x7, {0x0, 0x7}}, 0x20) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000040)=0xffffffff82050626, 0x4) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 05:35:45 executing program 4: socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x800080800900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$alg(0x26, 0x5, 0x0) getpgrp(0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, '-eqiv_e()ainiv(rfc4106(ccm_base(cbc(camellia),sha3-224-generic))'}, 0x58) 05:35:45 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x4, 0x4000000000000100) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x2, 0x8, 0x4, 0x100000000, 0x18, r0, 0x9}, 0x2c) r1 = socket$l2tp(0x18, 0x1, 0x1) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000100), 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000040)="54915a3cd442063dcb", &(0x7f0000000080)="baa7ea7f35ac150b4f1e39292abb022a475eed463bf4ec8649bbc20dac2c7447b5c87f5e147dc20e67cd65de665a0bca12f9dc4116cbc8d7ef7fde3d7ab2ef19914d8d4ff267741004a1dd7ba4e65537435f0dc4f4e7c4", 0x2}, 0x20) 05:35:45 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000480)='net/if_inet6\x00\'\x95\xaf\x9e\x0e\x06t\x91\xaerj:\xc3\xces\x06\xcf\x11\xea\x1f4\xd0\xebF\xca)x\xf1\x92\x98Ir\x87\xd8\xe9\x1196Oq\xa4\xd1\xa1(\xf9\xf9\x91\xe0\b\xdeY)\xc5\xe2\x8e\x12\x84\x1b\xabr\xe7\x96\xec\xf4\xba/\x80ze\x13\xb5\xb6B6\x0f\xa7\xf27\x81\xe4iG\xf6\xc7\xca\xc1\x90y\x8cF H\xc1\xa8\xe8K\x91b\x82\xc8\x98\a\x1a\x84\xf3\\g8\xab\xc3\x12\x05\xdc\xfd\xa7\x7fB\xf2*\x0e6\xc7\x01\xce\xeb\xc0|y\xab-#\xd9{3{R\x14\xc3=y|\xb8\xef\x98\xbe\xa0\xf1\xffd\xe4\xd7L\x16\xb2\x19{xW0\xed\x9b\x8d\x03\x1c\xd5\x03\x93\x01jJS\xcd=@\xe3n\xaar\x06H\xc5\xcfn\xa4m\xbf+\xe3\xae}&\xbb\xcd\a\x01f\xc5\x9eq\x16\xa8\xcf\xad#\x9c\xde\xcc\xc0\xc2\\\x9aa\xdcK\xfb\xed\x7f\xba\b\x9ah\x1b5\xd1\x83\xd03J\x92c\x9c\x822hY\x9f\x92i\x16\xd0\xb5\x91\xc0${\x033\xf2\x90\x12\x89\xcb\xc9s\xd4\xe5\xed\xcd\xb2g\r\xfe\xed\x06f\xc7C\x80\v\xdc\xa7\t\xbf\xce\xf2\v!\xfac\xe2\xdc\f\xc0\x1e\t\x1c\xbd\x8f8\x14NKmD\xd4\x88e/\nY\xc4\x11-\xa3wp\x9d\xa0\x83\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc2\x88\x94\xa0\x94]\x1c\x9d\xed\xb6\xbcy\xb7\xbd\x9a\xb9\xfd\xec_\xd4\x8dVy\xa2\xf8\x9e%\x94\xe5n\xdd0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x8040ae9f, &(0x7f0000000000)={0x0, 0x60000000080ffff, [], [0xc2]}) 05:35:45 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000100), 0x4) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000000)=0x9, 0x4) 05:35:45 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/qat_adf_ctl\x00', 0x40000, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x4000002800, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)=ANY=[@ANYBLOB="0824ade3c90400000054db742fcf80254f6db0876f587a579e9800006fc9616f1b2c1fc70c3be2a0c2c43da4e4e41f30ae9f1af00095dac2713ce705d913dc493c96c67b8f61f2cae68b5c2193894cffcefcff16316f6c34cb252f36035809b69d302e8c3a12be3b46dcaa792347ad000000000000000000000000000095d2be6e492141bd608f187b96ed00ebc4a326e85c28052aaa408b76dc7c1ce117975d7514caf2486194da98ae51f2cabbb44380862d0aeb1252593f18bf7f0badc86e"], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000200)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000300)={@mcast2, 0x39, r4}) setsockopt$inet6_int(r3, 0x29, 0xfb, &(0x7f00000001c0)=0x8, 0x4) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) socket$l2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3ac, 0x3ef, 0x14, 0x30c, 0x0, 0x8, 0xe003, 0x394, 0x0, 0x0, 0x2, 0x0, 0x14]}, 0x75, r5}) socket$l2tp(0x18, 0x1, 0x1) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000100)={@local, @empty={[0x0, 0x0, 0x0, 0x6]}, @loopback, 0x3, 0x0, 0x0, 0x500, 0x100000000, 0x1c0270, r4}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, &(0x7f0000000280)=0x14, 0x4) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000180)) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x509000, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r6, 0x5382, &(0x7f0000000480)) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDENABIO(r6, 0x4b36) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x6) sendto$inet6(r7, &(0x7f0000000500)="006164b9165dc089742ff418f68f229374ae91", 0x13, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000080)={0x3, r2}) write(r0, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163802) 05:35:45 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000480)='net/if_inet6\x00\'\x95\xaf\x9e\x0e\x06t\x91\xaerj:\xc3\xces\x06\xcf\x11\xea\x1f4\xd0\xebF\xca)x\xf1\x92\x98Ir\x87\xd8\xe9\x1196Oq\xa4\xd1\xa1(\xf9\xf9\x91\xe0\b\xdeY)\xc5\xe2\x8e\x12\x84\x1b\xabr\xe7\x96\xec\xf4\xba/\x80ze\x13\xb5\xb6B6\x0f\xa7\xf27\x81\xe4iG\xf6\xc7\xca\xc1\x90y\x8cF H\xc1\xa8\xe8K\x91b\x82\xc8\x98\a\x1a\x84\xf3\\g8\xab\xc3\x12\x05\xdc\xfd\xa7\x7fB\xf2*\x0e6\xc7\x01\xce\xeb\xc0|y\xab-#\xd9{3{R\x14\xc3=y|\xb8\xef\x98\xbe\xa0\xf1\xffd\xe4\xd7L\x16\xb2\x19{xW0\xed\x9b\x8d\x03\x1c\xd5\x03\x93\x01jJS\xcd=@\xe3n\xaar\x06H\xc5\xcfn\xa4m\xbf+\xe3\xae}&\xbb\xcd\a\x01f\xc5\x9eq\x16\xa8\xcf\xad#\x9c\xde\xcc\xc0\xc2\\\x9aa\xdcK\xfb\xed\x7f\xba\b\x9ah\x1b5\xd1\x83\xd03J\x92c\x9c\x822hY\x9f\x92i\x16\xd0\xb5\x91\xc0${\x033\xf2\x90\x12\x89\xcb\xc9s\xd4\xe5\xed\xcd\xb2g\r\xfe\xed\x06f\xc7C\x80\v\xdc\xa7\t\xbf\xce\xf2\v!\xfac\xe2\xdc\f\xc0\x1e\t\x1c\xbd\x8f8\x14NKmD\xd4\x88e/\nY\xc4\x11-\xa3wp\x9d\xa0\x83\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc2\x88\x94\xa0\x94]\x1c\x9d\xed\xb6\xbcy\xb7\xbd\x9a\xb9\xfd\xec_\xd4\x8dVy\xa2\xf8\x9e%\x94\xe5n\xdd0x0, 0x1000, 0x30, 0x1000, 0x7ff}, &(0x7f0000000040)=0x18) readv(r0, &(0x7f00000057c0)=[{&(0x7f0000004500)=""/28, 0x1c}, {&(0x7f0000004540)=""/81, 0x51}, {&(0x7f00000045c0)=""/2, 0x2}, {&(0x7f0000004600)=""/198, 0xc6}, {&(0x7f0000004700)=""/4096, 0x1000}, {&(0x7f0000005700)=""/165, 0xa5}], 0x6) execveat(r0, &(0x7f0000000340)='./file0\x00', &(0x7f0000001880)=[&(0x7f00000016c0)='net/if_inet6\x00\'\x95\xaf\x9e\x0e\x06t\x91\xaerj:\xc3\xces\x06\xcf\x11\xea\x1f4\xd0\xebF\xca)x\xf1\x92\x98Ir\x87\xd8\xe9\x1196Oq\xa4\xd1\xa1(\xf9\xf9\x91\xe0\b\xdeY)\xc5\xe2\x8e\x12\x84\x1b\xabr\xe7\x96\xec\xf4\xba/\x80ze\x13\xb5\xb6B6\x0f\xa7\xf27\x81\xe4iG\xf6\xc7\xca\xc1\x90y\x8cF H\xc1\xa8\xe8K\x91b\x82\xc8\x98\a\x1a\x84\xf3\\g8\xab\xc3\x12\x05\xdc\xfd\xa7\x7fB\xf2*\x0e6\xc7\x01\xce\xeb\xc0|y\xab-#\xd9{3{R\x14\xc3=y|\xb8\xef\x98\xbe\xa0\xf1\xffd\xe4\xd7L\x16\xb2\x19{xW0\xed\x9b\x8d\x03\x1c\xd5\x03\x93\x01jJS\xcd=@\xe3n\xaar\x06H\xc5\xcfn\xa4m\xbf+\xe3\xae}&\xbb\xcd\a\x01f\xc5\x9eq\x16\xa8\xcf\xad#\x9c\xde\xcc\xc0\xc2\\\x9aa\xdcK\xfb\xed\x7f\xba\b\x9ah\x1b5\xd1\x83\xd03J\x92c\x9c\x822hY\x9f\x92i\x16\xd0\xb5\x91\xc0${\x033\xf2\x90\x12\x89\xcb\xc9s\xd4\xe5\xed\xcd\xb2g\r\xfe\xed\x06f\xc7C\x80\v\xdc\xa7\t\xbf\xce\xf2\v!\xfac\xe2\xdc\f\xc0\x1e\t\x1c\xbd\x8f8\x14NKmD\xd4\x88e/\nY\xc4\x11-\xa3wp\x9d\xa0\x83\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc2\x88\x94\xa0\x94]\x1c\x9d\xed\xb6\xbcy\xb7\xbd\x9a\xb9\xfd\xec_\xd4\x8dVy\xa2\xf8\x9e%\x94\xe5n\xdd0xffffffffffffffff}, 0x113, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f00000058c0)={0x8, 0x120, 0xfa00, {0x0, {0x6, 0x2, "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", 0x53, 0x3, 0xec5, 0x5, 0x1, 0x73c, 0x7ff}, r2}}, 0x128) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000001a00)={0x0, 0x0, 0x2080}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000080)={r1, 0xec, "5f0f4fe8ce80caa79959777809f4d794770025e35809d2067d8e6d22ad1c2c0fbc5f6954ee4f0ed77197f0916416a703c3c7b5311166e65cddf798c954f5b3dfad09bc1fcb62a939e044214ed5c01ebb44ed127e78d792db0d5c6eb569081fd186f1505db4c947427cdb2e28d7cd3b2471a5b2b60900c3db5b9697862b1b0acd4238196b617368848127831af6d93124a405c7214638cd0c0e63bef23f286a0e4b48df0ca10a3eb0f0618d6ef09f7e1a46bf3d62af458d01000000000000003a3ee6752873b7b666aba6e1a62d7385a812789561da78f8ee96bfd3e256b690e9559ca9b0ef9b44f78b8ef01d"}, &(0x7f0000000180)=0xa5) readv(r0, &(0x7f0000001840), 0x248) socket$can_bcm(0x1d, 0x2, 0x2) 05:35:46 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$int_out(r0, 0x80804523, 0x0) 05:35:46 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x12, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'nr0\x01\x00', 0x4006}) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socketpair$unix(0x1, 0x10200000000001, 0x0, &(0x7f0000000500)) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000140)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, 0x0, 0x0) 05:35:46 executing program 2: r0 = dup(0xffffffffffffffff) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000000)=""/96) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='net/if_inet6\x00\'\x95\xaf\x9e\x0e\x06t\x91\xaerj:\xc3\xces\x06\xcf\x11\xea\x1f4\xd0\xebF\xca)x\xf1\x92\x98Ir\x87\xd8\xe9\x1196Oq\xa4\xd1\xa1(\xf9\xf9\x91\xe0\b\xdeY)\xc5\xe2\x8e\x12\x84\x1b\xabr\xe7\x96\xec\xf4\xba/\x80ze\x13\xb5\xb6B6\x0f\xa7\xf27\x81\xe4iG\xf6\xc7\xca\xc1\x90y\x8cF H\xc1\xa8\xe8K\x91b\x82\xc8\x98\a\x1a\x84\xf3\\g8\xab\xc3\x12\x05\xdc\xfd\xa7\x7fB\xf2*\x0e6\xc7\x01\xce\xeb\xc0|y\xab-#\xd9{3{R\x14\xc3=y|\xb8\xef\x98\xbe\xa0\xf1\xffd\xe4\xd7L\x16\xb2\x19{xW0\xed\x9b\x8d\x03\x1c\xd5\x03\x93\x01jJS\xcd=@\xe3n\xaar\x06H\xc5\xcfn\xa4m\xbf+\xe3\xae}&\xbb\xcd\a\x01f\xc5\x9eq\x16\xa8\xcf\xad#\x9c\xde\xcc\xc0\xc2\\\x9aa\xdcK\xfb\xed\x7f\xba\b\x9ah\x1b5\xd1\x83\xd03J\x92c\x9c\x822hY\x9f\x92i\x16\xd0\xb5\x91\xc0${\x033\xf2\x90\x12\x89\xcb\xc9s\xd4\xe5\xed\xcd\xb2g\r\xfe\xed\x06f\xc7C\x80\v\xdc\xa7\t\xbf\xce\xf2\v!\xfac\xe2\xdc\f\xc0\x1e\t\x1c\xbd\x8f8\x14NKmD\xd4\x88e/\nY\xc4\x11-\xa3wp\x9d\xa0\x83\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc2\x88\x94\xa0\x94]\x1c\x9d\xed\xb6\xbcy\xb7\xbd\x9a\xb9\xfd\xec_\xd4\x8dVy\xa2\xf8\x9e%\x94\xe5n\xdd0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)=0x7, 0x4) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000100), 0x4) 05:35:46 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) readlinkat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) 05:35:46 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x200000, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x3}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r1, 0x10001, 0x9, 0x10001}, &(0x7f0000000140)=0x10) r2 = socket$inet6(0xa, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000080)=0xfffffffffffffffd, 0xfffffffffffffc56) 05:35:47 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000480)='net/if_inet6\x00\'\x95\xaf\x9e\x0e\x06t\x91\xaerj:\xc3\xces\x06\xcf\x11\xea\x1f4\xd0\xebF\xca)x\xf1\x92\x98Ir\x87\xd8\xe9\x1196Oq\xa4\xd1\xa1(\xf9\xf9\x91\xe0\b\xdeY)\xc5\xe2\x8e\x12\x84\x1b\xabr\xe7\x96\xec\xf4\xba/\x80ze\x13\xb5\xb6B6\x0f\xa7\xf27\x81\xe4iG\xf6\xc7\xca\xc1\x90y\x8cF H\xc1\xa8\xe8K\x91b\x82\xc8\x98\a\x1a\x84\xf3\\g8\xab\xc3\x12\x05\xdc\xfd\xa7\x7fB\xf2*\x0e6\xc7\x01\xce\xeb\xc0|y\xab-#\xd9{3{R\x14\xc3=y|\xb8\xef\x98\xbe\xa0\xf1\xffd\xe4\xd7L\x16\xb2\x19{xW0\xed\x9b\x8d\x03\x1c\xd5\x03\x93\x01jJS\xcd=@\xe3n\xaar\x06H\xc5\xcfn\xa4m\xbf+\xe3\xae}&\xbb\xcd\a\x01f\xc5\x9eq\x16\xa8\xcf\xad#\x9c\xde\xcc\xc0\xc2\\\x9aa\xdcK\xfb\xed\x7f\xba\b\x9ah\x1b5\xd1\x83\xd03J\x92c\x9c\x822hY\x9f\x92i\x16\xd0\xb5\x91\xc0${\x033\xf2\x90\x12\x89\xcb\xc9s\xd4\xe5\xed\xcd\xb2g\r\xfe\xed\x06f\xc7C\x80\v\xdc\xa7\t\xbf\xce\xf2\v!\xfac\xe2\xdc\f\xc0\x1e\t\x1c\xbd\x8f8\x14NKmD\xd4\x88e/\nY\xc4\x11-\xa3wp\x9d\xa0\x83\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc2\x88\x94\xa0\x94]\x1c\x9d\xed\xb6\xbcy\xb7\xbd\x9a\xb9\xfd\xec_\xd4\x8dVy\xa2\xf8\x9e%\x94\xe5n\xdd0x0, 0x2}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={r1, 0x7, 0x9, 0x7f, 0x3}, 0x14) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000100), 0x4) 05:35:47 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x40000000000020f, 0x0) 05:35:47 executing program 4: time(&(0x7f00000008c0)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x102, 0x4) bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000040), &(0x7f00000000c0)=0x68) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000005480), 0xffffffffffffffff) r1 = add_key(&(0x7f00000053c0)='asymmetric\x00', &(0x7f0000005400)={'syz', 0x0}, &(0x7f0000005440)="f84e0cad4f825044c5b3ce49e3b957cc3997c30212fea77bbce9f3d7851d4d53fc4b6e9f1d822a65d07444d2bcf953b6827a4d0cda715fb3a32c410404bc5d", 0x3f, 0xffffffffffffffff) keyctl$clear(0x7, r1) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x40) exit(0x7fffffffbffffffd) recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000140)=""/226, 0xe2}, {&(0x7f0000000300)=""/206, 0xce}, {&(0x7f0000005ac0)=""/173, 0xad}, {&(0x7f0000000240)=""/98, 0x62}, {&(0x7f00000004c0)=""/69, 0x45}, {&(0x7f0000000540)=""/101, 0x65}], 0x6, &(0x7f0000000640)=""/231, 0xe7, 0xfc}, 0x1}, {{0x0, 0x0, &(0x7f0000000e40), 0xb, &(0x7f0000000ec0)=""/157, 0x9d, 0x6}, 0x1}, {{&(0x7f0000000f80)=@nfc_llcp, 0x80, &(0x7f00000011c0)=[{&(0x7f0000001000)=""/139, 0x8b}, {&(0x7f0000001100)=""/181, 0xb5}, {&(0x7f0000000b80)=""/32, 0x20}], 0x3, &(0x7f0000001200)=""/32, 0x20, 0x80000000}, 0x3}, {{&(0x7f0000001240)=@ipx, 0x80, &(0x7f0000001440)=[{&(0x7f00000012c0)=""/71, 0xffffffe5}, {&(0x7f0000001340)=""/226, 0xe2}], 0x2, &(0x7f0000001480)=""/148, 0x94, 0x3}, 0x4}, {{&(0x7f0000001540)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}}, 0x80, &(0x7f00000036c0)=[{&(0x7f00000015c0)=""/212, 0xd4}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f00000026c0)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x20}, 0x946}, {{0x0, 0x0, &(0x7f00000037c0)=[{&(0x7f0000003700)=""/173, 0xad}], 0x1, 0x0, 0x0, 0x4}, 0x8}, {{&(0x7f0000003800)=@ipx, 0x80, &(0x7f0000003980)=[{&(0x7f0000003880)=""/42, 0x2a}, {&(0x7f00000038c0)=""/174, 0xae}], 0x2, &(0x7f00000039c0)=""/3, 0x3, 0x8}, 0x6}, {{&(0x7f0000003a00)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000003c80)=[{&(0x7f0000003a80)=""/74, 0x4a}, {&(0x7f0000003b00)=""/103, 0x67}, {&(0x7f0000003b80)=""/245, 0xf5}], 0x3, &(0x7f0000003cc0)=""/4096, 0x1000, 0x3}, 0x2}, {{&(0x7f00000007c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000004e40)=[{&(0x7f0000004d40)=""/12, 0xc}, {&(0x7f0000004d80)=""/16, 0x10}, {&(0x7f0000004dc0)=""/72, 0x48}], 0x3, &(0x7f0000004e80)=""/38, 0x26}}], 0x9, 0x2, &(0x7f0000005100)={0x0, 0x989680}) syz_genetlink_get_family_id$ipvs(&(0x7f0000005180)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r4, &(0x7f0000005280)={&(0x7f0000005140)={0x10, 0x0, 0x0, 0x44000000}, 0xc, &(0x7f0000005240)={&(0x7f0000005680)=ANY=[@ANYBLOB="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"], 0x1}}, 0x4000841) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) accept4$inet(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x10, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) fchmod(r2, 0x101) setsockopt$inet_tcp_buf(r0, 0x6, 0xb, &(0x7f0000005380)="d09406254b8a0b8a1b46eb0c0a479781095aa5f3d9ca5c6b00f4a746ef08f95181cb801a9c9c532f0f8044159276802e81b45631f79e", 0x36) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) getsockopt$IP_VS_SO_GET_VERSION(r3, 0x0, 0x480, &(0x7f00000052c0), &(0x7f0000005300)=0x40) connect$inet(r0, &(0x7f0000606ff0)={0x2, 0x4e20, @loopback}, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000005200)='team\x00') getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000005b80)={@ipv4={[], [], @multicast1}, 0x0}, &(0x7f0000005bc0)=0x14) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000980)={'\x01\x00\x00\x00\x00\x00\x00\x00y\xa1\x00\x00t\x9b`\x03', r5}) getpeername(r4, &(0x7f0000005500)=@xdp, &(0x7f0000005340)=0x80) accept$packet(r2, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000005600)=0xffffffffffffff35) getsockopt$inet6_mreq(r3, 0x29, 0x1d, &(0x7f0000005640)={@ipv4={[], [], @multicast2}}, &(0x7f0000005840)=0x14) accept$packet(r3, &(0x7f0000005880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000058c0)=0x14) getpeername$packet(r2, &(0x7f0000005900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000005940)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000005980)={{{@in=@multicast2}}, {{@in=@multicast1}, 0x0, @in=@loopback}}, &(0x7f0000005a80)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000780)={'team0\x00', r6}) accept$packet(r4, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000740)=0xfffffffffffffedf) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000006080)={&(0x7f00000051c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000006040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="08000700000040004000010000000000000000000000000000a10e0008000df88df898f7c10a403fd9bda985ca6bf3000000d4e900000066cd6a101679f7e419bf010194e8103e89411fc0f4ad255e6f755a01dbe49f51f00000000000000000000000000000000000d64ea104a6c1286feb08b863de0000000000c24a427d9d00042ed1d6fce872063afcf3856b4800f9c438ee45646a0e1e787a88c0ef06640457b4584568f3f567eeb943d2b09d0df5f4b4c611ce7a5487061e42d36ed8ae4e22c12c12f758ad4f1ef328d16b713d837acaba69f6327d"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg(r0, &(0x7f00000010c0)=[{{&(0x7f0000000bc0)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000d40), 0x2fb, &(0x7f0000000d80)}}], 0x4000000000001b4, 0x40400d4) ioctl$TIOCEXCL(r2, 0x540c) 05:35:47 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000480)='net/if_inet6\x00\'\x95\xaf\x9e\x0e\x06t\x91\xaerj:\xc3\xces\x06\xcf\x11\xea\x1f4\xd0\xebF\xca)x\xf1\x92\x98Ir\x87\xd8\xe9\x1196Oq\xa4\xd1\xa1(\xf9\xf9\x91\xe0\b\xdeY)\xc5\xe2\x8e\x12\x84\x1b\xabr\xe7\x96\xec\xf4\xba/\x80ze\x13\xb5\xb6B6\x0f\xa7\xf27\x81\xe4iG\xf6\xc7\xca\xc1\x90y\x8cF H\xc1\xa8\xe8K\x91b\x82\xc8\x98\a\x1a\x84\xf3\\g8\xab\xc3\x12\x05\xdc\xfd\xa7\x7fB\xf2*\x0e6\xc7\x01\xce\xeb\xc0|y\xab-#\xd9{3{R\x14\xc3=y|\xb8\xef\x98\xbe\xa0\xf1\xffd\xe4\xd7L\x16\xb2\x19{xW0\xed\x9b\x8d\x03\x1c\xd5\x03\x93\x01jJS\xcd=@\xe3n\xaar\x06H\xc5\xcfn\xa4m\xbf+\xe3\xae}&\xbb\xcd\a\x01f\xc5\x9eq\x16\xa8\xcf\xad#\x9c\xde\xcc\xc0\xc2\\\x9aa\xdcK\xfb\xed\x7f\xba\b\x9ah\x1b5\xd1\x83\xd03J\x92c\x9c\x822hY\x9f\x92i\x16\xd0\xb5\x91\xc0${\x033\xf2\x90\x12\x89\xcb\xc9s\xd4\xe5\xed\xcd\xb2g\r\xfe\xed\x06f\xc7C\x80\v\xdc\xa7\t\xbf\xce\xf2\v!