, 0x3, 0x10) r50 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r49, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r50, 0x400, 0x8000000, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}}, 0x0) r51 = dup(r49) ioctl$KDADDIO(r51, 0x4b34, 0xffffffffffffffff) r52 = socket$nl_generic(0x10, 0x3, 0x10) r53 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r52, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r53, 0x400, 0x8000000, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}}, 0x0) dup(r52) r54 = fcntl$dupfd(r51, 0x406, r52) getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r55, r55, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r56, 0x0) r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r57, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r58 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r58, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r58, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r36, r47, r55, r56, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r57, r58, 0x5}) r59 = socket$inet_tcp(0x2, 0x1, 0x0) r60 = fcntl$dupfd(r59, 0x0, r59) getsockopt$sock_cred(r60, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r62, r62, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r63) r64 = socket$inet_tcp(0x2, 0x1, 0x0) r65 = fcntl$dupfd(r64, 0x0, r64) getsockopt$sock_cred(r65, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r66, r66, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r67, 0x0) r68 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r68, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r69 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r69, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r69, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r62, r63, r66, r67, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r68, r69, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r47, 0xffffffffffffffff, r67, 0x0, 0xee00]) setregid(r23, r70) r71 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r71, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r33, &(0x7f0000000500), 0x2, &(0x7f0000000280)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r18, r19, r22, r23, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r61, r71, 0x5}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r72) r73 = socket$inet_tcp(0x2, 0x1, 0x0) r74 = fcntl$dupfd(r73, 0x0, r73) getsockopt$sock_cred(r74, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r76 = socket$inet_tcp(0x2, 0x1, 0x0) r77 = fcntl$dupfd(r76, 0x0, r76) getsockopt$sock_cred(r77, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r78, r78, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r79) r80 = socket$inet_tcp(0x2, 0x1, 0x0) r81 = fcntl$dupfd(r80, 0x0, r80) getsockopt$sock_cred(r81, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r82, r82, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r83, 0x0) r84 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r85 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r85, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r85, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r78, r79, r82, r83, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r84, r85, 0x5}) setresuid(r75, r75, r78) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r86) r87 = socket$inet_tcp(0x2, 0x1, 0x0) r88 = fcntl$dupfd(r87, 0x0, r87) getsockopt$sock_cred(r88, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r89, r89, 0x0) stat(&(0x7f00000004c0)='./file1\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r90, 0x0) r91 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r91, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r92 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r92, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r92, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r75, r86, r89, r90, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r91, r92, 0x5}) r93 = socket$inet_tcp(0x2, 0x1, 0x0) r94 = fcntl$dupfd(r93, 0x0, r93) getsockopt$sock_cred(r94, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r95, r95, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r96) r97 = socket$inet_tcp(0x2, 0x1, 0x0) r98 = fcntl$dupfd(r97, 0x0, r97) getsockopt$sock_cred(r98, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r99, r99, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r100, 0x0) r101 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r101, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r102 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r102, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r102, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r95, r96, r99, r100, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r101, r102, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r86, 