\xfac\xe2\xdc\f\xc0\x1e\t\x1c\xbd\x8f8\x14NKmD\xd4\x88e/\nY\xc4\x11-\xa3wp\x9d\xa0\x83\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc2\x88\x94\xa0\x94]\x1c\x9d\xed\xb6\xbcy\xb7\xbd\x9a\xb9\xfd\xec_\xd4\x8dVy\xa2\xf8\x9e%\x94\xe5n\xdd0x0, 0x4, 0x30}, &(0x7f0000000040)=0xc) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x12002) openat$cgroup_subtree(r2, &(0x7f0000000140)='cgroup.subtree_control\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000080)={r1, 0x2}, &(0x7f00000000c0)=0x8) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000180)=0x5) 05:35:47 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040), 0x4) 05:35:47 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000480)='smaps_rollup\x00') readv(r0, &(0x7f00000019c0)=[{&(0x7f00000006c0)=""/4096, 0x1000}], 0x1) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000240)=""/237, 0xed}], 0x1, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r0, 0x4004ae8b, &(0x7f00000000c0)=ANY=[@ANYBLOB="42210000700b5b7c35c79b455c161947849d00d201406184b3950400000000000000000100000089a65c0246396308000000000000fd6bd928599a1721f7b537c4f18d5640e190c0bb9e3b549274b7f831c36af5cc1c9e4c98085af2bdb0fde84412de31d09298bd120f39bddf06df34dc85e48453184bb448dcda"]) readv(r0, &(0x7f0000001840), 0x248) ioctl$KDSKBLED(r0, 0x4b65, 0x402) connect$l2tp(r0, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x3, 0x3, {0xa, 0x4e24, 0x7, @loopback, 0x1dbd}}}, 0x32) chmod(&(0x7f0000000080)='./file0\x00', 0x8) [ 274.940665] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 275.105428] binder_alloc: binder_alloc_mmap_handler: 11351 20001000-20004000 already mapped failed -16 [ 275.115784] binder: BINDER_SET_CONTEXT_MGR already set [ 275.121264] binder: 11351:11397 ioctl 40046207 0 returned -16 [ 275.133169] binder: 11351:11397 ERROR: BC_REGISTER_LOOPER called without request [ 275.140898] binder: 11397 RLIMIT_NICE not set [ 275.184191] binder: undelivered TRANSACTION_ERROR: 29201 05:35:48 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r0, &(0x7f0000000200), 0x1fa, 0x0, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x10000, 0x0) write$FUSE_OPEN(r2, &(0x7f00000000c0)={0x20, 0xfffffffffffffff5, 0x7, {0x0, 0x7}}, 0x20) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000040)=0xffffffff82050626, 0x4) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 05:35:48 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000100), 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@dev={0xfe, 0x80, [], 0xc}, 0x4, 0x1, 0x0, 0x3, 0x1, 0x8001}, 0x20) 05:35:48 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) unshare(0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x0, 0x5f}) 05:35:48 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000480)='net/if_inet6\x00\'\x95\xaf\x9e\x0e\x06t\x91\xaerj:\xc3\xces\x06\xcf\x11\xea\x1f4\xd0\xebF\xca)x\xf1\x92\x98Ir\x87\xd8\xe9\x1196Oq\xa4\xd1\xa1(\xf9\xf9\x91\xe0\b\xdeY)\xc5\xe2\x8e\x12\x84\x1b\xabr\xe7\x96\xec\xf4\xba/\x80ze\x13\xb5\xb6B6\x0f\xa7\xf27\x81\xe4iG\xf6\xc7\xca\xc1\x90y\x8cF H\xc1\xa8\xe8K\x91b\x82\xc8\x98\a\x1a\x84\xf3\\g8\xab\xc3\x12\x05\xdc\xfd\xa7\x7fB\xf2*\x0e6\xc7\x01\xce\xeb\xc0|y\xab-#\xd9{3{R\x14\xc3=y|\xb8\xef\x98\xbe\xa0\xf1\xffd\xe4\xd7L\x16\xb2\x19{xW0\xed\x9b\x8d\x03\x1c\xd5\x03\x93\x01jJS\xcd=@\xe3n\xaar\x06H\xc5\xcfn\xa4m\xbf+\xe3\xae}&\xbb\xcd\a\x01f\xc5\x9eq\x16\xa8\xcf\xad#\x9c\xde\xcc\xc0\xc2\\\x9aa\xdcK\xfb\xed\x7f\xba\b\x9ah\x1b5\xd1\x83\xd03J\x92c\x9c\x822hY\x9f\x92i\x16\xd0\xb5\x91\xc0${\x033\xf2\x90\x12\x89\xcb\xc9s\xd4\xe5\xed\xcd\xb2g\r\xfe\xed\x06f\xc7C\x80\v\xdc\xa7\t\xbf\xce\xf2\v!\xfac\xe2\xdc\f\xc0\x1e\t\x1c\xbd\x8f8\x14NKmD\xd4\x88e/\nY\xc4\x11-\xa3wp\x9d\xa0\x83\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc2\x88\x94\xa0\x94]\x1c\x9d\xed\xb6\xbcy\xb7\xbd\x9a\xb9\xfd\xec_\xd4\x8dVy\xa2\xf8\x9e%\x94\xe5n\xdd0x0, @in={{0x2, 0x4e23, @multicast2}}, [0x1ff, 0x2, 0x6, 0x800, 0xffffffffffff8000, 0xffffffffffffff01, 0x4, 0x9, 0x8, 0x6c9, 0x9, 0x4, 0xfc2a, 0x3ff, 0x99a]}, &(0x7f0000000100)=0x100) getsockopt$inet_dccp_buf(r0, 0x21, 0xf, &(0x7f0000001a00)=""/4096, &(0x7f0000000640)=0x1000) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e21, 0xfffffffffffffffb, @rand_addr="5aefca0c2125e07c516feb836bd89812", 0x7}}, 0xfc4, 0x5}, &(0x7f0000000340)=0x90) ioctl$PPPIOCGIDLE(r0, 0x8010743f, &(0x7f0000000680)) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000380)={r1, 0x7, 0x8, 0x4, 0x8a, 0x7ff, 0x1ff, 0x0, {r2, @in={{0x2, 0x4e22, @multicast2}}, 0x0, 0x1, 0xfffffffffffffffd, 0x4, 0x10001}}, &(0x7f0000000440)=0xb0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000240)=""/237, 0xed}], 0x1, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) readv(r0, &(0x7f0000001840), 0x248) 05:35:48 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp\x00') sendfile(r0, r2, 0x0, 0x80000003) 05:35:48 executing program 5: socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) 05:35:48 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000480)='net/if_inet6\x00\'\x95\xaf\x9e\x0e\x06t\x91\xaerj:\xc3\xces\x06\xcf\x11\xea\x1f4\xd0\xebF\xca)x\xf1\x92\x98Ir\x87\xd8\xe9\x1196Oq\xa4\xd1\xa1(\xf9\xf9\x91\xe0\b\xdeY)\xc5\xe2\x8e\x12\x84\x1b\xabr\xe7\x96\xec\xf4\xba/\x80ze\x13\xb5\xb6B6\x0f\xa7\xf27\x81\xe4iG\xf6\xc7\xca\xc1\x90y\x8cF H\xc1\xa8\xe8K\x91b\x82\xc8\x98\a\x1a\x84\xf3\\g8\xab\xc3\x12\x05\xdc\xfd\xa7\x7fB\xf2*\x0e6\xc7\x01\xce\xeb\xc0|y\xab-#\xd9{3{R\x14\xc3=y|\xb8\xef\x98\xbe\xa0\xf1\xffd\xe4\xd7L\x16\xb2\x19{xW0\xed\x9b\x8d\x03\x1c\xd5\x03\x93\x01jJS\xcd=@\xe3n\xaar\x06H\xc5\xcfn\xa4m\xbf+\xe3\xae}&\xbb\xcd\a\x01f\xc5\x9eq\x16\xa8\xcf\xad#\x9c\xde\xcc\xc0\xc2\\\x9aa\xdcK\xfb\xed\x7f\xba\b\x9ah\x1b5\xd1\x83\xd03J\x92c\x9c\x822hY\x9f\x92i\x16\xd0\xb5\x91\xc0${\x033\xf2\x90\x12\x89\xcb\xc9s\xd4\xe5\xed\xcd\xb2g\r\xfe\xed\x06f\xc7C\x80\v\xdc\xa7\t\xbf\xce\xf2\v!\xfac\xe2\xdc\f\xc0\x1e\t\x1c\xbd\x8f8\x14NKmD\xd4\x88e/\nY\xc4\x11-\xa3wp\x9d\xa0\x83\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc2\x88\x94\xa0\x94]\x1c\x9d\xed\xb6\xbcy\xb7\xbd\x9a\xb9\xfd\xec_\xd4\x8dVy\xa2\xf8\x9e%\x94\xe5n\xdd0x0}, &(0x7f0000003e40)=0xc) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000003f40)={@dev, 0x0}, &(0x7f0000003f80)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000003fc0)={{{@in6=@mcast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@local}}, &(0x7f00000040c0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000004100)={{{@in=@multicast1, @in6=@ipv4={[], [], @initdev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004200)=0xe8) accept$packet(r0, &(0x7f0000009340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000009380)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000009400)={{{@in6=@ipv4={[], [], @multicast1}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@remote}}, &(0x7f0000009500)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000009540)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in6=@empty}}, &(0x7f0000009640)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000009680)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000096c0)={'bond_slave_0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000009700)={{{@in6=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000009800)=0xe8) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000009b40)={&(0x7f0000000100), 0xc, &(0x7f0000009b00)={&(0x7f0000009840)=ANY=[@ANYBLOB="a4020e7b", @ANYRES16=r1, @ANYBLOB="080828bd7000ffdbdf250200000008000100", @ANYRES32=r2, @ANYBLOB="b400020038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000080003000300000008000400020000003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r3, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004003f00000008000600", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="b400020040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000000000008000600", @ANYRES32=r6, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000900000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000800030003000000080004000000000008000100", @ANYRES32=r7, @ANYBLOB="400002003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="c8000200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000800000008000600", @ANYRES32=r10, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r11, @ANYBLOB="4c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000001c000400686173685f746f5f706f72745f6d617070696e6700000000"], 0x2a4}, 0x1, 0x0, 0x0, 0x240400c4}, 0x0) readv(r0, &(0x7f00000019c0)=[{&(0x7f00000006c0)=""/4096, 0x1000}], 0x1) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000240)=""/237, 0xed}], 0x1, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000000)={0xe, @capture={0x1000, 0x1, {0xffffffffffffb30c, 0x5}, 0x0, 0x1}}) 05:35:48 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x2, 0x0) sendmmsg$alg(r1, &(0x7f0000002040)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="11ed8cd74faf88f887d9baf340322acc7dbc591ef3481871f503c83214695f85e8d261fc5f751cf3401ec63205937b13723e6b9dc57967297f34aaffd1fdfaef4940848186699437ed45509c519bb82243b609dbad150539e9ea", 0x5a}, {&(0x7f0000000280)="686a1d71b07ec082b6ed17990e6c2900ce3a533b5fdae6936db2ac951fbfd4c9c33738a264ab087ca501331861b60d73d2af165a892db25c7c05f9613a94bd3b62499b672515396480b9c427dba2ad5ca321eeaf4d21f3", 0x57}, {&(0x7f0000000300)="a02dc64777bcbab0367d177c956e57a59818c87dff9221a7b189dc3811aea02a52ffe0783d0641009ac09f1154069855fceabfcb7dc967913a84e6ff713062b281843027a768be36b086529f5453011d0218d887ae61ed6cc77ddea51df5ec92b8a4781e47d11b3550deedb8c43898971cdc223d229473b73d46a143bfe710ac0de83109da4dca9c631a6c5b62c09f8ee7a87935e2f01f27fe36bddd79f047f9363e89ef07e4a840d634790f0fc94989f857c6", 0xb3}, {&(0x7f00000003c0)="eb268cd1e8a5bead9e1be3b801fa521ebc794e50edd05ae3074b8a60c2fc075ceef7d13668c4ddbd7509a8247264441e6a5b4c34435949403b0f762889577bdae76342a594a6beec819c5b7e0735d121d2673972536edb157cfa3c546e575c5eb258c25cfc1005a4789663d59106d47b58f73e2a0965edb872b588", 0x7b}], 0x4, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x4}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x68, 0x117, 0x2, 0x4f, "38473c0a85e07c5caba8fbbb7ad1ded8aea5c05c0571c68be2f33eef92c9c34fe9b26c062dce045853a770bc013c6f1deb31f3cd9e117ffb1aeb7417c7916051b8bd45d8c66dd11764254ad74d8ccc"}, @iv={0xe8, 0x117, 0x2, 0xce, "737802eece43bc3f8f7c83dc347a39ebc3942c28793f8010f87c2f390e75bd938e970257e2ba7efb20f98283db700e5e33e40433ca925c027f34ffe69acfeb8cbb8b96d44b30cabf0ac2ce0556dd4012bbea4a4651adf6ed750fb5e0d68d9e033e1e075e4575f8612292afe44405d5f223542875da98366aeb30369f5c26a3994d3a0148c829905c1442211f95eafa2608058caba6abaec48b9e79a72a6e52c757bcc169bd6b16c2aa287414c5b2c10796333a10b52195000639765fabc4fe85692f302a941d8972ef7278358214"}, @assoc={0x18, 0x117, 0x4, 0x3}, @assoc={0x18, 0x117, 0x4, 0x3}, @iv={0x98, 0x117, 0x2, 0x82, "b37074d9c6eb7db4cef957573320adc3423c09dd8b4348d437677be6dab7f1e12f239ad59ebcb708291f529b944cf1400cc27db2d46dc8cc040cd15c94c63dde7048fcf71791e08a18bb32e4f92e404e4b6f5e53aa4b52cf9aeffe97a139428df53b18b7b0a1f2cc14e0d77a8d0b5981ca82fde958e81d4c356233d944f4ecb2ed2c"}, @op={0x18, 0x117, 0x3, 0x1}], 0x278, 0x4008800}, {0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000700)="3d0d9b0ad1d7bd98e202c791be5138653d4ff318aa769069a71e0993528952591b9e0f16662063ebe5c202b54ecf2029cfbde40277a39521a0fcfd783493a01a26035b78085755ad5520bcac11a09d36d75b48c7e43752f44445ad25d071f7c94cd12a8d447152d628fb42f3793434b144b9daaaaf9fe32bd8362683826dc26bd22ada9d1e8ad762d24532a48cde71f4737bb67e5be112a942988585cbfb974fc7c31ee4712372307339928feec49a835806a1c032ae631dbfaf8f710eda54b5307cbd695b904778ea644f960aea", 0xce}, {&(0x7f0000000800)}, {&(0x7f0000000840)="f3d5fd8968609d2b44fdc46559e54df504cc5dd1eb0c1a791e7268c178c9e768653fd7931b5c54d1c097e3fc0cb602d3dd4050af15a5cb0b6739edb850c0e80c19300aa29c16", 0x46}, {&(0x7f00000008c0)="c0d06c6424e9c30437321cff7b6a3a5e1293152721f5ed5778dc4d362b13afab3c442fdeb09472a17ae2b428ff42727195b632c90b48614dfb7baad6cafa55e37c8bcd6d76b76e6a7d848df68c0dd6b52d853aeb6b6615886b7a5763d4a1eda23ebfd32bece449fc76f69fed42f3929a4518ebe0e7f08d5f26210a9ce2fb543a8ce4aa6ad3267a7de14b42d96d2ca20f3eeb0ac8fc46333a3746c8fad150f1329934d8050b77169af999e1d28da9e6c841fa027973b8c747e7d4904d22cbca7de4a1fd9a2ff7881c9292b4929280f0c7d849b6a565a8cba7d839269def18ebd5b339a59fe811e35f7dd1b81d34", 0xed}, {&(0x7f00000009c0)="b9c6234a58266126888ca27faf94caa308732f4546fc00c3cad2fd6fb1f6a3d47bcb29ee2ea6e7ac5d20506835de9d13a20780c7154d490255681029c86b9b9b2b19c1233cd04234b98c2f9c79e8803f3064f340651619380b935eac9d5cb8a61be1c91d608f62e5fbe72babff1f60600886a1d9fb82cd36ec575f1a6689efbdc2688f9110ee5bed9298979ceabb27253b5f3fef3b5ff8e5b5d4772a598f0df5d7c3bb06b39a0bb1d0d68f878792fd13060737dbf3", 0xb5}, {&(0x7f0000000a80)="8c0e6ec33dc5ca25664a7992e0b626b57e257117f9112b548badcc2d5310d7521e49a7d67fc657a8eed9157950ae536a2f3bd44c17174cec5f28117ac4491aee1a08ad60307e07af703791ac40a94492c39a9068aca526600a6ff6a008c282f26e017707ce469eb4afc17303348defd6c0543a5d0ddd3aa199e0240f3c24aab30a2e0b5c83affd107b637f49af7db389d9e8836c7d9a2c337f282678260fae838468a1d567", 0xa5}], 0x6, &(0x7f0000000bc0)=[@assoc={0x18}, @op={0x18}, @iv={0x88, 0x117, 0x2, 0x74, "78f74979778845ed072393991718e7a716397d72f41daec2cee8da46123a8e8b2e16342c02f2463f258290d6cf46c197de5d2cbcdc6d294b379dadf36060aa4224af738981a53031bd220589365dcc1b945e482a9941f3a3410913f71fe47143642a6709e53a76657629b39dac1d12b30a8bac70"}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @assoc={0x18, 0x117, 0x4, 0x800}], 0x10e8}, {0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001cc0)="1b50fb7b43b0692d9d72c6d66464799e5bfd61ae9a8beae1f66e619613d82e6b1f96c24a034c0737e0f2289884cfa734587e1b06684c273287cbbac389acddefaa1e3bb9f01856d99e7fe77b85d34c3c94997ae073eb38b95b5db7e53ffc8eeead054e2e6bc7446574addabbe3046850f57d203558091b627e77b07afcc4752a74c3ac1ad1e29120df08f7613699c7498ac3a022ee08687b36d4a72f4cba3a58b9cc5326a187e5914a81ec6ca37d1331b313893cb321e03d1432061dee6793be478028", 0xc3}, {&(0x7f0000001dc0)="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", 0xfe}], 0x2, &(0x7f0000001f00)=ANY=[@ANYBLOB="180000000000000017010000040000000300000000000000b000000000000000170100000200000096000000631cc1fa3721bcee018faa7d80334aacf6511acf870fe34c9160906070e1b4eadd30e3b28a7325ad71f7cdf7122ed690f2cee81478cc66800c9cef1a17deb17ea2cbbda1cb966b1ff38febee4332bfad35a5187182faf26119c03b063a306a43c690e42111e1f967e14d2f60c7bd200c7bcaec13da870bf0644a0235bb20062e7a92a95b19da56c2aff01fc7a6258c369f7d87854478000000000000180000000000000017010000040000000600000000000000180000000000000017010000040000000900000000000000180000000000000017010000040000000000000000000000180000000000000017010000040000000000000000000000180000000000000017010000040000000400000000000000"], 0x140, 0x4000}], 0x3, 0x8000) socket$inet6(0xa, 0x800, 0x6) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000100), 0x4) r2 = request_key(&(0x7f0000000800)='user\x00', &(0x7f0000002440)={'syz', 0x3}, &(0x7f0000002480)='id_legacy\x00', 0x0) r3 = add_key(&(0x7f0000000000)='G\x00\x00\x00egacy\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000002280)="f159028d11f7899c1ee9d01b8ddf92712f281de71cac00f9092c80a8b21d1ba2badf5a2e7476c31883a421b922575588b3419115e7f59d11267ff8890e093ebd3d793e577bc5d697787f88b4a6c3155dc36c58393f1018e2e739367da757d5cf67a15af00c0ce7a70d49b2368ab724866e4cf9f926768b532a751a78f53909661c7289c4f026170b1b61627deaee2787b10f6bc0efcb44e2f59d01b5e115e0e64d466383cf97f5896fcbddccee4474e00d2db13e122c9ef94b2cefc18d5e7218b1d120f98fc4d79245184fedb85ba52dede8cc36011ede721d35a6380234adb09bbc1aade18d130fa801d19414831a53dd9292ccb837cb030a26c9dbcc19b2ddce0a860cb319fb9337b9f13dbe8f775e836608c0ac2a1b0da3a9830a531159b7f7f2e33a9b8f410744055824c799ada4953fa30c097e726f04fe8f305303b0c623f31c2bc9899ad6eecf00da82b88e4ccea211ae1c13e2d2834b4c5977a37b7e28a944ade89378ddb0e920c4693f5c827374dd07b6e5098b268996757be53b9e357aff", 0x183, r2) keyctl$describe(0x6, r3, &(0x7f0000000080)=""/7, 0x7) 05:35:48 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000000)={0x18, 0x2, 0x0, 0x17, 0x0, 0x80, 0x0, 0x140}) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0) 05:35:48 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000480)='net/if_inet6\x00\'\x95\xaf\x9e\x0e\x06t\x91\xaerj:\xc3\xces\x06\xcf\x11\xea\x1f4\xd0\xebF\xca)x\xf1\x92\x98Ir\x87\xd8\xe9\x1196Oq\xa4\xd1\xa1(\xf9\xf9\x91\xe0\b\xdeY)\xc5\xe2\x8e\x12\x84\x1b\xabr\xe7\x96\xec\xf4\xba/\x80ze\x13\xb5\xb6B6\x0f\xa7\xf27\x81\xe4iG\xf6\xc7\xca\xc1\x90y\x8cF H\xc1\xa8\xe8K\x91b\x82\xc8\x98\a\x1a\x84\xf3\\g8\xab\xc3\x12\x05\xdc\xfd\xa7\x7fB\xf2*\x0e6\xc7\x01\xce\xeb\xc0|y\xab-#\xd9{3{R\x14\xc3=y|\xb8\xef\x98\xbe\xa0\xf1\xffd\xe4\xd7L\x16\xb2\x19{xW0\xed\x9b\x8d\x03\x1c\xd5\x03\x93\x01jJS\xcd=@\xe3n\xaar\x06H\xc5\xcfn\xa4m\xbf+\xe3\xae}&\xbb\xcd\a\x01f\xc5\x9eq\x16\xa8\xcf\xad#\x9c\xde\xcc\xc0\xc2\\\x9aa\xdcK\xfb\xed\x7f\xba\b\x9ah\x1b5\xd1\x83\xd03J\x92c\x9c\x822hY\x9f\x92i\x16\xd0\xb5\x91\xc0${\x033\xf2\x90\x12\x89\xcb\xc9s\xd4\xe5\xed\xcd\xb2g\r\xfe\xed\x06f\xc7C\x80\v\xdc\xa7\t\xbf\xce\xf2\v!\xfac\xe2\xdc\f\xc0\x1e\t\x1c\xbd\x8f8\x14NKmD\xd4\x88e/\nY\xc4\x11-\xa3wp\x9d\xa0\x83\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc2\x88\x94\xa0\x94]\x1c\x9d\xed\xb6\xbcy\xb7\xbd\x9a\xb9\xfd\xec_\xd4\x8dVy\xa2\xf8\x9e%\x94\xe5n\xdd0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in=@loopback, @in6=@ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@mcast1}}, &(0x7f0000000240)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000280)={{{@in=@dev={0xac, 0x14, 0x14, 0x29}, @in=@loopback, 0x4e20, 0x3ff, 0x4e23, 0x0, 0x2, 0xa0, 0x80, 0x21, r1, r2}, {0xdbc, 0x7, 0x1, 0xfffffffffffffffd, 0x4, 0xfffffffffffffff8, 0x7, 0x5}, {0x7, 0x0, 0x3ff, 0xa15f}, 0x0, 0x6e6bb0, 0x3, 0x1, 0x2, 0x3}, {{@in=@empty, 0x4d2, 0xff}, 0xa, @in=@broadcast, 0x3501, 0x2, 0x2, 0x0, 0x1, 0xad, 0x4f3}}, 0xe8) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) sched_getattr(r3, &(0x7f0000000040), 0x30, 0x0) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000100), 0x4) 05:35:49 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000480)='net/if_inet6\x00\'\x95\xaf\x9e\x0e\x06t\x91\xaerj:\xc3\xces\x06\xcf\x11\xea\x1f4\xd0\xebF\xca)x\xf1\x92\x98Ir\x87\xd8\xe9\x1196Oq\xa4\xd1\xa1(\xf9\xf9\x91\xe0\b\xdeY)\xc5\xe2\x8e\x12\x84\x1b\xabr\xe7\x96\xec\xf4\xba/\x80ze\x13\xb5\xb6B6\x0f\xa7\xf27\x81\xe4iG\xf6\xc7\xca\xc1\x90y\x8cF H\xc1\xa8\xe8K\x91b\x82\xc8\x98\a\x1a\x84\xf3\\g8\xab\xc3\x12\x05\xdc\xfd\xa7\x7fB\xf2*\x0e6\xc7\x01\xce\xeb\xc0|y\xab-#\xd9{3{R\x14\xc3=y|\xb8\xef\x98\xbe\xa0\xf1\xffd\xe4\xd7L\x16\xb2\x19{xW0\xed\x9b\x8d\x03\x1c\xd5\x03\x93\x01jJS\xcd=@\xe3n\xaar\x06H\xc5\xcfn\xa4m\xbf+\xe3\xae}&\xbb\xcd\a\x01f\xc5\x9eq\x16\xa8\xcf\xad#\x9c\xde\xcc\xc0\xc2\\\x9aa\xdcK\xfb\xed\x7f\xba\b\x9ah\x1b5\xd1\x83\xd03J\x92c\x9c\x822hY\x9f\x92i\x16\xd0\xb5\x91\xc0${\x033\xf2\x90\x12\x89\xcb\xc9s\xd4\xe5\xed\xcd\xb2g\r\xfe\xed\x06f\xc7C\x80\v\xdc\xa7\t\xbf\xce\xf2\v!\xfac\xe2\xdc\f\xc0\x1e\t\x1c\xbd\x8f8\x14NKmD\xd4\x88e/\nY\xc4\x11-\xa3wp\x9d\xa0\x83\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc2\x88\x94\xa0\x94]\x1c\x9d\xed\xb6\xbcy\xb7\xbd\x9a\xb9\xfd\xec_\xd4\x8dVy\xa2\xf8\x9e%\x94\xe5n\xdd0x0}}, {{@in6=@local}, 0x0, @in=@dev}}, &(0x7f0000000100)=0xe8) r3 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x4, 0x2c0000) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vcan0\x00', r2}) preadv(r1, &(0x7f0000000040), 0x30, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r3, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x134, r4, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x84, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}]}]}, @TIPC_NLA_BEARER={0x20, 0x1, [@TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'sit0\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}]}, @TIPC_NLA_SOCK={0x30, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x62e}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffff}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x63b8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1f}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x10}, 0x14) readv(r1, &(0x7f0000001840), 0x248) [ 276.913543] input: syz1 as /devices/virtual/input/input14 [ 276.977421] input: syz1 as /devices/virtual/input/input15 05:35:50 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c12") bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r0, &(0x7f0000000200), 0x1fa, 0x0, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x10000, 0x0) write$FUSE_OPEN(r2, &(0x7f00000000c0)={0x20, 0xfffffffffffffff5, 0x7, {0x0, 0x7}}, 0x20) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000040)=0xffffffff82050626, 0x4) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 05:35:50 executing program 1: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) socket$netlink(0x10, 0x3, 0xe) tkill(r0, 0x13) ptrace$setopts(0x4206, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 05:35:50 executing program 4: 05:35:50 executing program 0: r0 = socket$inet6(0xa, 0x40000000005, 0x3) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000100), 0x4) setsockopt$inet6_opts(r0, 0x29, 0x3f, &(0x7f0000000140)=@routing={0x87, 0xc, 0x0, 0xdc, 0x0, [@loopback, @mcast1, @ipv4={[], [], @loopback}, @remote, @loopback, @remote]}, 0x68) getsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 05:35:50 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000480)='net/if_inet6\x00\'\x95\xaf\x9e\x0e\x06t\x91\xaerj:\xc3\xces\x06\xcf\x11\xea\x1f4\xd0\xebF\xca)x\xf1\x92\x98Ir\x87\xd8\xe9\x1196Oq\xa4\xd1\xa1(\xf9\xf9\x91\xe0\b\xdeY)\xc5\xe2\x8e\x12\x84\x1b\xabr\xe7\x96\xec\xf4\xba/\x80ze\x13\xb5\xb6B6\x0f\xa7\xf27\x81\xe4iG\xf6\xc7\xca\xc1\x90y\x8cF H\xc1\xa8\xe8K\x91b\x82\xc8\x98\a\x1a\x84\xf3\\g8\xab\xc3\x12\x05\xdc\xfd\xa7\x7fB\xf2*\x0e6\xc7\x01\xce\xeb\xc0|y\xab-#\xd9{3{R\x14\xc3=y|\xb8\xef\x98\xbe\xa0\xf1\xffd\xe4\xd7L\x16\xb2\x19{xW0\xed\x9b\x8d\x03\x1c\xd5\x03\x93\x01jJS\xcd=@\xe3n\xaar\x06H\xc5\xcfn\xa4m\xbf+\xe3\xae}&\xbb\xcd\a\x01f\xc5\x9eq\x16\xa8\xcf\xad#\x9c\xde\xcc\xc0\xc2\\\x9aa\xdcK\xfb\xed\x7f\xba\b\x9ah\x1b5\xd1\x83\xd03J\x92c\x9c\x822hY\x9f\x92i\x16\xd0\xb5\x91\xc0${\x033\xf2\x90\x12\x89\xcb\xc9s\xd4\xe5\xed\xcd\xb2g\r\xfe\xed\x06f\xc7C\x80\v\xdc\xa7\t\xbf\xce\xf2\v!\xfac\xe2\xdc\f\xc0\x1e\t\x1c\xbd\x8f8\x14NKmD\xd4\x88e/\nY\xc4\x11-\xa3wp\x9d\xa0\x83\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc2\x88\x94\xa0\x94]\x1c\x9d\xed\xb6\xbcy\xb7\xbd\x9a\xb9\xfd\xec_\xd4\x8dVy\xa2\xf8\x9e%\x94\xe5n\xdd0x0) r1 = syz_open_procfs(r0, &(0x7f0000000480)='net/if_inet6\x00\'\x95\xaf\x9e\x0e\x06t\x91\xaerj:\xc3\xces\x06\xcf\x11\xea\x1f4\xd0\xebF\xca)x\xf1\x92\x98Ir\x87\xd8\xe9\x1196Oq\xa4\xd1\xa1(\xf9\xf9\x91\xe0\b\xdeY)\xc5\xe2\x8e\x12\x84\x1b\xabr\xe7\x96\xec\xf4\xba/\x80ze\x13\xb5\xb6B6\x0f\xa7\xf27\x81\xe4iG\xf6\xc7\xca\xc1\x90y\x8cF H\xc1\xa8\xe8K\x91b\x82\xc8\x98\a\x1a\x84\xf3\\g8\xab\xc3\x12\x05\xdc\xfd\xa7\x7fB\xf2*\x0e6\xc7\x01\xce\xeb\xc0|y\xab-#\xd9{3{R\x14\xc3=y|\xb8\xef\x98\xbe\xa0\xf1\xffd\xe4\xd7L\x16\xb2\x19{xW0\xed\x9b\x8d\x03\x1c\xd5\x03\x93\x01jJS\xcd=@\xe3n\xaar\x06H\xc5\xcfn\xa4m\xbf+\xe3\xae}&\xbb\xcd\a\x01f\xc5\x9eq\x16\xa8\xcf\xad#\x9c\xde\xcc\xc0\xc2\\\x9aa\xdcK\xfb\xed\x7f\xba\b\x9ah\x1b5\xd1\x83\xd03J\x92c\x9c\x822hY\x9f\x92i\x16\xd0\xb5\x91\xc0${\x033\xf2\x90\x12\x89\xcb\xc9s\xd4\xe5\xed\xcd\xb2g\r\xfe\xed\x06f\xc7C\x80\v\xdc\xa7\t\xbf\xce\xf2\v!\xfac\xe2\xdc\f\xc0\x1e\t\x1c\xbd\x8f8\x14NKmD\xd4\x88e/\nY\xc4\x11-\xa3wp\x9d\xa0\x83\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc2\x88\x94\xa0\x94]\x1c\x9d\xed\xb6\xbcy\xb7\xbd\x9a\xb9\xfd\xec_\xd4\x8dVy\xa2\xf8\x9e%\x94\xe5n\xdd0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@empty}}, &(0x7f00000001c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@local, @in6=@remote, 0x4e21, 0x1f, 0x4e23, 0x8, 0xa, 0x80, 0x20, 0x2f, 0x0, r2}, {0xce3, 0x10000, 0x40, 0x4, 0x9, 0x9, 0x85, 0x7c8e}, {0xfff, 0x3, 0xfffffffffffffff8, 0x1}, 0x9, 0x6e6bb2, 0x2, 0x0, 0x2, 0x3}, {{@in=@local, 0x4d2, 0x32}, 0x2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x4, 0x3, 0xffffffffffff0000, 0x4, 0xffffffffffffff00, 0x4}}, 0xe8) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f00000003c0)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, @remote, @mcast1, 0x1, 0x4, 0x9, 0x100, 0x80000000, 0x80, r1}) readv(r0, &(0x7f0000001840), 0x248) epoll_create1(0x80000) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000000)={{0x1000, 0xffffffff9f4fa00e}, 'port0\x00', 0x8, 0x10000, 0xa5, 0x5, 0x2, 0x2, 0x8, 0x0, 0x1, 0x3ba7a9d}) lseek(r0, 0x0, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000300)=0x81) 05:35:53 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x8010000000000083) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000100), 0x4) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x100000000, 0x40) ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0x8) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x800, 0x0) ioctl$TIOCLINUX3(r2, 0x541c, &(0x7f0000000040)) 05:35:53 executing program 4: 05:35:53 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c12") bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r0, &(0x7f0000000200), 0x1fa, 0x0, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x10000, 0x0) write$FUSE_OPEN(r2, &(0x7f00000000c0)={0x20, 0xfffffffffffffff5, 0x7, {0x0, 0x7}}, 0x20) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000040)=0xffffffff82050626, 0x4) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 05:35:53 executing program 4: 05:35:53 executing program 5: 05:35:53 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000480)='net/if_inet6\x00\'\x95\xaf\x9e\x0e\x06t\x91\xaerj:\xc3\xces\x06\xcf\x11\xea\x1f4\xd0\xebF\xca)x\xf1\x92\x98Ir\x87\xd8\xe9\x1196Oq\xa4\xd1\xa1(\xf9\xf9\x91\xe0\b\xdeY)\xc5\xe2\x8e\x12\x84\x1b\xabr\xe7\x96\xec\xf4\xba/\x80ze\x13\xb5\xb6B6\x0f\xa7\xf27\x81\xe4iG\xf6\xc7\xca\xc1\x90y\x8cF H\xc1\xa8\xe8K\x91b\x82\xc8\x98\a\x1a\x84\xf3\\g8\xab\xc3\x12\x05\xdc\xfd\xa7\x7fB\xf2*\x0e6\xc7\x01\xce\xeb\xc0|y\xab-#\xd9{3{R\x14\xc3=y|\xb8\xef\x98\xbe\xa0\xf1\xffd\xe4\xd7L\x16\xb2\x19{xW0\xed\x9b\x8d\x03\x1c\xd5\x03\x93\x01jJS\xcd=@\xe3n\xaar\x06H\xc5\xcfn\xa4m\xbf+\xe3\xae}&\xbb\xcd\a\x01f\xc5\x9eq\x16\xa8\xcf\xad#\x9c\xde\xcc\xc0\xc2\\\x9aa\xdcK\xfb\xed\x7f\xba\b\x9ah\x1b5\xd1\x83\xd03J\x92c\x9c\x822hY\x9f\x92i\x16\xd0\xb5\x91\xc0${\x033\xf2\x90\x12\x89\xcb\xc9s\xd4\xe5\xed\xcd\xb2g\r\xfe\xed\x06f\xc7C\x80\v\xdc\xa7\t\xbf\xce\xf2\v!\xfac\xe2\xdc\f\xc0\x1e\t\x1c\xbd\x8f8\x14NKmD\xd4\x88e/\nY\xc4\x11-\xa3wp\x9d\xa0\x83\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc2\x88\x94\xa0\x94]\x1c\x9d\xed\xb6\xbcy\xb7\xbd\x9a\xb9\xfd\xec_\xd4\x8dVy\xa2\xf8\x9e%\x94\xe5n\xdd0x0}, &(0x7f0000000380)=0x14) sendto$packet(r1, &(0x7f0000000040), 0x0, 0x11, &(0x7f00000003c0)={0x11, 0x9, r2, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) 05:35:56 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000480)='net/if_inet6\x00\'\x95\xaf\x9e\x0e\x06t\x91\xaerj:\xc3\xces\x06\xcf\x11\xea\x1f4\xd0\xebF\xca)x\xf1\x92\x98Ir\x87\xd8\xe9\x1196Oq\xa4\xd1\xa1(\xf9\xf9\x91\xe0\b\xdeY)\xc5\xe2\x8e\x12\x84\x1b\xabr\xe7\x96\xec\xf4\xba/\x80ze\x13\xb5\xb6B6\x0f\xa7\xf27\x81\xe4iG\xf6\xc7\xca\xc1\x90y\x8cF H\xc1\xa8\xe8K\x91b\x82\xc8\x98\a\x1a\x84\xf3\\g8\xab\xc3\x12\x05\xdc\xfd\xa7\x7fB\xf2*\x0e6\xc7\x01\xce\xeb\xc0|y\xab-#\xd9{3{R\x14\xc3=y|\xb8\xef\x98\xbe\xa0\xf1\xffd\xe4\xd7L\x16\xb2\x19{xW0\xed\x9b\x8d\x03\x1c\xd5\x03\x93\x01jJS\xcd=@\xe3n\xaar\x06H\xc5\xcfn\xa4m\xbf+\xe3\xae}&\xbb\xcd\a\x01f\xc5\x9eq\x16\xa8\xcf\xad#\x9c\xde\xcc\xc0\xc2\\\x9aa\xdcK\xfb\xed\x7f\xba\b\x9ah\x1b5\xd1\x83\xd03J\x92c\x9c\x822hY\x9f\x92i\x16\xd0\xb5\x91\xc0${\x033\xf2\x90\x12\x89\xcb\xc9s\xd4\xe5\xed\xcd\xb2g\r\xfe\xed\x06f\xc7C\x80\v\xdc\xa7\t\xbf\xce\xf2\v!\xfac\xe2\xdc\f\xc0\x1e\t\x1c\xbd\x8f8\x14NKmD\xd4\x88e/\nY\xc4\x11-\xa3wp\x9d\xa0\x83\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc2\x88\x94\xa0\x94]\x1c\x9d\xed\xb6\xbcy\xb7\xbd\x9a\xb9\xfd\xec_\xd4\x8dVy\xa2\xf8\x9e%\x94\xe5n\xdd0xffffffffffffffff}) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000040)={0xffffffff, 0xe75, 0x8001, 0x5}) 05:36:02 executing program 4: 05:36:02 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000480)='net/if_inet6\x00\'\x95\xaf\x9e\x0e\x06t\x91\xaerj:\xc3\xces\x06\xcf\x11\xea\x1f4\xd0\xebF\xca)x\xf1\x92\x98Ir\x87\xd8\xe9\x1196Oq\xa4\xd1\xa1(\xf9\xf9\x91\xe0\b\xdeY)\xc5\xe2\x8e\x12\x84\x1b\xabr\xe7\x96\xec\xf4\xba/\x80ze\x13\xb5\xb6B6\x0f\xa7\xf27\x81\xe4iG\xf6\xc7\xca\xc1\x90y\x8cF H\xc1\xa8\xe8K\x91b\x82\xc8\x98\a\x1a\x84\xf3\\g8\xab\xc3\x12\x05\xdc\xfd\xa7\x7fB\xf2*\x0e6\xc7\x01\xce\xeb\xc0|y\xab-#\xd9{3{R\x14\xc3=y|\xb8\xef\x98\xbe\xa0\xf1\xffd\xe4\xd7L\x16\xb2\x19{xW0\xed\x9b\x8d\x03\x1c\xd5\x03\x93\x01jJS\xcd=@\xe3n\xaar\x06H\xc5\xcfn\xa4m\xbf+\xe3\xae}&\xbb\xcd\a\x01f\xc5\x9eq\x16\xa8\xcf\xad#\x9c\xde\xcc\xc0\xc2\\\x9aa\xdcK\xfb\xed\x7f\xba\b\x9ah\x1b5\xd1\x83\xd03J\x92c\x9c\x822hY\x9f\x92i\x16\xd0\xb5\x91\xc0${\x033\xf2\x90\x12\x89\xcb\xc9s\xd4\xe5\xed\xcd\xb2g\r\xfe\xed\x06f\xc7C\x80\v\xdc\xa7\t\xbf\xce\xf2\v!\xfac\xe2\xdc\f\xc0\x1e\t\x1c\xbd\x8f8\x14NKmD\xd4\x88e/\nY\xc4\x11-\xa3wp\x9d\xa0\x83\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc2\x88\x94\xa0\x94]\x1c\x9d\xed\xb6\xbcy\xb7\xbd\x9a\xb9\xfd\xec_\xd4\x8dVy\xa2\xf8\x9e%\x94\xe5n\xdd0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x197, &(0x7f0000000000)='net/if_inet6\x00\'\x95\xaf\x9e\x0e\x06t\x91\xaerj:\xc3\xces\x06\xcf\x11\xea\x1f4\xd0\xebF\xca)x\xf1\x92\x98Ir\x87\xd8\xe9\x1196Oq\xa4\xd1\xa1(\xf9\xf9\x91\xe0\b\xdeY)\xc5\xe2\x8e\x12\x84\x1b\xabr\xe7\x96\xec\xf4\xba/\x80ze\x13\xb5\xb6B6\x0f\xa7\xf27\x81\xe4iG\xf6\xc7\xca\xc1\x90y\x8cF H\xc1\xa8\xe8K\x91b\x82\xc8\x98\a\x1a\x84\xf3\\g8\xab\xc3\x12\x05\xdc\xfd\xa7\x7fB\xf2*\x0e6\xc7\x01\xce\xeb\xc0|y\xab-#\xd9{3{R\x14\xc3=y|\xb8\xef\x98\xbe\xa0\xf1\xffd\xe4\xd7L\x16\xb2\x19{xW0\xed\x9b\x8d\x03\x1c\xd5\x03\x93\x01jJS\xcd=@\xe3n\xaar\x06H\xc5\xcfn\xa4m\xbf+\xe3\xae}&\xbb\xcd\a\x01f\xc5\x9eq\x16\xa8\xcf\xad#\x9c\xde\xcc\xc0\xc2\\\x9aa\xdcK\xfb\xed\x7f\xba\b\x9ah\x1b5\xd1\x83\xd03J\x92c\x9c\x822hY\x9f\x92i\x16\xd0\xb5\x91\xc0${\x033\xf2\x90\x12\x89\xcb\xc9s\xd4\xe5\xed\xcd\xb2g\r\xfe\xed\x06f\xc7C\x80\v\xdc\xa7\t\xbf\xce\xf2\v!