0xffffffffffffffff, r100, 0x0, 0xee00]) r103 = socket$inet_tcp(0x2, 0x1, 0x0) r104 = fcntl$dupfd(r103, 0x0, r103) getsockopt$sock_cred(r104, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r106 = socket$inet_tcp(0x2, 0x1, 0x0) r107 = fcntl$dupfd(r106, 0x0, r106) getsockopt$sock_cred(r107, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r108, r108, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r109) r110 = socket$inet_tcp(0x2, 0x1, 0x0) r111 = fcntl$dupfd(r110, 0x0, r110) getsockopt$sock_cred(r111, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r112, r112, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r113, 0x0) r114 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r115 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r115, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r115, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r108, r109, r112, r113, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r114, r115, 0x5}) setresuid(r105, r105, r108) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r116) r117 = socket$inet_tcp(0x2, 0x1, 0x0) r118 = fcntl$dupfd(r117, 0x0, r117) getsockopt$sock_cred(r118, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r119, r119, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r120, 0x0) r121 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x397}, 0x50) rt_sigqueueinfo(r121, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r122 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r122, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r122, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r105, r116, r119, r120, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r121, r122, 0x5}) r123 = socket$inet_tcp(0x2, 0x1, 0x0) r124 = fcntl$dupfd(r123, 0x0, r123) getsockopt$sock_cred(r124, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r125, r125, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r126) r127 = socket$inet_tcp(0x2, 0x1, 0x0) r128 = fcntl$dupfd(r127, 0x0, r127) getsockopt$sock_cred(r128, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r129, r129, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r130, 0x0) r131 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r131, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r132 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r132, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r132, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r125, r126, r129, r130, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r131, r132, 0x5}) getgroups(0x6, &(0x7f0000000340)=[0x0, r116, 0xffffffffffffffff, r130, 0x0, 0xee00]) getgroups(0x9, &(0x7f00000000c0)=[0xffffffffffffffff, r19, 0xee00, r72, 0xffffffffffffffff, r86, r116, 0xffffffffffffffff, 0xee01]) getresgid(&(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000200)) getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r133) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r134) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r135) r136 = socket$inet_tcp(0x2, 0x1, 0x0) r137 = fcntl$dupfd(r136, 0x0, r136) getsockopt$sock_cred(r137, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r138, r138, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r139) r140 = socket$inet_tcp(0x2, 0x1, 0x0) r141 = fcntl$dupfd(r140, 0x0, r140) getsockopt$sock_cred(r141, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r142, r142, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r143, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r144 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r144, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r144, &(0x7f0000000580), 0x80000004, &(0x7f0000000180)) perf_event_open(&(0x7f0000000000)={0x2, 0xfffffffffffffdb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext={0x9}, 0x12ce9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2481.638854][ T8828] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2481.655222][ T8828] CPU: 0 PID: 8828 Comm: syz-executor.1 Not tainted 5.5.0-rc1-syzkaller #0 [ 2481.663848][ T8828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2481.674061][ T8828] Call Trace: [ 2481.677489][ T8828] dump_stack+0x11d/0x181 [ 2481.681876][ T8828] dump_header+0xaa/0x39c [ 2481.686309][ T8828] oom_kill_process.cold+0x10/0x15 [ 2481.691446][ T8828] out_of_memory+0x231/0xa60 [ 2481.696106][ T8828] ? __rcu_read_unlock+0x66/0x3d0 [ 2481.701292][ T8828] mem_cgroup_out_of_memory+0x128/0x150 [ 2481.706865][ T8828] try_charge+0xb6c/0xbf0 [ 2481.711216][ T8828] ? __rcu_read_unlock+0x66/0x3d0 [ 2481.716377][ T8828] __memcg_kmem_charge_memcg+0x4a/0xe0 [ 2481.721910][ T8828] __memcg_kmem_charge+0xcf/0x1b0 [ 2481.726961][ T8828] __alloc_pages_nodemask+0x26c/0x310 [ 2481.732367][ T8828] alloc_pages_current+0xd1/0x170 [ 2481.738324][ T8828] pte_alloc_one+0x18/0x50 [ 2481.742822][ T8828] __pte_alloc+0x2d/0x220 [ 2481.747288][ T8828] copy_page_range+0x135a/0x19b0 [ 2481.752247][ T8828] ? __read_once_size.constprop.0+0x12/0x20 [ 2481.758358][ T8828] dup_mm+0x74a/0xba0 [ 2481.762388][ T8828] copy_process+0x3138/0x3c40 [ 2481.767181][ T8828] _do_fork+0xfe/0x7a0 [ 2481.771367][ T8828] __do_sys_clone3+0x1bd/0x260 [ 2481.776228][ T8828] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 2481.782040][ T8828] ? _copy_to_user+0x84/0xb0 [ 2481.786777][ T8828] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2481.793100][ T8828] ? put_timespec64+0x94/0xc0 [ 2481.797883][ T8828] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2481.804313][ T8828] __x64_sys_clone3+0x3a/0x50 [ 2481.809082][ T8828] do_syscall_64+0xcc/0x3a0 [ 2481.813613][ T8828] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2481.819524][ T8828] RIP: 0033:0x45b349 [ 2481.823463][ T8828] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2481.843081][ T8828] RSP: 002b:00007fedcbcafc78 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2481.851505][ T8828] RAX: ffffffffffffffda RBX: 00007fedcbcb06d4 RCX: 000000000045b349 [ 2481.859490][ T8828] RDX: 0000000000000000 RSI: 0000000000000040 RDI: 0000000020001680 [ 2481.867552][ T8828] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 2481.875539][ T8828] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2481.883525][ T8828] R13: 0000000000000071 R14: 00000000004c1bca R15: 000000000075bfd4 [ 2481.937254][T16205] ================================================================== [ 2481.945523][T16205] BUG: KCSAN: data-race in writeback_sb_inodes / xas_set_mark [ 2481.953075][T16205] [ 2481.955392][T16205] write to 0xffff8880ac40ec64 of 4 bytes by task 8932 on cpu 1: [ 2481.963017][T16205] xas_set_mark+0x14d/0x160 [ 2481.967518][T16205] __xa_set_mark+0xd3/0x100 [ 2481.972101][T16205] __set_page_dirty+0x152/0x270 [ 2481.976953][T16205] mark_buffer_dirty+0x27f/0x2c0 [ 2481.981886][T16205] __block_commit_write.isra.0+0x11f/0x170 [ 2481.987808][T16205] block_page_mkwrite+0x226/0x230 [ 2481.992835][T16205] ext4_page_mkwrite+0x5ca/0xe50 [ 2481.997882][T16205] do_page_mkwrite+0x100/0x210 [ 2482.002638][T16205] do_wp_page+0xbf5/0xeb0 [ 2482.006969][T16205] __handle_mm_fault+0x1d16/0x2e00 [ 2482.012073][T16205] handle_mm_fault+0x21b/0x530 [ 2482.016831][T16205] __do_page_fault+0x456/0x8d0 [ 2482.021595][T16205] do_page_fault+0x38/0x194 [ 2482.026122][T16205] page_fault+0x34/0x40 [ 2482.030262][T16205] [ 2482.032592][T16205] read to 0xffff8880ac40ec64 of 4 bytes by task 16205 on cpu 0: [ 2482.040238][T16205] writeback_sb_inodes+0x6e3/0xa50 [ 2482.045366][T16205] __writeback_inodes_wb+0xe8/0x1b0 [ 2482.050565][T16205] wb_writeback+0x557/0x6a0 [ 2482.055069][T16205] wb_workfn+0x748/0x970 [ 2482.059304][T16205] process_one_work+0x3d4/0x890 [ 2482.064155][T16205] worker_thread+0xa0/0x800 [ 2482.068653][T16205] kthread+0x1d4/0x200 [ 2482.072715][T16205] ret_from_fork+0x1f/0x30 [ 2482.077188][T16205] [ 2482.079513][T16205] Reported by Kernel Concurrency Sanitizer on: [ 2482.085661][T16205] CPU: 0 PID: 16205 Comm: kworker/u4:10 Not tainted 5.5.0-rc1-syzkaller #0 [ 2482.094333][T16205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2482.104530][T16205] Workqueue: writeback wb_workfn (flush-8:0) [ 2482.110606][T16205] ================================================================== [ 2482.118717][T16205] Kernel panic - not syncing: panic_on_warn set ... [ 2482.125331][T16205] CPU: 0 PID: 16205 Comm: kworker/u4:10 Not tainted 5.5.0-rc1-syzkaller #0 [ 2482.134004][T16205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2482.144063][T16205] Workqueue: writeback wb_workfn (flush-8:0) [ 2482.150030][T16205] Call Trace: [ 2482.153314][T16205] dump_stack+0x11d/0x181 [ 2482.157649][T16205] panic+0x210/0x640 [ 2482.161551][T16205] ? vprintk_func+0x8d/0x140 [ 2482.166146][T16205] kcsan_report.cold+0xc/0xd [ 2482.170735][T16205] kcsan_setup_watchpoint+0x3fe/0x460 [ 2482.176110][T16205] __tsan_read4+0xc6/0x100 [ 2482.180525][T16205] writeback_sb_inodes+0x6e3/0xa50 [ 2482.185750][T16205] __writeback_inodes_wb+0xe8/0x1b0 [ 2482.190948][T16205] wb_writeback+0x557/0x6a0 [ 2482.195463][T16205] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 2482.201363][T16205] ? wb_split_bdi_pages.isra.0+0xaa/0xf0 [ 2482.206996][T16205] wb_workfn+0x748/0x970 [ 2482.211241][T16205] ? preempt_schedule_common+0x37/0x90 [ 2482.217671][T16205] process_one_work+0x3d4/0x890 [ 2482.222530][T16205] worker_thread+0xa0/0x800 [ 2482.227028][T16205] kthread+0x1d4/0x200 [ 2482.231177][T16205] ? rescuer_thread+0x6a0/0x6a0 [ 2482.236033][T16205] ? kthread_unpark+0xe0/0xe0 [ 2482.240717][T16205] ret_from_fork+0x1f/0x30 [ 2482.246635][T16205] Kernel Offset: disabled [ 2482.251510][T16205] Rebooting in 86400 seconds..