\xfac\xe2\xdc\f\xc0\x1e\t\x1c\xbd\x8f8\x14NKmD\xd4\x88e/\nY\xc4\x11-\xa3wp\x9d\xa0\x83\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc2\x88\x94\xa0\x94]\x1c\x9d\xed\xb6\xbcy\xb7\xbd\x9a\xb9\xfd\xec_\xd4\x8dVy\xa2\xf8\x9e%\x94\xe5n\xdd0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETPERSIST(r4, 0x800454d3, 0x709000) lstat(&(0x7f0000000c80)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) getegid() getegid() setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendfile(r1, r1, 0x0, 0x2000005) 05:36:03 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x800, 0x1a4) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)=0xfffffffffffffffc, 0x4) 05:36:03 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000000)={0x7b, 0x60000000080ffff, [0xc0000103], [0xc2]}) 05:36:03 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000480)='net/if_inet6\x00\'\x95\xaf\x9e\x0e\x06t\x91\xaerj:\xc3\xces\x06\xcf\x11\xea\x1f4\xd0\xebF\xca)x\xf1\x92\x98Ir\x87\xd8\xe9\x1196Oq\xa4\xd1\xa1(\xf9\xf9\x91\xe0\b\xdeY)\xc5\xe2\x8e\x12\x84\x1b\xabr\xe7\x96\xec\xf4\xba/\x80ze\x13\xb5\xb6B6\x0f\xa7\xf27\x81\xe4iG\xf6\xc7\xca\xc1\x90y\x8cF H\xc1\xa8\xe8K\x91b\x82\xc8\x98\a\x1a\x84\xf3\\g8\xab\xc3\x12\x05\xdc\xfd\xa7\x7fB\xf2*\x0e6\xc7\x01\xce\xeb\xc0|y\xab-#\xd9{3{R\x14\xc3=y|\xb8\xef\x98\xbe\xa0\xf1\xffd\xe4\xd7L\x16\xb2\x19{xW0\xed\x9b\x8d\x03\x1c\xd5\x03\x93\x01jJS\xcd=@\xe3n\xaar\x06H\xc5\xcfn\xa4m\xbf+\xe3\xae}&\xbb\xcd\a\x01f\xc5\x9eq\x16\xa8\xcf\xad#\x9c\xde\xcc\xc0\xc2\\\x9aa\xdcK\xfb\xed\x7f\xba\b\x9ah\x1b5\xd1\x83\xd03J\x92c\x9c\x822hY\x9f\x92i\x16\xd0\xb5\x91\xc0${\x033\xf2\x90\x12\x89\xcb\xc9s\xd4\xe5\xed\xcd\xb2g\r\xfe\xed\x06f\xc7C\x80\v\xdc\xa7\t\xbf\xce\xf2\v!\xfac\xe2\xdc\f\xc0\x1e\t\x1c\xbd\x8f8\x14NKmD\xd4\x88e/\nY\xc4\x11-\xa3wp\x9d\xa0\x83\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc2\x88\x94\xa0\x94]\x1c\x9d\xed\xb6\xbcy\xb7\xbd\x9a\xb9\xfd\xec_\xd4\x8dVy\xa2\xf8\x9e%\x94\xe5n\xdd0x0, 0x4, 0x3}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000001c0)={r1, 0x34, "0ea1c8bfc86071ec85b5bd51389a0b43d70fa0531d99479911dd9f45953260951b7920a40ec9c2cce17b8fec985cb4ef6fd4c42d"}, &(0x7f0000000340)=0x3c) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000240)=""/237, 0xed}], 0x1, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffffffffffd, 0x40000) r2 = dup(r0) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000100)={0x1f, 0x8, 0x8, 0x7ff}, 0x8) getsockname(r2, &(0x7f00000003c0)=@hci={0x1f, 0x0}, &(0x7f0000000440)=0x80) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000640)={'team0\x00', r3}) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0x5, 0x3, 0x0, 0x1, 0x8, 0x9, 0x9c2, 0x6, 0xffffffffffffffa1, 0x55, 0x100, 0x8, 0x7, 0x0, 0x0, 0x2}}) readv(r0, &(0x7f0000001840), 0x248) 05:36:03 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) setns(r1, 0x40000000) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000100), 0x4) 05:36:03 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000480)='net/if_inet6\x00\'\x95\xaf\x9e\x0e\x06t\x91\xaerj:\xc3\xces\x06\xcf\x11\xea\x1f4\xd0\xebF\xca)x\xf1\x92\x98Ir\x87\xd8\xe9\x1196Oq\xa4\xd1\xa1(\xf9\xf9\x91\xe0\b\xdeY)\xc5\xe2\x8e\x12\x84\x1b\xabr\xe7\x96\xec\xf4\xba/\x80ze\x13\xb5\xb6B6\x0f\xa7\xf27\x81\xe4iG\xf6\xc7\xca\xc1\x90y\x8cF H\xc1\xa8\xe8K\x91b\x82\xc8\x98\a\x1a\x84\xf3\\g8\xab\xc3\x12\x05\xdc\xfd\xa7\x7fB\xf2*\x0e6\xc7\x01\xce\xeb\xc0|y\xab-#\xd9{3{R\x14\xc3=y|\xb8\xef\x98\xbe\xa0\xf1\xffd\xe4\xd7L\x16\xb2\x19{xW0\xed\x9b\x8d\x03\x1c\xd5\x03\x93\x01jJS\xcd=@\xe3n\xaar\x06H\xc5\xcfn\xa4m\xbf+\xe3\xae}&\xbb\xcd\a\x01f\xc5\x9eq\x16\xa8\xcf\xad#\x9c\xde\xcc\xc0\xc2\\\x9aa\xdcK\xfb\xed\x7f\xba\b\x9ah\x1b5\xd1\x83\xd03J\x92c\x9c\x822hY\x9f\x92i\x16\xd0\xb5\x91\xc0${\x033\xf2\x90\x12\x89\xcb\xc9s\xd4\xe5\xed\xcd\xb2g\r\xfe\xed\x06f\xc7C\x80\v\xdc\xa7\t\xbf\xce\xf2\v!\xfac\xe2\xdc\f\xc0\x1e\t\x1c\xbd\x8f8\x14NKmD\xd4\x88e/\nY\xc4\x11-\xa3wp\x9d\xa0\x83\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc2\x88\x94\xa0\x94]\x1c\x9d\xed\xb6\xbcy\xb7\xbd\x9a\xb9\xfd\xec_\xd4\x8dVy\xa2\xf8\x9e%\x94\xe5n\xdd0x0, 0x100000000, 0x8, 0x6}, &(0x7f0000000080)=0x10) openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x2000, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f00000000c0)={r1, 0x5}, 0x8) readv(r0, &(0x7f00000019c0)=[{&(0x7f00000006c0)=""/4096, 0x1000}], 0x1) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x12ed) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000240)=""/237, 0xed}], 0x100000000000005d, 0x0) readv(r0, &(0x7f0000001840), 0x248) write$P9_RSTAT(r0, &(0x7f0000001a00)={0x506, 0x7d, 0x2, {0x0, 0x4ff, 0xf4, 0x6, {0x4, 0x4}, 0x20000000, 0x80000001, 0x1ff, 0x401, 0x7, ']nodev:', 0x197, 'net/if_inet6\x00\'\x95\xaf\x9e\x0e\x06t\x91\xaerj:\xc3\xces\x06\xcf\x11\xea\x1f4\xd0\xebF\xca)x\xf1\x92\x98Ir\x87\xd8\xe9\x1196Oq\xa4\xd1\xa1(\xf9\xf9\x91\xe0\b\xdeY)\xc5\xe2\x8e\x12\x84\x1b\xabr\xe7\x96\xec\xf4\xba/\x80ze\x13\xb5\xb6B6\x0f\xa7\xf27\x81\xe4iG\xf6\xc7\xca\xc1\x90y\x8cF H\xc1\xa8\xe8K\x91b\x82\xc8\x98\a\x1a\x84\xf3\\g8\xab\xc3\x12\x05\xdc\xfd\xa7\x7fB\xf2*\x0e6\xc7\x01\xce\xeb\xc0|y\xab-#\xd9{3{R\x14\xc3=y|\xb8\xef\x98\xbe\xa0\xf1\xffd\xe4\xd7L\x16\xb2\x19{xW0\xed\x9b\x8d\x03\x1c\xd5\x03\x93\x01jJS\xcd=@\xe3n\xaar\x06H\xc5\xcfn\xa4m\xbf+\xe3\xae}&\xbb\xcd\a\x01f\xc5\x9eq\x16\xa8\xcf\xad#\x9c\xde\xcc\xc0\xc2\\\x9aa\xdcK\xfb\xed\x7f\xba\b\x9ah\x1b5\xd1\x83\xd03J\x92c\x9c\x822hY\x9f\x92i\x16\xd0\xb5\x91\xc0${\x033\xf2\x90\x12\x89\xcb\xc9s\xd4\xe5\xed\xcd\xb2g\r\xfe\xed\x06f\xc7C\x80\v\xdc\xa7\t\xbf\xce\xf2\v!\xfac\xe2\xdc\f\xc0\x1e\t\x1c\xbd\x8f8\x14NKmD\xd4\x88e/\nY\xc4\x11-\xa3wp\x9d\xa0\x83\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc2\x88\x94\xa0\x94]\x1c\x9d\xed\xb6\xbcy\xb7\xbd\x9a\xb9\xfd\xec_\xd4\x8dVy\xa2\xf8\x9e%\x94\xe5n\xdd0x0) r1 = syz_open_procfs(r0, &(0x7f0000000480)='net/if_inet6\x00\'\x95\xaf\x9e\x0e\x06t\x91\xaerj:\xc3\xces\x06\xcf\x11\xea\x1f4\xd0\xebF\xca)x\xf1\x92\x98Ir\x87\xd8\xe9\x1196Oq\xa4\xd1\xa1(\xf9\xf9\x91\xe0\b\xdeY)\xc5\xe2\x8e\x12\x84\x1b\xabr\xe7\x96\xec\xf4\xba/\x80ze\x13\xb5\xb6B6\x0f\xa7\xf27\x81\xe4iG\xf6\xc7\xca\xc1\x90y\x8cF H\xc1\xa8\xe8K\x91b\x82\xc8\x98\a\x1a\x84\xf3\\g8\xab\xc3\x12\x05\xdc\xfd\xa7\x7fB\xf2*\x0e6\xc7\x01\xce\xeb\xc0|y\xab-#\xd9{3{R\x14\xc3=y|\xb8\xef\x98\xbe\xa0\xf1\xffd\xe4\xd7L\x16\xb2\x19{xW0\xed\x9b\x8d\x03\x1c\xd5\x03\x93\x01jJS\xcd=@\xe3n\xaar\x06H\xc5\xcfn\xa4m\xbf+\xe3\xae}&\xbb\xcd\a\x01f\xc5\x9eq\x16\xa8\xcf\xad#\x9c\xde\xcc\xc0\xc2\\\x9aa\xdcK\xfb\xed\x7f\xba\b\x9ah\x1b5\xd1\x83\xd03J\x92c\x9c\x822hY\x9f\x92i\x16\xd0\xb5\x91\xc0${\x033\xf2\x90\x12\x89\xcb\xc9s\xd4\xe5\xed\xcd\xb2g\r\xfe\xed\x06f\xc7C\x80\v\xdc\xa7\t\xbf\xce\xf2\v!\xfac\xe2\xdc\f\xc0\x1e\t\x1c\xbd\x8f8\x14NKmD\xd4\x88e/\nY\xc4\x11-\xa3wp\x9d\xa0\x83\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc2\x88\x94\xa0\x94]\x1c\x9d\xed\xb6\xbcy\xb7\xbd\x9a\xb9\xfd\xec_\xd4\x8dVy\xa2\xf8\x9e%\x94\xe5n\xdd0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x4, @mcast2, 0x7}, r1}}, 0x30) readv(r0, &(0x7f00000019c0)=[{&(0x7f00000006c0)=""/4096, 0x1000}], 0x1) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000240)=""/237, 0xed}], 0x1, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x3) readv(r0, &(0x7f0000001840), 0x248) 05:36:05 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x7a000000, [0xc0000103, 0x0, 0x2ff], [0xc1]}) 05:36:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) accept$packet(r2, 0x0, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, 0x0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000080)={0x80000000, 0x1, 0xed}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="66b9810000400f322ed30cbad104ec660f38df2b0fe21526660ff85e503ede1b0f20c06635000000800f22c0b800088ec00fae470b", 0x35}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x0, 0x0, 0x0) 05:36:05 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") bind$inet6(r0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r0, &(0x7f0000000200), 0x1fa, 0x0, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x10000, 0x0) write$FUSE_OPEN(r2, &(0x7f00000000c0)={0x20, 0xfffffffffffffff5, 0x7, {0x0, 0x7}}, 0x20) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000040)=0xffffffff82050626, 0x4) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) [ 292.335950] kvm [11814]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0 05:36:05 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") bind$inet6(r0, &(0x7f0000000000), 0x1c) socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r0, &(0x7f0000000200), 0x1fa, 0x0, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x10000, 0x0) write$FUSE_OPEN(r2, &(0x7f00000000c0)={0x20, 0xfffffffffffffff5, 0x7, {0x0, 0x7}}, 0x20) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000040)=0xffffffff82050626, 0x4) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 05:36:05 executing program 2: ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000017c0)={0x53, 0x0, 0x3e, 0x4, @scatter={0x4, 0x0, &(0x7f0000000640)=[{&(0x7f0000000000)=""/223, 0xdf}, {&(0x7f0000000100)=""/220, 0xdc}, {&(0x7f0000000340)=""/235, 0xeb}, {&(0x7f0000000440)=""/1, 0x1}]}, &(0x7f0000000680)="6a754f41458b9041b9d0c9782abd89b49d75d137fa993268fa5f081b1e16e644d560919b6694856f87de42b1c17bb138f2d1fbff1f2e12436a3af42a81af", &(0x7f00000016c0)=""/191, 0x8001, 0x4, 0x3, &(0x7f0000001780)}) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='net/if_inet6\x00\'\x95\xaf\x9e\x0e\x06t\x91\xaerj:\xc3\xces\x06\xcf\x11\xea\x1f4\xd0\xebF\xca)x\xf1\x92\x98Ir\x87\xd8\xe9\x1196Oq\xa4\xd1\xa1(\xf9\xf9\x91\xe0\b\xdeY)\xc5\xe2\x8e\x12\x84\x1b\xabr\xe7\x96\xec\xf4\xba/\x80ze\x13\xb5\xb6B6\x0f\xa7\xf27\x81\xe4iG\xf6\xc7\xca\xc1\x90y\x8cF H\xc1\xa8\xe8K\x91b\x82\xc8\x98\a\x1a\x84\xf3\\g8\xab\xc3\x12\x05\xdc\xfd\xa7\x7fB\xf2*\x0e6\xc7\x01\xce\xeb\xc0|y\xab-#\xd9{3{R\x14\xc3=y|\xb8\xef\x98\xbe\xa0\xf1\xffd\xe4\xd7L\x16\xb2\x19{xW0\xed\x9b\x8d\x03\x1c\xd5\x03\x93\x01jJS\xcd=@\xe3n\xaar\x06H\xc5\xcfn\xa4m\xbf+\xe3\xae}&\xbb\xcd\a\x01f\xc5\x9eq\x16\xa8\xcf\xad#\x9c\xde\xcc\xc0\xc2\\\x9aa\xdcK\xfb\xed\x7f\xba\b\x9ah\x1b5\xd1\x83\xd03J\x92c\x9c\x822hY\x9f\x92i\x16\xd0\xb5\x91\xc0${\x033\xf2\x90\x12\x89\xcb\xc9s\xd4\xe5\xed\xcd\xb2g\r\xfe\xed\x06f\xc7C\x80\v\xdc\xa7\t\xbf\xce\xf2\v!\xfac\xe2\xdc\f\xc0\x1e\t\x1c\xbd\x8f8\x14NKmD\xd4\x88e/\nY\xc4\x11-\xa3wp\x9d\xa0\x83\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc2\x88\x94\xa0\x94]\x1c\x9d\xed\xb6\xbcy\xb7\xbd\x9a\xb9\xfd\xec_\xd4\x8dVy\xa2\xf8\x9e%\x94\xe5n\xdd0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 05:36:06 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000480)='net/if_inet6\x00\'\x95\xaf\x9e\x0e\x06t\x91\xaerj:\xc3\xces\x06\xcf\x11\xea\x1f4\xd0\xebF\xca)x\xf1\x92\x98Ir\x87\xd8\xe9\x1196Oq\xa4\xd1\xa1(\xf9\xf9\x91\xe0\b\xdeY)\xc5\xe2\x8e\x12\x84\x1b\xabr\xe7\x96\xec\xf4\xba/\x80ze\x13\xb5\xb6B6\x0f\xa7\xf27\x81\xe4iG\xf6\xc7\xca\xc1\x90y\x8cF H\xc1\xa8\xe8K\x91b\x82\xc8\x98\a\x1a\x84\xf3\\g8\xab\xc3\x12\x05\xdc\xfd\xa7\x7fB\xf2*\x0e6\xc7\x01\xce\xeb\xc0|y\xab-#\xd9{3{R\x14\xc3=y|\xb8\xef\x98\xbe\xa0\xf1\xffd\xe4\xd7L\x16\xb2\x19{xW0\xed\x9b\x8d\x03\x1c\xd5\x03\x93\x01jJS\xcd=@\xe3n\xaar\x06H\xc5\xcfn\xa4m\xbf+\xe3\xae}&\xbb\xcd\a\x01f\xc5\x9eq\x16\xa8\xcf\xad#\x9c\xde\xcc\xc0\xc2\\\x9aa\xdcK\xfb\xed\x7f\xba\b\x9ah\x1b5\xd1\x83\xd03J\x92c\x9c\x822hY\x9f\x92i\x16\xd0\xb5\x91\xc0${\x033\xf2\x90\x12\x89\xcb\xc9s\xd4\xe5\xed\xcd\xb2g\r\xfe\xed\x06f\xc7C\x80\v\xdc\xa7\t\xbf\xce\xf2\v!\xfac\xe2\xdc\f\xc0\x1e\t\x1c\xbd\x8f8\x14NKmD\xd4\x88e/\nY\xc4\x11-\xa3wp\x9d\xa0\x83\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc2\x88\x94\xa0\x94]\x1c\x9d\xed\xb6\xbcy\xb7\xbd\x9a\xb9\xfd\xec_\xd4\x8dVy\xa2\xf8\x9e%\x94\xe5n\xdd0x0}}, {{}, 0x0, @in=@multicast1}}, &(0x7f00000004c0)=0xe8) fstat(r1, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r2, r3, r4) 05:36:07 executing program 2: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x40, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@mpls_delroute={0x64, 0x19, 0x600, 0x70bd27, 0x25dfdbfd, {0x1c, 0x14, 0x0, 0x8, 0xfd, 0x7, 0xc8, 0x6}, [@RTA_DST={0x24, 0x1, [{0x40, 0x20, 0x100}, {0x2, 0xb4b, 0x100, 0xae6e}, {0x5, 0xd50e, 0x6}, {0x8, 0x2, 0x3, 0xce}, {0x101, 0x9, 0x1ff, 0x6}, {0x10001, 0x2, 0x5, 0x4}, {0x2e08, 0x400000000000, 0xfdc1, 0x9}, {0x2, 0x5, 0x100000001, 0x3f}]}, @RTA_TTL_PROPAGATE={0x8, 0x1a, 0x123}, @RTA_OIF={0x8, 0x4, r1}, @RTA_DST={0x14, 0x1, [{0x8, 0x200, 0x1, 0x7f}, {0x8000, 0x6, 0x7, 0x100000000}, {0x7ff, 0xfffffffffffffffc, 0x3, 0x8}, {0x1ff, 0x7, 0x400, 0x68b}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='net/if_inet6\x00\'\x95\xaf\x9e\x0e\x06t\x91\xaerj:\xc3\xces\x06\xcf\x11\xea\x1f4\xd0\xebF\xca)x\xf1\x92\x98Ir\x87\xd8\xe9\x1196Oq\xa4\xd1\xa1(\xf9\xf9\x91\xe0\b\xdeY)\xc5\xe2\x8e\x12\x84\x1b\xabr\xe7\x96\xec\xf4\xba/\x80ze\x13\xb5\xb6B6\x0f\xa7\xf27\x81\xe4iG\xf6\xc7\xca\xc1\x90y\x8cF H\xc1\xa8\xe8K\x91b\x82\xc8\x98\a\x1a\x84\xf3\\g8\xab\xc3\x12\x05\xdc\xfd\xa7\x7fB\xf2*\x0e6\xc7\x01\xce\xeb\xc0|y\xab-#\xd9{3{R\x14\xc3=y|\xb8\xef\x98\xbe\xa0\xf1\xffd\xe4\xd7L\x16\xb2\x19{xW0\xed\x9b\x8d\x03\x1c\xd5\x03\x93\x01jJS\xcd=@\xe3n\xaar\x06H\xc5\xcfn\xa4m\xbf+\xe3\xae}&\xbb\xcd\a\x01f\xc5\x9eq\x16\xa8\xcf\xad#\x9c\xde\xcc\xc0\xc2\\\x9aa\xdcK\xfb\xed\x7f\xba\b\x9ah\x1b5\xd1\x83\xd03J\x92c\x9c\x822hY\x9f\x92i\x16\xd0\xb5\x91\xc0${\x033\xf2\x90\x12\x89\xcb\xc9s\xd4\xe5\xed\xcd\xb2g\r\xfe\xed\x06f\xc7C\x80\v\xdc\xa7\t\xbf\xce\xf2\v!\xfac\xe2\xdc\f\xc0\x1e\t\x1c\xbd\x8f8\x14NKmD\xd4\x88e/\nY\xc4\x11-\xa3wp\x9d\xa0\x83\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc2\x88\x94\xa0\x94]\x1c\x9d\xed\xb6\xbcy\xb7\xbd\x9a\xb9\xfd\xec_\xd4\x8dVy\xa2\xf8\x9e%\x94\xe5n\xdd0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) setsockopt$packet_int(r3, 0x107, 0x0, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = dup(r1) setsockopt$inet6_tcp_int(r4, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f00000000c0)=0x7, 0x4) setns(0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) clock_nanosleep(0x0, 0x0, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, 0x0, 0xfffffffffffffe4b) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000280)) ftruncate(r5, 0x7fff) 05:36:07 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000480)='net/if_inet6\x00\'\x95\xaf\x9e\x0e\x06t\x91\xaerj:\xc3\xces\x06\xcf\x11\xea\x1f4\xd0\xebF\xca)x\xf1\x92\x98Ir\x87\xd8\xe9\x1196Oq\xa4\xd1\xa1(\xf9\xf9\x91\xe0\b\xdeY)\xc5\xe2\x8e\x12\x84\x1b\xabr\xe7\x96\xec\xf4\xba/\x80ze\x13\xb5\xb6B6\x0f\xa7\xf27\x81\xe4iG\xf6\xc7\xca\xc1\x90y\x8cF H\xc1\xa8\xe8K\x91b\x82\xc8\x98\a\x1a\x84\xf3\\g8\xab\xc3\x12\x05\xdc\xfd\xa7\x7fB\xf2*\x0e6\xc7\x01\xce\xeb\xc0|y\xab-#\xd9{3{R\x14\xc3=y|\xb8\xef\x98\xbe\xa0\xf1\xffd\xe4\xd7L\x16\xb2\x19{xW0\xed\x9b\x8d\x03\x1c\xd5\x03\x93\x01jJS\xcd=@\xe3n\xaar\x06H\xc5\xcfn\xa4m\xbf+\xe3\xae}&\xbb\xcd\a\x01f\xc5\x9eq\x16\xa8\xcf\xad#\x9c\xde\xcc\xc0\xc2\\\x9aa\xdcK\xfb\xed\x7f\xba\b\x9ah\x1b5\xd1\x83\xd03J\x92c\x9c\x822hY\x9f\x92i\x16\xd0\xb5\x91\xc0${\x033\xf2\x90\x12\x89\xcb\xc9s\xd4\xe5\xed\xcd\xb2g\r\xfe\xed\x06f\xc7C\x80\v\xdc\xa7\t\xbf\xce\xf2\v!\xfac\xe2\xdc\f\xc0\x1e\t\x1c\xbd\x8f8\x14NKmD\xd4\x88e/\nY\xc4\x11-\xa3wp\x9d\xa0\x83\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc2\x88\x94\xa0\x94]\x1c\x9d\xed\xb6\xbcy\xb7\xbd\x9a\xb9\xfd\xec_\xd4\x8dVy\xa2\xf8\x9e%\x94\xe5n\xdd0x0, 0x1}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000300)={r1}, 0xfe01) delete_module(&(0x7f00000016c0)='net/if_inet6\x00\'\x95\xaf\x9e\x0e\x06t\x91\xaerj:\xc3\xces\x06\xcf\x11\xea\x1f4\xd0\xebF\xca)x\xf1\x92\x98Ir\x87\xd8\xe9\x1196Oq\xa4\xd1\xa1(\xf9\xf9\x91\xe0\b\xdeY)\xc5\xe2\x8e\x12\x84\x1b\xabr\xe7\x96\xec\xf4\xba/\x80ze\x13\xb5\xb6B6\x0f\xa7\xf27\x81\xe4iG\xf6\xc7\xca\xc1\x90y\x8cF H\xc1\xa8\xe8K\x91b\x82\xc8\x98\a\x1a\x84\xf3\\g8\xab\xc3\x12\x05\xdc\xfd\xa7\x7fB\xf2*\x0e6\xc7\x01\xce\xeb\xc0|y\xab-#\xd9{3{R\x14\xc3=y|\xb8\xef\x98\xbe\xa0\xf1\xffd\xe4\xd7L\x16\xb2\x19{xW0\xed\x9b\x8d\x03\x1c\xd5\x03\x93\x01jJS\xcd=@\xe3n\xaar\x06H\xc5\xcfn\xa4m\xbf+\xe3\xae}&\xbb\xcd\a\x01f\xc5\x9eq\x16\xa8\xcf\xad#\x9c\xde\xcc\xc0\xc2\\\x9aa\xdcK\xfb\xed\x7f\xba\b\x9ah\x1b5\xd1\x83\xd03J\x92c\x9c\x822hY\x9f\x92i\x16\xd0\xb5\x91\xc0${\x033\xf2\x90\x12\x89\xcb\xc9s\xd4\xe5\xed\xcd\xb2g\r\xfe\xed\x06f\xc7C\x80\v\xdc\xa7\t\xbf\xce\xf2\v!\xfac\xe2\xdc\f\xc0\x1e\t\x1c\xbd\x8f8\x14NKmD\xd4\x88e/\nY\xc4\x11-\xa3wp\x9d\xa0\x83\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc2\x88\x94\xa0\x94]\x1c\x9d\xed\xb6\xbcy\xb7\xbd\x9a\xb9\xfd\xec_\xd4\x8dVy\xa2\xf8\x9e%\x94\xe5n\xdd0x0) r1 = syz_open_procfs(r0, &(0x7f0000000080)='net/de\x00\xe4\x00\x00\x01\x00\x00\x00') readv(r1, &(0x7f00000019c0)=[{&(0x7f00000006c0)=""/4096, 0x1000}], 0x1) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000240)=""/237, 0xed}], 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) fsetxattr$security_smack_transmute(r1, &(0x7f0000000040)='security.SMACK64TRANSMUTE\x00', &(0x7f00000000c0)='TRUE', 0x4, 0x1) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f00000001c0)={0x3b, @broadcast, 0x4e21, 0x1, 'lblcr\x00', 0x12, 0x1ff, 0x4c}, 0x2c) 05:36:08 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='/exe\x00\xe1\xff\xff\xff\x04\t\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\xa9\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xde\xe9\x01\xd2q\xfb\xbcxd\xc3\xcfs\x18\xe8\x9cn\x97\xcaI\xe2R?\x8dT\xc6F\xddG\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x82\xc8\xedx\x0f\xc8\xde\x13\xaa\xc8\x1aS\x93\x80,\xac\x9b0\xbd4\xf4\xb1\xaa\x91\x95\x0e3!\t^\xd1\xdc\x06\t\xcf\x05\xb8\xb2\x9c\a\x00\x00\x00\x00\x00\x00\x00hm\x0eM\x0e5O\xfb\xec\xf9\xb6\xcbV\xdf7\xda\xady3\x93\xcd\xf9m`\xc34\xd7\xde\xe9\x9dX\xbb\x98\xec\x8f\xba\xe8\x85\t\xab\xe3/\xd4B9\xab\xb4\xcc\xf6Y\xf5\\v\xc2\x88\xae\x1d\x12\xb8\xae\xf6\x89\xf1\x9c9\xd9\xcd\xd8\xa2I\x96\x91\x85\xb3\xf2)\xa4\x8e\xf3\x016]\av*\x19g\xeb2A\xf4\x97\x96\xf3\xf6\xce\xb2\x8f\xd1\x830qPHmVA\xc3\xdf\xc8L%\xba\xa2\xb3q,\xb8%\x12g\xe7\x01Y\x89Om\xd8\xf2\x93\xe8\xcdD\xea5\xca\x1cR\xf1\xc1e\xb69\x1dw\x94\x05\xfa\xbf\xaf\x83\\)(\xc6\x12\x82\xa1\f\xfe\xe5#\xc6\x94\x13\x9d\x9b\x15\x8c\x8a\xc9\xc2\x06\x8d\xea\xe9V:\x86a\xce\xf5\xdf\xb8qIi\xccr\x7fR\x13\x99\x96\xdd/W[\n\xf9\xcc\x01?\']6Q\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') fsetxattr(r0, &(0x7f0000000040)=@known='user.syz\x00', 0x0, 0x0, 0x0) 05:36:08 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x7a000000, [0xc0000103, 0x0, 0x2ff], [0xc1]}) 05:36:08 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="4cd3d5f2b7ce1140366a1ebd280de0fa043c6e7ba7c5b1c050a8642f2d272bb4442178027f4578aea4d1bad3f3941abea00166b0356beedda35f6c77de833e57c2f9e8e3e3bca7ff77554c52b0743fccdc428ef6f91c435e766abdb9886af89a3a181ec636b9e0a9476cc0cbd6d48dafb809b97da82e24783692277ec1a5a8d791fbdc269cb49bd5ad8da6760adf92fee040225f", @ANYRESDEC], 0xa8) unlink(&(0x7f00000001c0)='./file0\x00') clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) creat(&(0x7f0000000080)='./file1\x00', 0x0) listxattr(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)=""/139, 0x8b) 05:36:08 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000480)='net/if_inet6\x00\'\x95\xaf\x9e\x0e\x06t\x91\xaerj:\xc3\xces\x06\xcf\x11\xea\x1f4\xd0\xebF\xca)x\xf1\x92\x98Ir\x87\xd8\xe9\x1196Oq\xa4\xd1\xa1(\xf9\xf9\x91\xe0\b\xdeY)\xc5\xe2\x8e\x12\x84\x1b\xabr\xe7\x96\xec\xf4\xba/\x80ze\x13\xb5\xb6B6\x0f\xa7\xf27\x81\xe4iG\xf6\xc7\xca\xc1\x90y\x8cF H\xc1\xa8\xe8K\x91b\x82\xc8\x98\a\x1a\x84\xf3\\g8\xab\xc3\x12\x05\xdc\xfd\xa7\x7fB\xf2*\x0e6\xc7\x01\xce\xeb\xc0|y\xab-#\xd9{3{R\x14\xc3=y|\xb8\xef\x98\xbe\xa0\xf1\xffd\xe4\xd7L\x16\xb2\x19{xW0\xed\x9b\x8d\x03\x1c\xd5\x03\x93\x01jJS\xcd=@\xe3n\xaar\x06H\xc5\xcfn\xa4m\xbf+\xe3\xae}&\xbb\xcd\a\x01f\xc5\x9eq\x16\xa8\xcf\xad#\x9c\xde\xcc\xc0\xc2\\\x9aa\xdcK\xfb\xed\x7f\xba\b\x9ah\x1b5\xd1\x83\xd03J\x92c\x9c\x822hY\x9f\x92i\x16\xd0\xb5\x91\xc0${\x033\xf2\x90\x12\x89\xcb\xc9s\xd4\xe5\xed\xcd\xb2g\r\xfe\xed\x06f\xc7C\x80\v\xdc\xa7\t\xbf\xce\xf2\v!\xfac\xe2\xdc\f\xc0\x1e\t\x1c\xbd\x8f8\x14NKmD\xd4\x88e/\nY\xc4\x11-\xa3wp\x9d\xa0\x83\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc2\x88\x94\xa0\x94]\x1c\x9d\xed\xb6\xbcy\xb7\xbd\x9a\xb9\xfd\xec_\xd4\x8dVy\xa2\xf8\x9e%\x94\xe5n\xdd0x0, 0x5}, &(0x7f0000000040)=0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@loopback, 0x1, 0x3, 0xff, 0xb, 0x400, 0xa57}, 0x20) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={r1, 0x3, 0x9, 0x0, 0x100, 0x9}, &(0x7f00000000c0)=0x14) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000100), 0x4) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10400040}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r3, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8f}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffffffffff7}]}, @TIPC_NLA_NODE={0x44, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x100000001}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x401}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xc0e7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40004}, 0x20008000) 05:36:09 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x7a000000, [0xc0000103, 0x0, 0x2ff], [0xc1]}) 05:36:09 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xffdbc2ca) fsetxattr$security_capability(r0, &(0x7f0000000240)='security.capability\x00', 0x0, 0x0, 0x0) 05:36:09 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000480)='net/if_inet6\x00\'\x95\xaf\x9e\x0e\x06t\x91\xaerj:\xc3\xces\x06\xcf\x11\xea\x1f4\xd0\xebF\xca)x\xf1\x92\x98Ir\x87\xd8\xe9\x1196Oq\xa4\xd1\xa1(\xf9\xf9\x91\xe0\b\xdeY)\xc5\xe2\x8e\x12\x84\x1b\xabr\xe7\x96\xec\xf4\xba/\x80ze\x13\xb5\xb6B6\x0f\xa7\xf27\x81\xe4iG\xf6\xc7\xca\xc1\x90y\x8cF H\xc1\xa8\xe8K\x91b\x82\xc8\x98\a\x1a\x84\xf3\\g8\xab\xc3\x12\x05\xdc\xfd\xa7\x7fB\xf2*\x0e6\xc7\x01\xce\xeb\xc0|y\xab-#\xd9{3{R\x14\xc3=y|\xb8\xef\x98\xbe\xa0\xf1\xffd\xe4\xd7L\x16\xb2\x19{xW0\xed\x9b\x8d\x03\x1c\xd5\x03\x93\x01jJS\xcd=@\xe3n\xaar\x06H\xc5\xcfn\xa4m\xbf+\xe3\xae}&\xbb\xcd\a\x01f\xc5\x9eq\x16\xa8\xcf\xad#\x9c\xde\xcc\xc0\xc2\\\x9aa\xdcK\xfb\xed\x7f\xba\b\x9ah\x1b5\xd1\x83\xd03J\x92c\x9c\x822hY\x9f\x92i\x16\xd0\xb5\x91\xc0${\x033\xf2\x90\x12\x89\xcb\xc9s\xd4\xe5\xed\xcd\xb2g\r\xfe\xed\x06f\xc7C\x80\v\xdc\xa7\t\xbf\xce\xf2\v!\xfac\xe2\xdc\f\xc0\x1e\t\x1c\xbd\x8f8\x14NKmD\xd4\x88e/\nY\xc4\x11-\xa3wp\x9d\xa0\x83\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc2\x88\x94\xa0\x94]\x1c\x9d\xed\xb6\xbcy\xb7\xbd\x9a\xb9\xfd\xec_\xd4\x8dVy\xa2\xf8\x9e%\x94\xe5n\xdd0x0, 0x401}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000240)={r2, 0x8}, &(0x7f0000000280)=0x8) readv(r0, &(0x7f00000019c0)=[{&(0x7f00000006c0)=""/4096, 0x1000}], 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f00000003c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000300), r3}}, 0x18) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000040)=""/237, 0xed}], 0x1, 0x0) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000002a00)=""/4096) readv(r0, &(0x7f0000001840), 0x248) syz_open_dev$cec(&(0x7f00000002c0)='/dev/cec#\x00', 0x0, 0x2) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x7, 0x4) 05:36:09 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xffdbc2ca) unlink(&(0x7f00000001c0)='./file0\x00') mount(0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000080)='./file1\x00', 0x0) lstat(&(0x7f0000000400)='./file1\x00', &(0x7f0000000440)) 05:36:09 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x7a000000, [0xc0000103, 0x0, 0x2ff], [0xc1]}) 05:36:09 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x7, 0x58002) write$P9_RWALK(r0, &(0x7f0000000040)={0x23, 0x6f, 0x1, {0x2, [{0x20, 0x2, 0x3}, {0x10, 0x0, 0x2}]}}, 0x23) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='net/if_inet6\x00\'\x95\xaf\x9e\x0e\x06t\x91\xaerj:\xc3\xces\x06\xcf\x11\xea\x1f4\xd0\xebF\xca)x\xf1\x92\x98Ir\x87\xd8\xe9\x1196Oq\xa4\xd1\xa1(\xf9\xf9\x91\xe0\b\xdeY)\xc5\xe2\x8e\x12\x84\x1b\xabr\xe7\x96\xec\xf4\xba/\x80ze\x13\xb5\xb6B6\x0f\xa7\xf27\x81\xe4iG\xf6\xc7\xca\xc1\x90y\x8cF H\xc1\xa8\xe8K\x91b\x82\xc8\x98\a\x1a\x84\xf3\\g8\xab\xc3\x12\x05\xdc\xfd\xa7\x7fB\xf2*\x0e6\xc7\x01\xce\xeb\xc0|y\xab-#\xd9{3{R\x14\xc3=y|\xb8\xef\x98\xbe\xa0\xf1\xffd\xe4\xd7L\x16\xb2\x19{xW0\xed\x9b\x8d\x03\x1c\xd5\x03\x93\x01jJS\xcd=@\xe3n\xaar\x06H\xc5\xcfn\xa4m\xbf+\xe3\xae}&\xbb\xcd\a\x01f\xc5\x9eq\x16\xa8\xcf\xad#\x9c\xde\xcc\xc0\xc2\\\x9aa\xdcK\xfb\xed\x7f\xba\b\x9ah\x1b5\xd1\x83\xd03J\x92c\x9c\x822hY\x9f\x92i\x16\xd0\xb5\x91\xc0${\x033\xf2\x90\x12\x89\xcb\xc9s\xd4\xe5\xed\xcd\xb2g\r\xfe\xed\x06f\xc7C\x80\v\xdc\xa7\t\xbf\xce\xf2\v!\xfac\xe2\xdc\f\xc0\x1e\t\x1c\xbd\x8f8\x14NKmD\xd4\x88e/\nY\xc4\x11-\xa3wp\x9d\xa0\x83\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc2\x88\x94\xa0\x94]\x1c\x9d\xed\xb6\xbcy\xb7\xbd\x9a\xb9\xfd\xec_\xd4\x8dVy\xa2\xf8\x9e%\x94\xe5n\xdd0x0}, &(0x7f0000000040)=0x10) r2 = fcntl$dupfd(r0, 0x0, r0) accept$inet(r2, &(0x7f0000000280)={0x2, 0x0, @initdev}, &(0x7f00000002c0)=0x10) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000240)) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000140)={r1, 0x3}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000080)={r1, 0x4}, 0x8) 05:36:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x7a000000, [0xc0000103, 0x0, 0x2ff], [0xc1]}) 05:36:09 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000480)='net/if_inet6\x00\'\x95\xaf\x9e\x0e\x06t\x91\xaerj:\xc3\xces\x06\xcf\x11\xea\x1f4\xd0\xebF\xca)x\xf1\x92\x98Ir\x87\xd8\xe9\x1196Oq\xa4\xd1\xa1(\xf9\xf9\x91\xe0\b\xdeY)\xc5\xe2\x8e\x12\x84\x1b\xabr\xe7\x96\xec\xf4\xba/\x80ze\x13\xb5\xb6B6\x0f\xa7\xf27\x81\xe4iG\xf6\xc7\xca\xc1\x90y\x8cF H\xc1\xa8\xe8K\x91b\x82\xc8\x98\a\x1a\x84\xf3\\g8\xab\xc3\x12\x05\xdc\xfd\xa7\x7fB\xf2*\x0e6\xc7\x01\xce\xeb\xc0|y\xab-#\xd9{3{R\x14\xc3=y|\xb8\xef\x98\xbe\xa0\xf1\xffd\xe4\xd7L\x16\xb2\x19{xW0\xed\x9b\x8d\x03\x1c\xd5\x03\x93\x01jJS\xcd=@\xe3n\xaar\x06H\xc5\xcfn\xa4m\xbf+\xe3\xae}&\xbb\xcd\a\x01f\xc5\x9eq\x16\xa8\xcf\xad#\x9c\xde\xcc\xc0\xc2\\\x9aa\xdcK\xfb\xed\x7f\xba\b\x9ah\x1b5\xd1\x83\xd03J\x92c\x9c\x822hY\x9f\x92i\x16\xd0\xb5\x91\xc0${\x033\xf2\x90\x12\x89\xcb\xc9s\xd4\xe5\xed\xcd\xb2g\r\xfe\xed\x06f\xc7C\x80\v\xdc\xa7\t\xbf\xce\xf2\v!\xfac\xe2\xdc\f\xc0\x1e\t\x1c\xbd\x8f8\x14NKmD\xd4\x88e/\nY\xc4\x11-\xa3wp\x9d\xa0\x83\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc2\x88\x94\xa0\x94]\x1c\x9d\xed\xb6\xbcy\xb7\xbd\x9a\xb9\xfd\xec_\xd4\x8dVy\xa2\xf8\x9e%\x94\xe5n\xdd0x0}) fstat(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000140)="3a9e93f02b4c1da2c40703856b3f95196345c97e10c4ce5dfe53f29362857ea7b970e7dcd90944be2c893e65c520a7b1073aaab046806baaf24dccf8d76ff9f586fa9b628dfb380cef6a16873d911b2b55223b09231492a920ec2e1a06f15174225bfdef5bcec1cd6f5162943fcb5cc1771c9b3b0f5fc2b2051c2b0c89fe148e0c7ca55e28ac24c01cde256be553f2490c5b2b537cdb6fa0d68825d85f60e4adb074af5c732656b5991d3baf82b3e382a802ec82cd5a0aab25", 0xb9}], 0x1, &(0x7f0000000300)=[@cred={0x20, 0x1, 0x2, r1, r2, r3}], 0x20, 0x10}, 0x40) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000100), 0x4) 05:36:10 executing program 5: 05:36:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x7a000000, [0xc0000103, 0x0, 0x2ff], [0xc1]}) 05:36:10 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000480)='net/if_inet6\x00\'\x95\xaf\x9e\x0e\x06t\x91\xaerj:\xc3\xces\x06\xcf\x11\xea\x1f4\xd0\xebF\xca)x\xf1\x92\x98Ir\x87\xd8\xe9\x1196Oq\xa4\xd1\xa1(\xf9\xf9\x91\xe0\b\xdeY)\xc5\xe2\x8e\x12\x84\x1b\xabr\xe7\x96\xec\xf4\xba/\x80ze\x13\xb5\xb6B6\x0f\xa7\xf27\x81\xe4iG\xf6\xc7\xca\xc1\x90y\x8cF H\xc1\xa8\xe8K\x91b\x82\xc8\x98\a\x1a\x84\xf3\\g8\xab\xc3\x12\x05\xdc\xfd\xa7\x7fB\xf2*\x0e6\xc7\x01\xce\xeb\xc0|y\xab-#\xd9{3{R\x14\xc3=y|\xb8\xef\x98\xbe\xa0\xf1\xffd\xe4\xd7L\x16\xb2\x19{xW0\xed\x9b\x8d\x03\x1c\xd5\x03\x93\x01jJS\xcd=@\xe3n\xaar\x06H\xc5\xcfn\xa4m\xbf+\xe3\xae}&\xbb\xcd\a\x01f\xc5\x9eq\x16\xa8\xcf\xad#\x9c\xde\xcc\xc0\xc2\\\x9aa\xdcK\xfb\xed\x7f\xba\b\x9ah\x1b5\xd1\x83\xd03J\x92c\x9c\x822hY\x9f\x92i\x16\xd0\xb5\x91\xc0${\x033\xf2\x90\x12\x89\xcb\xc9s\xd4\xe5\xed\xcd\xb2g\r\xfe\xed\x06f\xc7C\x80\v\xdc\xa7\t\xbf\xce\xf2\v!\xfac\xe2\xdc\f\xc0\x1e\t\x1c\xbd\x8f8\x14NKmD\xd4\x88e/\nY\xc4\x11-\xa3wp\x9d\xa0\x83\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc2\x88\x94\xa0\x94]\x1c\x9d\xed\xb6\xbcy\xb7\xbd\x9a\xb9\xfd\xec_\xd4\x8dVy\xa2\xf8\x9e%\x94\xe5n\xdd0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000340)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000400)=0x0) r3 = syz_open_procfs(r2, &(0x7f00000003c0)='net/ip_tables_names\x00') readv(r3, &(0x7f00000019c0)=[{&(0x7f00000006c0)=""/4096, 0x1000}], 0x1) readv(r3, &(0x7f0000000100)=[{&(0x7f0000000080)=""/20}], 0x208) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x1000) 05:36:12 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r0, &(0x7f0000000200), 0x1fa, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) write$FUSE_OPEN(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000040)=0xffffffff82050626, 0x4) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 05:36:12 executing program 4: 05:36:12 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x7a000000, [0xc0000103], [0xc1]}) 05:36:13 executing program 4: r0 = socket(0x10, 0x80002, 0x0) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2f0000001800030007fffd946fa283bc8020000000040005031d856808000f000600000016ccbb24e0710b42fa3ccc", 0x2f}], 0x1}, 0x0) connect$pptp(0xffffffffffffffff, 0x0, 0x0) 05:36:13 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000100), 0x4) r1 = open(&(0x7f0000000000)='./file0\x00', 0x200100, 0x1) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f0000000040)={0xb, 0x103, 0x1, {0x8000, 0x61, 0xfffffffffffffffb, 0x3}}) 05:36:13 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000480)='net/if_inet6\x00\'\x95\xaf\x9e\x0e\x06t\x91\xaerj:\xc3\xces\x06\xcf\x11\xea\x1f4\xd0\xebF\xca)x\xf1\x92\x98Ir\x87\xd8\xe9\x1196Oq\xa4\xd1\xa1(\xf9\xf9\x91\xe0\b\xdeY)\xc5\xe2\x8e\x12\x84\x1b\xabr\xe7\x96\xec\xf4\xba/\x80ze\x13\xb5\xb6B6\x0f\xa7\xf27\x81\xe4iG\xf6\xc7\xca\xc1\x90y\x8cF H\xc1\xa8\xe8K\x91b\x82\xc8\x98\a\x1a\x84\xf3\\g8\xab\xc3\x12\x05\xdc\xfd\xa7\x7fB\xf2*\x0e6\xc7\x01\xce\xeb\xc0|y\xab-#\xd9{3{R\x14\xc3=y|\xb8\xef\x98\xbe\xa0\xf1\xffd\xe4\xd7L\x16\xb2\x19{xW0\xed\x9b\x8d\x03\x1c\xd5\x03\x93\x01jJS\xcd=@\xe3n\xaar\x06H\xc5\xcfn\xa4m\xbf+\xe3\xae}&\xbb\xcd\a\x01f\xc5\x9eq\x16\xa8\xcf\xad#\x9c\xde\xcc\xc0\xc2\\\x9aa\xdcK\xfb\xed\x7f\xba\b\x9ah\x1b5\xd1\x83\xd03J\x92c\x9c\x822hY\x9f\x92i\x16\xd0\xb5\x91\xc0${\x033\xf2\x90\x12\x89\xcb\xc9s\xd4\xe5\xed\xcd\xb2g\r\xfe\xed\x06f\xc7C\x80\v\xdc\xa7\t\xbf\xce\xf2\v!\xfac\xe2\xdc\f\xc0\x1e\t\x1c\xbd\x8f8\x14NKmD\xd4\x88e/\nY\xc4\x11-\xa3wp\x9d\xa0\x83\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc2\x88\x94\xa0\x94]\x1c\x9d\xed\xb6\xbcy\xb7\xbd\x9a\xb9\xfd\xec_\xd4\x8dVy\xa2\xf8\x9e%\x94\xe5n\xdd0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@multicast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@initdev}}, &(0x7f00000003c0)=0xe8) r5 = geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@local}}, &(0x7f0000000500)=0xe8) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@mcast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast1}}, &(0x7f0000000700)=0xe8) fstat(r1, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = getegid() getgroups(0x4, &(0x7f0000000880)=[0xee00, 0xffffffffffffffff, 0xee00, 0xee01]) getgroups(0x1, &(0x7f00000008c0)=[0xee00]) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000900)={0x0, 0x0, 0x0}, &(0x7f0000000940)=0xc) getresgid(&(0x7f0000000980)=0x0, &(0x7f00000009c0), &(0x7f0000000a00)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000a40)={0x0, 0x0, 0x0}, &(0x7f0000000a80)=0xc) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, &(0x7f0000000b00)=0xc) fstat(r1, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000bc0)={{}, {0x1, 0x4}, [{0x2, 0x2, r2}, {0x2, 0x1, r3}, {0x2, 0x2, r4}, {0x2, 0x2, r5}, {0x2, 0x2, r6}, {0x2, 0x0, r7}, {0x2, 0x1, r8}, {0x2, 0x5, r9}], {0x4, 0x3}, [{0x8, 0x3, r10}, {0x8, 0x2, r11}, {0x8, 0x1, r12}, {0x8, 0x7, r13}, {0x8, 0x4, r14}, {0x8, 0x0, r15}, {0x8, 0x4, r16}, {0x8, 0x1, r17}, {0x8, 0x5, r18}], {0x10, 0x2}, {0x20, 0x4}}, 0xac, 0x1) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000080)) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000100), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x5, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1a}}, 0x72}, 0x1c) 05:36:13 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r0, &(0x7f0000000200), 0x1fa, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) write$FUSE_OPEN(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000040)=0xffffffff82050626, 0x4) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 05:36:13 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000480)='net/if_inet6\x00\'\x95\xaf\x9e\x0e\x06t\x91\xaerj:\xc3\xces\x06\xcf\x11\xea\x1f4\xd0\xebF\xca)x\xf1\x92\x98Ir\x87\xd8\xe9\x1196Oq\xa4\xd1\xa1(\xf9\xf9\x91\xe0\b\xdeY)\xc5\xe2\x8e\x12\x84\x1b\xabr\xe7\x96\xec\xf4\xba/\x80ze\x13\xb5\xb6B6\x0f\xa7\xf27\x81\xe4iG\xf6\xc7\xca\xc1\x90y\x8cF H\xc1\xa8\xe8K\x91b\x82\xc8\x98\a\x1a\x84\xf3\\g8\xab\xc3\x12\x05\xdc\xfd\xa7\x7fB\xf2*\x0e6\xc7\x01\xce\xeb\xc0|y\xab-#\xd9{3{R\x14\xc3=y|\xb8\xef\x98\xbe\xa0\xf1\xffd\xe4\xd7L\x16\xb2\x19{xW0\xed\x9b\x8d\x03\x1c\xd5\x03\x93\x01jJS\xcd=@\xe3n\xaar\x06H\xc5\xcfn\xa4m\xbf+\xe3\xae}&\xbb\xcd\a\x01f\xc5\x9eq\x16\xa8\xcf\xad#\x9c\xde\xcc\xc0\xc2\\\x9aa\xdcK\xfb\xed\x7f\xba\b\x9ah\x1b5\xd1\x83\xd03J\x92c\x9c\x822hY\x9f\x92i\x16\xd0\xb5\x91\xc0${\x033\xf2\x90\x12\x89\xcb\xc9s\xd4\xe5\xed\xcd\xb2g\r\xfe\xed\x06f\xc7C\x80\v\xdc\xa7\t\xbf\xce\xf2\v!\xfac\xe2\xdc\f\xc0\x1e\t\x1c\xbd\x8f8\x14NKmD\xd4\x88e/\nY\xc4\x11-\xa3wp\x9d\xa0\x83\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc2\x88\x94\xa0\x94]\x1c\x9d\xed\xb6\xbcy\xb7\xbd\x9a\xb9\xfd\xec_\xd4\x8dVy\xa2\xf8\x9e%\x94\xe5n\xdd0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) 05:36:14 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000480)='net/if_inet6\x00\'\x95\xaf\x9e\x0e\x06t\x91\xaerj:\xc3\xces\x06\xcf\x11\xea\x1f4\xd0\xebF\xca)x\xf1\x92\x98Ir\x87\xd8\xe9\x1196Oq\xa4\xd1\xa1(\xf9\xf9\x91\xe0\b\xdeY)\xc5\xe2\x8e\x12\x84\x1b\xabr\xe7\x96\xec\xf4\xba/\x80ze\x13\xb5\xb6B6\x0f\xa7\xf27\x81\xe4iG\xf6\xc7\xca\xc1\x90y\x8cF H\xc1\xa8\xe8K\x91b\x82\xc8\x98\a\x1a\x84\xf3\\g8\xab\xc3\x12\x05\xdc\xfd\xa7\x7fB\xf2*\x0e6\xc7\x01\xce\xeb\xc0|y\xab-#\xd9{3{R\x14\xc3=y|\xb8\xef\x98\xbe\xa0\xf1\xffd\xe4\xd7L\x16\xb2\x19{xW0\xed\x9b\x8d\x03\x1c\xd5\x03\x93\x01jJS\xcd=@\xe3n\xaar\x06H\xc5\xcfn\xa4m\xbf+\xe3\xae}&\xbb\xcd\a\x01f\xc5\x9eq\x16\xa8\xcf\xad#\x9c\xde\xcc\xc0\xc2\\\x9aa\xdcK\xfb\xed\x7f\xba\b\x9ah\x1b5\xd1\x83\xd03J\x92c\x9c\x822hY\x9f\x92i\x16\xd0\xb5\x91\xc0${\x033\xf2\x90\x12\x89\xcb\xc9s\xd4\xe5\xed\xcd\xb2g\r\xfe\xed\x06f\xc7C\x80\v\xdc\xa7\t\xbf\xce\xf2\v!\xfac\xe2\xdc\f\xc0\x1e\t\x1c\xbd\x8f8\x14NKmD\xd4\x88e/\nY\xc4\x11-\xa3wp\x9d\xa0\x83\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc2\x88\x94\xa0\x94]\x1c\x9d\xed\xb6\xbcy\xb7\xbd\x9a\xb9\xfd\xec_\xd4\x8dVy\xa2\xf8\x9e%\x94\xe5n\xdd0x0}, {}]}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000140)={r1, 0x38}) 05:36:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:36:14 executing program 1: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000000000), &(0x7f00000012c0)='./file0\x00', 0x0, 0x1000, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0xfffffe8b) unlink(&(0x7f0000000100)='./file0\x00') setxattr$security_smack_transmute(&(0x7f00000013c0)='./file0\x00', &(0x7f0000001400)='security.SMACK64TRANSMUTE\x00', 0x0, 0x0, 0x0) 05:36:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:36:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:14 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000480)='net/if_inet6\x00\'\x95\xaf\x9e\x0e\x06t\x91\xaerj:\xc3\xces\x06\xcf\x11\xea\x1f4\xd0\xebF\xca)x\xf1\x92\x98Ir\x87\xd8\xe9\x1196Oq\xa4\xd1\xa1(\xf9\xf9\x91\xe0\b\xdeY)\xc5\xe2\x8e\x12\x84\x1b\xabr\xe7\x96\xec\xf4\xba/\x80ze\x13\xb5\xb6B6\x0f\xa7\xf27\x81\xe4iG\xf6\xc7\xca\xc1\x90y\x8cF H\xc1\xa8\xe8K\x91b\x82\xc8\x98\a\x1a\x84\xf3\\g8\xab\xc3\x12\x05\xdc\xfd\xa7\x7fB\xf2*\x0e6\xc7\x01\xce\xeb\xc0|y\xab-#\xd9{3{R\x14\xc3=y|\xb8\xef\x98\xbe\xa0\xf1\xffd\xe4\xd7L\x16\xb2\x19{xW0\xed\x9b\x8d\x03\x1c\xd5\x03\x93\x01jJS\xcd=@\xe3n\xaar\x06H\xc5\xcfn\xa4m\xbf+\xe3\xae}&\xbb\xcd\a\x01f\xc5\x9eq\x16\xa8\xcf\xad#\x9c\xde\xcc\xc0\xc2\\\x9aa\xdcK\xfb\xed\x7f\xba\b\x9ah\x1b5\xd1\x83\xd03J\x92c\x9c\x822hY\x9f\x92i\x16\xd0\xb5\x91\xc0${\x033\xf2\x90\x12\x89\xcb\xc9s\xd4\xe5\xed\xcd\xb2g\r\xfe\xed\x06f\xc7C\x80\v\xdc\xa7\t\xbf\xce\xf2\v!\xfac\xe2\xdc\f\xc0\x1e\t\x1c\xbd\x8f8\x14NKmD\xd4\x88e/\nY\xc4\x11-\xa3wp\x9d\xa0\x83\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc2\x88\x94\xa0\x94]\x1c\x9d\xed\xb6\xbcy\xb7\xbd\x9a\xb9\xfd\xec_\xd4\x8dVy\xa2\xf8\x9e%\x94\xe5n\xdd0x0) ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000440)={&(0x7f0000002cc0)=""/199, 0xfffffdf8}) readv(r0, &(0x7f0000001840), 0x248) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000000)=0x7) 05:36:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:36:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:36:15 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r0, &(0x7f0000000200), 0x1fa, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) write$FUSE_OPEN(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100), 0x1c) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000040)=0xffffffff82050626, 0x4) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 05:36:15 executing program 2: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0)={0x0, 0x0}) r1 = syz_open_procfs(r0, &(0x7f0000000480)='net/sctp\x00') setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00000016c0)=ANY=[@ANYBLOB="c1060000000000000a004e2300000009ff020000000000000000001b0000000001cddb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000040000000a004e2380000001000000000000000000000000000000010800000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2300001000fe8000000000000000000000000000aa0100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007c935b4dc71fadd0000000000000000000000000000000000000000000000000a6070a004e2000000009fe8000000000000000000000000000bb09000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00000000000000000000000000000000000000000000000a004e22000000dbfe8000000000000000000000000000bb01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006400000000000000000000000000bdde00000000000000000000000000000000000000000000000000"], 0x290) readv(r1, &(0x7f00000019c0)=[{&(0x7f00000006c0)=""/4096, 0x1000}], 0x1) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x936, 0x241}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000080)={r2, 0x7, 0x1000, 0x7, 0x84e8, 0x3}, 0x14) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000240)=""/237, 0xed}], 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000000100)={0x80000000}) readv(r1, &(0x7f0000001840), 0x248) 05:36:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:16 executing program 1: pipe(0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) clone(0x8004000, 0x0, 0x0, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 05:36:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:36:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:36:16 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000480)='net/if_inet6\x00\'\x95\xaf\x9e\x0e\x06t\x91\xaerj:\xc3\xces\x06\xcf\x11\xea\x1f4\xd0\xebF\xca)x\xf1\x92\x98Ir\x87\xd8\xe9\x1196Oq\xa4\xd1\xa1(\xf9\xf9\x91\xe0\b\xdeY)\xc5\xe2\x8e\x12\x84\x1b\xabr\xe7\x96\xec\xf4\xba/\x80ze\x13\xb5\xb6B6\x0f\xa7\xf27\x81\xe4iG\xf6\xc7\xca\xc1\x90y\x8cF H\xc1\xa8\xe8K\x91b\x82\xc8\x98\a\x1a\x84\xf3\\g8\xab\xc3\x12\x05\xdc\xfd\xa7\x7fB\xf2*\x0e6\xc7\x01\xce\xeb\xc0|y\xab-#\xd9{3{R\x14\xc3=y|\xb8\xef\x98\xbe\xa0\xf1\xffd\xe4\xd7L\x16\xb2\x19{xW0\xed\x9b\x8d\x03\x1c\xd5\x03\x93\x01jJS\xcd=@\xe3n\xaar\x06H\xc5\xcfn\xa4m\xbf+\xe3\xae}&\xbb\xcd\a\x01f\xc5\x9eq\x16\xa8\xcf\xad#\x9c\xde\xcc\xc0\xc2\\\x9aa\xdcK\xfb\xed\x7f\xba\b\x9ah\x1b5\xd1\x83\xd03J\x92c\x9c\x822hY\x9f\x92i\x16\xd0\xb5\x91\xc0${\x033\xf2\x90\x12\x89\xcb\xc9s\xd4\xe5\xed\xcd\xb2g\r\xfe\xed\x06f\xc7C\x80\v\xdc\xa7\t\xbf\xce\xf2\v!\xfac\xe2\xdc\f\xc0\x1e\t\x1c\xbd\x8f8\x14NKmD\xd4\x88e/\nY\xc4\x11-\xa3wp\x9d\xa0\x83\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc2\x88\x94\xa0\x94]\x1c\x9d\xed\xb6\xbcy\xb7\xbd\x9a\xb9\xfd\xec_\xd4\x8dVy\xa2\xf8\x9e%\x94\xe5n\xdd0x0, r0, 0x0, 0x197, &(0x7f0000000000)='net/if_inet6\x00\'\x95\xaf\x9e\x0e\x06t\x91\xaerj:\xc3\xces\x06\xcf\x11\xea\x1f4\xd0\xebF\xca)x\xf1\x92\x98Ir\x87\xd8\xe9\x1196Oq\xa4\xd1\xa1(\xf9\xf9\x91\xe0\b\xdeY)\xc5\xe2\x8e\x12\x84\x1b\xabr\xe7\x96\xec\xf4\xba/\x80ze\x13\xb5\xb6B6\x0f\xa7\xf27\x81\xe4iG\xf6\xc7\xca\xc1\x90y\x8cF H\xc1\xa8\xe8K\x91b\x82\xc8\x98\a\x1a\x84\xf3\\g8\xab\xc3\x12\x05\xdc\xfd\xa7\x7fB\xf2*\x0e6\xc7\x01\xce\xeb\xc0|y\xab-#\xd9{3{R\x14\xc3=y|\xb8\xef\x98\xbe\xa0\xf1\xffd\xe4\xd7L\x16\xb2\x19{xW0\xed\x9b\x8d\x03\x1c\xd5\x03\x93\x01jJS\xcd=@\xe3n\xaar\x06H\xc5\xcfn\xa4m\xbf+\xe3\xae}&\xbb\xcd\a\x01f\xc5\x9eq\x16\xa8\xcf\xad#\x9c\xde\xcc\xc0\xc2\\\x9aa\xdcK\xfb\xed\x7f\xba\b\x9ah\x1b5\xd1\x83\xd03J\x92c\x9c\x822hY\x9f\x92i\x16\xd0\xb5\x91\xc0${\x033\xf2\x90\x12\x89\xcb\xc9s\xd4\xe5\xed\xcd\xb2g\r\xfe\xed\x06f\xc7C\x80\v\xdc\xa7\t\xbf\xce\xf2\v!\xfac\xe2\xdc\f\xc0\x1e\t\x1c\xbd\x8f8\x14NKmD\xd4\x88e/\nY\xc4\x11-\xa3wp\x9d\xa0\x83\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc2\x88\x94\xa0\x94]\x1c\x9d\xed\xb6\xbcy\xb7\xbd\x9a\xb9\xfd\xec_\xd4\x8dVy\xa2\xf8\x9e%\x94\xe5n\xdd0xffffffffffffffff}) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x0, 0x4}, 0x14}}, 0x0) close(r2) 05:36:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:36:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 303.496867] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 05:36:16 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r0, &(0x7f0000000200), 0x1fa, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) write$FUSE_OPEN(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x8, &(0x7f0000000040)=0xffffffff82050626, 0x4) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 05:36:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:16 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000480)='net/if_inet6\x00\'\x95\xaf\x9e\x0e\x06t\x91\xaerj:\xc3\xces\x06\xcf\x11\xea\x1f4\xd0\xebF\xca)x\xf1\x92\x98Ir\x87\xd8\xe9\x1196Oq\xa4\xd1\xa1(\xf9\xf9\x91\xe0\b\xdeY)\xc5\xe2\x8e\x12\x84\x1b\xabr\xe7\x96\xec\xf4\xba/\x80ze\x13\xb5\xb6B6\x0f\xa7\xf27\x81\xe4iG\xf6\xc7\xca\xc1\x90y\x8cF H\xc1\xa8\xe8K\x91b\x82\xc8\x98\a\x1a\x84\xf3\\g8\xab\xc3\x12\x05\xdc\xfd\xa7\x7fB\xf2*\x0e6\xc7\x01\xce\xeb\xc0|y\xab-#\xd9{3{R\x14\xc3=y|\xb8\xef\x98\xbe\xa0\xf1\xffd\xe4\xd7L\x16\xb2\x19{xW0\xed\x9b\x8d\x03\x1c\xd5\x03\x93\x01jJS\xcd=@\xe3n\xaar\x06H\xc5\xcfn\xa4m\xbf+\xe3\xae}&\xbb\xcd\a\x01f\xc5\x9eq\x16\xa8\xcf\xad#\x9c\xde\xcc\xc0\xc2\\\x9aa\xdcK\xfb\xed\x7f\xba\b\x9ah\x1b5\xd1\x83\xd03J\x92c\x9c\x822hY\x9f\x92i\x16\xd0\xb5\x91\xc0${\x033\xf2\x90\x12\x89\xcb\xc9s\xd4\xe5\xed\xcd\xb2g\r\xfe\xed\x06f\xc7C\x80\v\xdc\xa7\t\xbf\xce\xf2\v!\xfac\xe2\xdc\f\xc0\x1e\t\x1c\xbd\x8f8\x14NKmD\xd4\x88e/\nY\xc4\x11-\xa3wp\x9d\xa0\x83\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc2\x88\x94\xa0\x94]\x1c\x9d\xed\xb6\xbcy\xb7\xbd\x9a\xb9\xfd\xec_\xd4\x8dVy\xa2\xf8\x9e%\x94\xe5n\xdd0x0}) connect$can_bcm(r1, &(0x7f0000000440)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x5b, &(0x7f0000000380)={&(0x7f0000000300)={0x4, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "75abc64b7a58a964"}}, 0x48}}, 0x0) 05:36:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6f"]) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:36:17 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000480)='net/if_inet6\x00\'\x95\xaf\x9e\x0e\x06t\x91\xaerj:\xc3\xces\x06\xcf\x11\xea\x1f4\xd0\xebF\xca)x\xf1\x92\x98Ir\x87\xd8\xe9\x1196Oq\xa4\xd1\xa1(\xf9\xf9\x91\xe0\b\xdeY)\xc5\xe2\x8e\x12\x84\x1b\xabr\xe7\x96\xec\xf4\xba/\x80ze\x13\xb5\xb6B6\x0f\xa7\xf27\x81\xe4iG\xf6\xc7\xca\xc1\x90y\x8cF H\xc1\xa8\xe8K\x91b\x82\xc8\x98\a\x1a\x84\xf3\\g8\xab\xc3\x12\x05\xdc\xfd\xa7\x7fB\xf2*\x0e6\xc7\x01\xce\xeb\xc0|y\xab-#\xd9{3{R\x14\xc3=y|\xb8\xef\x98\xbe\xa0\xf1\xffd\xe4\xd7L\x16\xb2\x19{xW0\xed\x9b\x8d\x03\x1c\xd5\x03\x93\x01jJS\xcd=@\xe3n\xaar\x06H\xc5\xcfn\xa4m\xbf+\xe3\xae}&\xbb\xcd\a\x01f\xc5\x9eq\x16\xa8\xcf\xad#\x9c\xde\xcc\xc0\xc2\\\x9aa\xdcK\xfb\xed\x7f\xba\b\x9ah\x1b5\xd1\x83\xd03J\x92c\x9c\x822hY\x9f\x92i\x16\xd0\xb5\x91\xc0${\x033\xf2\x90\x12\x89\xcb\xc9s\xd4\xe5\xed\xcd\xb2g\r\xfe\xed\x06f\xc7C\x80\v\xdc\xa7\t\xbf\xce\xf2\v!\xfac\xe2\xdc\f\xc0\x1e\t\x1c\xbd\x8f8\x14NKmD\xd4\x88e/\nY\xc4\x11-\xa3wp\x9d\xa0\x83\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc2\x88\x94\xa0\x94]\x1c\x9d\xed\xb6\xbcy\xb7\xbd\x9a\xb9\xfd\xec_\xd4\x8dVy\xa2\xf8\x9e%\x94\xe5n\xdd0xffffffffffffffff}) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000200)) 05:36:18 executing program 2: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffff9c) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x180000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd0, r1, 0xc, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xc068}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xb7d}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6erspan0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='net/if_inet6\x00\'\x95\xaf\x9e\x0e\x06t\x91\xaerj:\xc3\xces\x06\xcf\x11\xea\x1f4\xd0\xebF\xca)x\xf1\x92\x98Ir\x87\xd8\xe9\x1196Oq\xa4\xd1\xa1(\xf9\xf9\x91\xe0\b\xdeY)\xc5\xe2\x8e\x12\x84\x1b\xabr\xe7\x96\xec\xf4\xba/\x80ze\x13\xb5\xb6B6\x0f\xa7\xf27\x81\xe4iG\xf6\xc7\xca\xc1\x90y\x8cF H\xc1\xa8\xe8K\x91b\x82\xc8\x98\a\x1a\x84\xf3\\g8\xab\xc3\x12\x05\xdc\xfd\xa7\x7fB\xf2*\x0e6\xc7\x01\xce\xeb\xc0|y\xab-#\xd9{3{R\x14\xc3=y|\xb8\xef\x98\xbe\xa0\xf1\xffd\xe4\xd7L\x16\xb2\x19{xW0\xed\x9b\x8d\x03\x1c\xd5\x03\x93\x01jJS\xcd=@\xe3n\xaar\x06H\xc5\xcfn\xa4m\xbf+\xe3\xae}&\xbb\xcd\a\x01f\xc5\x9eq\x16\xa8\xcf\xad#\x9c\xde\xcc\xc0\xc2\\\x9aa\xdcK\xfb\xed\x7f\xba\b\x9ah\x1b5\xd1\x83\xd03J\x92c\x9c\x822hY\x9f\x92i\x16\xd0\xb5\x91\xc0${\x033\xf2\x90\x12\x89\xcb\xc9s\xd4\xe5\xed\xcd\xb2g\r\xfe\xed\x06f\xc7C\x80\v\xdc\xa7\t\xbf\xce\xf2\v!\xfac\xe2\xdc\f\xc0\x1e\t\x1c\xbd\x8f8\x14NKmD\xd4\x88e/\nY\xc4\x11-\xa3wp\x9d\xa0\x83\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc2\x88\x94\xa0\x94]\x1c\x9d\xed\xb6\xbcy\xb7\xbd\x9a\xb9\xfd\xec_\xd4\x8dVy\xa2\xf8\x9e%\x94\xe5n\xdd0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x10000014c) mkdir(0x0, 0x0) open(0x0, 0x0, 0xb0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000080)='ramfs\x00', 0xffffffffffffffff}, 0x30) write$P9_RSTATFS(0xffffffffffffffff, 0x0, 0x0) unlinkat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r3, &(0x7f00000092c0), 0x800010b, 0x18) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x5, 0x0, 0x100000000, 0xfb2e, 0x100}) 05:36:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:19 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000480)='net/if_inet6\x00\'\x95\xaf\x9e\x0e\x06t\x91\xaerj:\xc3\xces\x06\xcf\x11\xea\x1f4\xd0\xebF\xca)x\xf1\x92\x98Ir\x87\xd8\xe9\x1196Oq\xa4\xd1\xa1(\xf9\xf9\x91\xe0\b\xdeY)\xc5\xe2\x8e\x12\x84\x1b\xabr\xe7\x96\xec\xf4\xba/\x80ze\x13\xb5\xb6B6\x0f\xa7\xf27\x81\xe4iG\xf6\xc7\xca\xc1\x90y\x8cF H\xc1\xa8\xe8K\x91b\x82\xc8\x98\a\x1a\x84\xf3\\g8\xab\xc3\x12\x05\xdc\xfd\xa7\x7fB\xf2*\x0e6\xc7\x01\xce\xeb\xc0|y\xab-#\xd9{3{R\x14\xc3=y|\xb8\xef\x98\xbe\xa0\xf1\xffd\xe4\xd7L\x16\xb2\x19{xW0\xed\x9b\x8d\x03\x1c\xd5\x03\x93\x01jJS\xcd=@\xe3n\xaar\x06H\xc5\xcfn\xa4m\xbf+\xe3\xae}&\xbb\xcd\a\x01f\xc5\x9eq\x16\xa8\xcf\xad#\x9c\xde\xcc\xc0\xc2\\\x9aa\xdcK\xfb\xed\x7f\xba\b\x9ah\x1b5\xd1\x83\xd03J\x92c\x9c\x822hY\x9f\x92i\x16\xd0\xb5\x91\xc0${\x033\xf2\x90\x12\x89\xcb\xc9s\xd4\xe5\xed\xcd\xb2g\r\xfe\xed\x06f\xc7C\x80\v\xdc\xa7\t\xbf\xce\xf2\v!\xfac\xe2\xdc\f\xc0\x1e\t\x1c\xbd\x8f8\x14NKmD\xd4\x88e/\nY\xc4\x11-\xa3wp\x9d\xa0\x83\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc2\x88\x94\xa0\x94]\x1c\x9d\xed\xb6\xbcy\xb7\xbd\x9a\xb9\xfd\xec_\xd4\x8dVy\xa2\xf8\x9e%\x94\xe5n\xdd0x0, @in6={{0xa, 0x4e24, 0x80, @empty, 0x2}}, 0xfffffffffffffffe, 0x6, 0x0, 0x1, 0x42}, &(0x7f0000000140)=0x98) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000680)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8004000}, 0xc, &(0x7f0000000640)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="88000000", @ANYRES16=r2, @ANYBLOB="003f2bbd7000ffdbdf25080000000c00090008000200000c00040000000000000000000c00030009000000000000000c0003009251000000000000180004001400080001000e0000001c0009000800010000020000080002007f00000008000100050000000c00060008000100213e000051df6f3fd4603016ac91497d0d31c0905e2909c6ba5bc1ae88bdb56523e07d0300000000000000"], 0x88}}, 0x4000) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000180)={r1, 0x3c4d}, &(0x7f00000001c0)=0x8) ioctl$KVM_GET_LAPIC(r0, 0x8400ae8e, &(0x7f00000006c0)={"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"}) 05:36:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:36:20 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)) 05:36:20 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000480)='net/if_inet6\x00\'\x95\xaf\x9e\x0e\x06t\x91\xaerj:\xc3\xces\x06\xcf\x11\xea\x1f4\xd0\xebF\xca)x\xf1\x92\x98Ir\x87\xd8\xe9\x1196Oq\xa4\xd1\xa1(\xf9\xf9\x91\xe0\b\xdeY)\xc5\xe2\x8e\x12\x84\x1b\xabr\xe7\x96\xec\xf4\xba/\x80ze\x13\xb5\xb6B6\x0f\xa7\xf27\x81\xe4iG\xf6\xc7\xca\xc1\x90y\x8cF H\xc1\xa8\xe8K\x91b\x82\xc8\x98\a\x1a\x84\xf3\\g8\xab\xc3\x12\x05\xdc\xfd\xa7\x7fB\xf2*\x0e6\xc7\x01\xce\xeb\xc0|y\xab-#\xd9{3{R\x14\xc3=y|\xb8\xef\x98\xbe\xa0\xf1\xffd\xe4\xd7L\x16\xb2\x19{xW0\xed\x9b\x8d\x03\x1c\xd5\x03\x93\x01jJS\xcd=@\xe3n\xaar\x06H\xc5\xcfn\xa4m\xbf+\xe3\xae}&\xbb\xcd\a\x01f\xc5\x9eq\x16\xa8\xcf\xad#\x9c\xde\xcc\xc0\xc2\\\x9aa\xdcK\xfb\xed\x7f\xba\b\x9ah\x1b5\xd1\x83\xd03J\x92c\x9c\x822hY\x9f\x92i\x16\xd0\xb5\x91\xc0${\x033\xf2\x90\x12\x89\xcb\xc9s\xd4\xe5\xed\xcd\xb2g\r\xfe\xed\x06f\xc7C\x80\v\xdc\xa7\t\xbf\xce\xf2\v!\xfac\xe2\xdc\f\xc0\x1e\t\x1c\xbd\x8f8\x14NKmD\xd4\x88e/\nY\xc4\x11-\xa3wp\x9d\xa0\x83\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc2\x88\x94\xa0\x94]\x1c\x9d\xed\xb6\xbcy\xb7\xbd\x9a\xb9\xfd\xec_\xd4\x8dVy\xa2\xf8\x9e%\x94\xe5n\xdd0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x800094, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r2, 0x0, 0x0, 0x18) open(&(0x7f0000000000)='./file0\x00', 0x101000, 0x0) 05:36:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:36:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 05:36:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:22 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r0, &(0x7f0000000200), 0x1fa, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) write$FUSE_OPEN(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000040)=0xffffffff82050626, 0x4) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 05:36:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 05:36:22 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 05:36:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:22 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) close(r0) 05:36:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3e) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fb9000)) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) 05:36:22 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 05:36:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:22 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 05:36:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 05:36:22 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7}) 05:36:23 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r0, &(0x7f0000000200), 0x1fa, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) write$FUSE_OPEN(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x8, 0x0, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 05:36:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:23 executing program 1: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xc) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) exit_group(0x0) 05:36:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 05:36:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:23 executing program 1: syz_execute_func(&(0x7f00000001c0)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c2664bd3196f") clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) symlink(&(0x7f0000000000)='./file1\x00', &(0x7f0000000140)='./file1\x00') execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000300)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109) dup2(r0, r1) execve(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) clone(0x3102101ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000e40)='./file1\x00', 0x0, 0x0) ioctl$EVIOCSABS2F(r1, 0x401845ef, 0x0) 05:36:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 05:36:25 executing program 2: clone(0x84007ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ptrace(0x10, r0) creat(&(0x7f0000000100)='./file0\x00', 0x0) shmget(0xffffffffffffffff, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) ptrace(0x11, r0) 05:36:25 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:25 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r0, 0xae9a) ioctl$KVM_RUN(r0, 0xae80, 0x0) 05:36:25 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r0, &(0x7f0000000200), 0x1fa, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) write$FUSE_OPEN(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x8, 0x0, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 05:36:25 executing program 1: r0 = inotify_init1(0x0) close(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/11, 0xa) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) 05:36:25 executing program 1: syz_execute_func(&(0x7f00000001c0)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c2664bd3196f") clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x400000109) dup2(r0, r1) execve(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) clone(0x3102101ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000e40)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, 0x0) 05:36:25 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r0, 0xae9a) ioctl$KVM_RUN(r0, 0xae80, 0x0) 05:36:25 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000140), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) connect$netlink(r1, &(0x7f0000000080)=@unspec, 0xc) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_execute_func(&(0x7f0000000040)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") sendmmsg(r0, &(0x7f0000007200)=[{{&(0x7f00000002c0)=@rc, 0x80, 0x0}}], 0x1, 0x20000000) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, 0x0, 0x0) 05:36:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:26 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:26 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r0, 0xae9a) ioctl$KVM_RUN(r0, 0xae80, 0x0) 05:36:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000540)=""/11, 0x7a3) setxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109) dup2(r0, r1) open$dir(&(0x7f00000001c0)='./file0\x00', 0x841, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) 05:36:26 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_RUN(r1, 0xae80, 0x0) 05:36:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:26 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_RUN(r1, 0xae80, 0x0) 05:36:26 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r0, &(0x7f0000000200), 0x1fa, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) write$FUSE_OPEN(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x8, 0x0, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 05:36:26 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000540)=""/11, 0x7a3) setxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109) dup2(r0, r1) open$dir(&(0x7f00000001c0)='./file0\x00', 0x841, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) 05:36:26 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x200000001, 0xa, 0x2000000000000009, 0x1}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000000), 0x0}, 0x18) 05:36:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:26 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_RUN(r1, 0xae80, 0x0) 05:36:27 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000540)=""/11, 0x7a3) setxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109) dup2(r0, r1) open$dir(&(0x7f00000001c0)='./file0\x00', 0x841, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) 05:36:27 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x5, 0x5, 0x7, 0x7}, 0x5e) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000280), 0x0}, 0x18) 05:36:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:27 executing program 1: syz_emit_ethernet(0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd606a42a000103b00fe8000000000000000000000000000bb000000000000000000000000000000000000000004019078005ede9c004fa932"], 0x0) 05:36:27 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000540)=""/11, 0x7a3) setxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109) dup2(r0, r1) open$dir(&(0x7f00000001c0)='./file0\x00', 0x841, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) 05:36:27 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r0, &(0x7f0000000200), 0x1fa, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) write$FUSE_OPEN(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000040), 0x4) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 05:36:27 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_RUN(r1, 0xae80, 0x0) 05:36:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) 05:36:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) socket(0x0, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000002440)='veth1\x00', 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x3f}, 0x14) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) close(r1) 05:36:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:28 executing program 1: getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x10, 0x11, [@generic="e2abb4ec7645192056d52f"]}]}, 0x24}, 0x1, 0x300}, 0x0) 05:36:28 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_RUN(r1, 0xae80, 0x0) 05:36:28 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f6f08151f8d9f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:28 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_RUN(r1, 0xae80, 0x0) 05:36:28 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 315.225521] sysfs: cannot create duplicate filename '/class/ieee80211/â«´ìvE VÕ!' [ 315.233498] CPU: 1 PID: 12848 Comm: syz-executor1 Not tainted 5.0.0-rc1+ #7 [ 315.240627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 315.250004] Call Trace: [ 315.252656] dump_stack+0x173/0x1d0 [ 315.256341] sysfs_warn_dup+0x1c4/0x1f0 [ 315.260463] sysfs_do_create_link_sd+0x293/0x360 [ 315.265275] sysfs_create_link+0x125/0x190 [ 315.269563] device_add+0x1730/0x2ed0 [ 315.273442] wiphy_register+0x2b4b/0x3900 [ 315.277676] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 315.282927] ieee80211_register_hw+0x3ac2/0x5ca0 [ 315.287754] ? ieee80211_register_hw+0x1041/0x5ca0 [ 315.292762] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 315.298265] ? tasklet_hrtimer_init+0x114/0x1b0 [ 315.302979] ? hw_scan_work+0xc40/0xc40 [ 315.307009] mac80211_hwsim_new_radio+0x3267/0x4f50 [ 315.312111] hwsim_new_radio_nl+0x1444/0x1990 [ 315.316680] ? hwsim_tx_info_frame_received_nl+0x1220/0x1220 [ 315.322525] genl_rcv_msg+0x185f/0x1a60 [ 315.326590] netlink_rcv_skb+0x431/0x620 [ 315.330705] ? genl_unbind+0x390/0x390 [ 315.334654] genl_rcv+0x63/0x80 [ 315.337989] netlink_unicast+0xf3e/0x1020 [ 315.342294] netlink_sendmsg+0x127f/0x1300 [ 315.346604] ___sys_sendmsg+0xdb9/0x11b0 [ 315.350713] ? netlink_getsockopt+0x1460/0x1460 [ 315.355442] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 315.360696] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 315.366120] ? __fget_light+0x6e1/0x750 [ 315.370167] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 315.375417] __se_sys_sendmsg+0x305/0x460 [ 315.379649] __x64_sys_sendmsg+0x4a/0x70 [ 315.383773] do_syscall_64+0xbc/0xf0 [ 315.387545] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 315.392776] RIP: 0033:0x457ec9 [ 315.396012] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 315.414958] RSP: 002b:00007f17c2a63c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 315.422709] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457ec9 [ 315.430114] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 315.437420] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 315.444727] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f17c2a646d4 [ 315.452048] R13: 00000000004c53fb R14: 00000000004d9038 R15: 00000000ffffffff 05:36:28 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r0, &(0x7f0000000200), 0x1fa, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) write$FUSE_OPEN(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000040)=0xffffffff82050626, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) 05:36:28 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_RUN(r1, 0xae80, 0x0) 05:36:28 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_RUN(r1, 0xae80, 0x0) 05:36:28 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:28 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80605414, 0x0) 05:36:28 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) semctl$IPC_SET(0x0, 0x0, 0x12, 0x0) 05:36:28 executing program 2: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @local}}) 05:36:28 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:28 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_RUN(r1, 0xae80, 0x0) 05:36:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) 05:36:29 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 316.066854] IPVS: ftp: loaded support on port[0] = 21 05:36:29 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:29 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r0, &(0x7f0000000200), 0x1fa, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) write$FUSE_OPEN(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000040)=0xffffffff82050626, 0x4) sendmmsg(r0, 0x0, 0x0, 0x0) 05:36:29 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_RUN(r1, 0xae80, 0x0) 05:36:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:29 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) recvfrom(r0, &(0x7f0000002780)=""/4096, 0x1000, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001380)=[{{0x0, 0x118, &(0x7f0000000240), 0x0, 0x0, 0x87}}], 0x4000056, 0x3a, &(0x7f0000000200)={0x77359400}) 05:36:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:36:29 executing program 2: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$peekuser(0x3, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x1c, 0x0, &(0x7f0000000600)=[@acquire, @dead_binder_done={0x40086310, 0x4}, @acquire], 0x0, 0x0, 0x0}) [ 316.790258] netlink: 'syz-executor1': attribute type 29 has an invalid length. [ 316.797909] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. [ 316.806679] netlink: 'syz-executor1': attribute type 29 has an invalid length. [ 316.814221] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. [ 316.828094] binder: 12910:12919 BC_DEAD_BINDER_DONE 0000000000000004 not found 05:36:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:36:29 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:29 executing program 2: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$peekuser(0x3, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x1c, 0x0, &(0x7f0000000600)=[@acquire, @dead_binder_done={0x40086310, 0x4}, @acquire], 0x0, 0x0, 0x0}) 05:36:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 316.972683] netlink: 'syz-executor1': attribute type 29 has an invalid length. [ 316.980205] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. [ 317.017690] netlink: 'syz-executor1': attribute type 29 has an invalid length. [ 317.025267] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. 05:36:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:36:30 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 317.104926] netlink: 'syz-executor1': attribute type 29 has an invalid length. [ 317.112596] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. [ 317.136194] binder: 12932:12933 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 317.192698] netlink: 'syz-executor1': attribute type 29 has an invalid length. [ 317.200342] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. [ 317.276587] netlink: 'syz-executor1': attribute type 29 has an invalid length. [ 317.284375] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. [ 317.338029] netlink: 'syz-executor1': attribute type 29 has an invalid length. [ 317.345878] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. [ 317.415021] netlink: 'syz-executor1': attribute type 29 has an invalid length. [ 317.422630] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. [ 317.446055] netlink: 'syz-executor1': attribute type 29 has an invalid length. [ 317.453762] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. 05:36:30 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) recvfrom(r0, &(0x7f0000002780)=""/4096, 0x1000, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001380)=[{{0x0, 0x118, &(0x7f0000000240), 0x0, 0x0, 0x87}}], 0x4000056, 0x3a, &(0x7f0000000200)={0x77359400}) 05:36:30 executing program 2: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$peekuser(0x3, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x1c, 0x0, &(0x7f0000000600)=[@acquire, @dead_binder_done={0x40086310, 0x4}, @acquire], 0x0, 0x0, 0x0}) 05:36:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:30 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:30 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:30 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)={0x0, 0x0, 0x31b}) [ 317.755041] binder: 12947:12952 BC_DEAD_BINDER_DONE 0000000000000004 not found 05:36:30 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:30 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) recvfrom(r0, &(0x7f0000002780)=""/4096, 0x1000, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001380)=[{{0x0, 0x118, &(0x7f0000000240), 0x0, 0x0, 0x87}}], 0x4000056, 0x3a, &(0x7f0000000200)={0x77359400}) 05:36:31 executing program 2: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$peekuser(0x3, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x1c, 0x0, &(0x7f0000000600)=[@acquire, @dead_binder_done={0x40086310, 0x4}, @acquire], 0x0, 0x0, 0x0}) 05:36:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:36:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:31 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000000)) [ 318.137771] binder: 12970:12972 BC_DEAD_BINDER_DONE 0000000000000004 not found 05:36:31 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:36:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:31 executing program 2: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ptrace$peekuser(0x3, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x1c, 0x0, &(0x7f0000000600)=[@acquire, @dead_binder_done={0x40086310, 0x4}, @acquire], 0x0, 0x0, 0x0}) 05:36:31 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) recvfrom(r0, &(0x7f0000002780)=""/4096, 0x1000, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001380)=[{{0x0, 0x118, &(0x7f0000000240), 0x0, 0x0, 0x87}}], 0x4000056, 0x3a, &(0x7f0000000200)={0x77359400}) 05:36:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000480)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000001940)={"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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xfe2f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 318.527298] binder: 12991:12992 BC_DEAD_BINDER_DONE 0000000000000004 not found 05:36:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:36:31 executing program 2: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ptrace$peekuser(0x3, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x1c, 0x0, &(0x7f0000000600)=[@acquire, @dead_binder_done={0x40086310, 0x4}, @acquire], 0x0, 0x0, 0x0}) 05:36:31 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000001380)=[{{0x0, 0x118, &(0x7f0000000240), 0x0, 0x0, 0x87}}], 0x4000056, 0x3a, &(0x7f0000000200)={0x77359400}) 05:36:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 318.850955] binder: 13007:13010 BC_DEAD_BINDER_DONE 0000000000000004 not found 05:36:31 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:32 executing program 2: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ptrace$peekuser(0x3, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x1c, 0x0, &(0x7f0000000600)=[@acquire, @dead_binder_done={0x40086310, 0x4}, @acquire], 0x0, 0x0, 0x0}) 05:36:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:32 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 319.153421] binder: 13019:13020 BC_DEAD_BINDER_DONE 0000000000000004 not found 05:36:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:32 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r3, &(0x7f0000000240)=[{&(0x7f0000000440)=',', 0x1}], 0x1, 0x4081806) sendfile(r2, r3, 0x0, 0x20020102000007) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) 05:36:32 executing program 2: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x1c, 0x0, &(0x7f0000000600)=[@acquire, @dead_binder_done={0x40086310, 0x4}, @acquire], 0x0, 0x0, 0x0}) 05:36:32 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 319.714692] binder: 13038:13046 BC_DEAD_BINDER_DONE 0000000000000004 not found 05:36:36 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) recvfrom(r0, &(0x7f0000002780)=""/4096, 0x1000, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001380)=[{{0x0, 0x118, &(0x7f0000000240), 0x0, 0x0, 0x87}}], 0x4000056, 0x3a, &(0x7f0000000200)={0x77359400}) 05:36:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:36 executing program 2: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x1c, 0x0, &(0x7f0000000600)=[@acquire, @dead_binder_done={0x40086310, 0x4}, @acquire], 0x0, 0x0, 0x0}) 05:36:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:36:36 executing program 3: sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xf2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)=0x97ff) perf_event_open$cgroup(0x0, 0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() [ 323.084146] binder: 13064:13066 BC_DEAD_BINDER_DONE 0000000000000004 not found 05:36:36 executing program 2: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x1c, 0x0, &(0x7f0000000600)=[@acquire, @dead_binder_done={0x40086310, 0x4}, @acquire], 0x0, 0x0, 0x0}) 05:36:36 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='limits\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/204, 0xcc}], 0x1, 0x0) 05:36:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 323.285382] binder: 13075:13077 BC_DEAD_BINDER_DONE 0000000000000004 not found 05:36:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:36:36 executing program 2: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x1c, 0x0, &(0x7f0000000600)=[@acquire, @dead_binder_done={0x40086310, 0x4}, @acquire], 0x0, 0x0, 0x0}) [ 323.657393] binder: 13093:13094 BC_DEAD_BINDER_DONE 0000000000000004 not found 05:36:36 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000002780)=""/4096, 0x1000, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001380)=[{{0x0, 0x118, &(0x7f0000000240), 0x0, 0x0, 0x87}}], 0x4000056, 0x3a, &(0x7f0000000200)={0x77359400}) 05:36:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)=0xffffffff, 0x4) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='/exe\x00\x00\x00\x00\x00\x04\x89\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\x1e\x18\xf0\xc7o\xbb#*\aBJ\xe1\xe9\x01\xd2\xdau\xaf\x1f\x02\x00\xf5\xab&\xd7\xe0q\xfb53\x1c\xe3\x9cZ\x00\x00') ioctl$FS_IOC_FSGETXATTR(r0, 0xc0c0583b, &(0x7f0000000040)) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, 0x0, 0x0) getegid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 05:36:36 executing program 2: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x1c, 0x0, &(0x7f0000000600)=[@acquire, @dead_binder_done={0x40086310, 0x4}, @acquire], 0x0, 0x0, 0x0}) 05:36:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 323.975060] binder: 13101:13103 BC_DEAD_BINDER_DONE 0000000000000004 not found 05:36:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:37 executing program 2: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x1c, 0x0, &(0x7f0000000600)=[@acquire, @dead_binder_done={0x40086310, 0x4}, @acquire], 0x0, 0x0, 0x0}) 05:36:37 executing program 3: ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)=0xffffffff, 0x4) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='/exe\x00\x00\x00\x00\x00\x04\x89\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\x1e\x18\xf0\xc7o\xbb#*\aBJ\xe1\xe9\x01\xd2\xdau\xaf\x1f\x02\x00\xf5\xab&\xd7\xe0q\xfb53\x1c\xe3\x9cZ\x00\x00') ioctl$FS_IOC_FSGETXATTR(r0, 0xc0c0583b, &(0x7f0000000040)) 05:36:37 executing program 1: r0 = socket$inet(0x10, 0x0, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) recvfrom(r0, &(0x7f0000002780)=""/4096, 0x1000, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001380)=[{{0x0, 0x118, &(0x7f0000000240), 0x0, 0x0, 0x87}}], 0x4000056, 0x3a, &(0x7f0000000200)={0x77359400}) 05:36:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 324.259796] binder: 13115:13120 Acquire 1 refcount change on invalid ref 0 ret -22 [ 324.267715] binder: 13115:13120 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 324.275274] binder: 13115:13120 Acquire 1 refcount change on invalid ref 0 ret -22 05:36:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:36:37 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@ipv6_newaddr={0x40, 0x14, 0x109, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x9, {0xf000}}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}}, 0x0) 05:36:37 executing program 2: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x1c, 0x0, &(0x7f0000000600)=[@acquire, @dead_binder_done={0x40086310, 0x4}, @acquire], 0x0, 0x0, 0x0}) 05:36:37 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) recvfrom(r0, &(0x7f0000002780)=""/4096, 0x1000, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001380)=[{{0x0, 0x118, &(0x7f0000000240), 0x0, 0x0, 0x87}}], 0x4000056, 0x3a, &(0x7f0000000200)={0x77359400}) 05:36:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 324.632630] binder: 13138:13145 Acquire 1 refcount change on invalid ref 0 ret -22 [ 324.640484] binder: 13138:13145 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 324.648014] binder: 13138:13145 Acquire 1 refcount change on invalid ref 0 ret -22 05:36:37 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@ipv6_newaddr={0x40, 0x14, 0x109, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x9, {0xf000}}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}}, 0x0) 05:36:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:36:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:37 executing program 2: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x1c, 0x0, &(0x7f0000000600)=[@acquire, @dead_binder_done={0x40086310, 0x4}, @acquire], 0x0, 0x0, 0x0}) 05:36:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:36:37 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) times(0x0) 05:36:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 325.027773] binder: 13157:13162 Acquire 1 refcount change on invalid ref 0 ret -22 [ 325.035828] binder: 13157:13162 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 325.043530] binder: 13157:13162 Acquire 1 refcount change on invalid ref 0 ret -22 05:36:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:38 executing program 2: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x1c, 0x0, &(0x7f0000000600)=[@acquire, @dead_binder_done={0x40086310, 0x4}, @acquire], 0x0, 0x0, 0x0}) 05:36:38 executing program 3: clone(0x4007ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) getrandom(&(0x7f0000000080)=""/44, 0x2c, 0x2) [ 325.326086] binder: 13173:13174 BC_DEAD_BINDER_DONE 0000000000000004 not found 05:36:38 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, 0x0, 0x0) recvfrom(r0, &(0x7f0000002780)=""/4096, 0x1000, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001380)=[{{0x0, 0x118, &(0x7f0000000240), 0x0, 0x0, 0x87}}], 0x4000056, 0x3a, &(0x7f0000000200)={0x77359400}) 05:36:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:36:38 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:36:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:38 executing program 3: 05:36:38 executing program 2: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0x1c, 0x0, &(0x7f0000000600)=[@acquire, @dead_binder_done={0x40086310, 0x4}, @acquire], 0x0, 0x0, 0x0}) 05:36:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:36:38 executing program 2: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0x1c, 0x0, &(0x7f0000000600)=[@acquire, @dead_binder_done={0x40086310, 0x4}, @acquire], 0x0, 0x0, 0x0}) 05:36:38 executing program 3: 05:36:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:39 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:36:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:36:39 executing program 3: 05:36:39 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:39 executing program 2: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0x1c, 0x0, &(0x7f0000000600)=[@acquire, @dead_binder_done={0x40086310, 0x4}, @acquire], 0x0, 0x0, 0x0}) 05:36:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:36:39 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) recvfrom(r0, &(0x7f0000002780)=""/4096, 0x1000, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001380)=[{{0x0, 0x118, &(0x7f0000000240), 0x0, 0x0, 0x87}}], 0x4000056, 0x3a, &(0x7f0000000200)={0x77359400}) 05:36:39 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:36:39 executing program 3: 05:36:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:36:39 executing program 2: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x1c, 0x0, &(0x7f0000000600)=[@acquire, @dead_binder_done={0x40086310, 0x4}, @acquire], 0x0, 0x0, 0x0}) 05:36:39 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:36:39 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:39 executing program 3: 05:36:40 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)}, 0x0) recvfrom(r0, &(0x7f0000002780)=""/4096, 0x1000, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001380)=[{{0x0, 0x118, &(0x7f0000000240), 0x0, 0x0, 0x87}}], 0x4000056, 0x3a, &(0x7f0000000200)={0x77359400}) 05:36:40 executing program 2: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x1c, 0x0, &(0x7f0000000600)=[@acquire, @dead_binder_done={0x40086310, 0x4}, @acquire], 0x0, 0x0, 0x0}) 05:36:40 executing program 3: 05:36:40 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:36:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:36:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:40 executing program 3: 05:36:40 executing program 2: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x1c, 0x0, &(0x7f0000000600)=[@acquire, @dead_binder_done={0x40086310, 0x4}, @acquire], 0x0, 0x0, 0x0}) 05:36:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:36:40 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:36:40 executing program 3: 05:36:40 executing program 2: syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x1c, 0x0, &(0x7f0000000600)=[@acquire, @dead_binder_done={0x40086310, 0x4}, @acquire], 0x0, 0x0, 0x0}) 05:36:41 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) recvfrom(r0, &(0x7f0000002780)=""/4096, 0x1000, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001380)=[{{0x0, 0x118, &(0x7f0000000240), 0x0, 0x0, 0x87}}], 0x4000056, 0x3a, &(0x7f0000000200)={0x77359400}) 05:36:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:36:41 executing program 3: 05:36:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:36:41 executing program 2: syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x1c, 0x0, &(0x7f0000000600)=[@acquire, @dead_binder_done={0x40086310, 0x4}, @acquire], 0x0, 0x0, 0x0}) 05:36:41 executing program 3: 05:36:41 executing program 2: syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x1c, 0x0, &(0x7f0000000600)=[@acquire, @dead_binder_done={0x40086310, 0x4}, @acquire], 0x0, 0x0, 0x0}) 05:36:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:36:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:36:41 executing program 3: 05:36:41 executing program 2: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x1c, 0x0, &(0x7f0000000600)=[@acquire, @dead_binder_done={0x40086310, 0x4}, @acquire], 0x0, 0x0, 0x0}) [ 328.743286] binder: 13316:13317 Acquire 1 refcount change on invalid ref 0 ret -22 [ 328.751193] binder: 13316:13317 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 328.758993] binder: 13316:13317 Acquire 1 refcount change on invalid ref 0 ret -22 05:36:42 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)}], 0x1}, 0x0) recvfrom(r0, &(0x7f0000002780)=""/4096, 0x1000, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001380)=[{{0x0, 0x118, &(0x7f0000000240), 0x0, 0x0, 0x87}}], 0x4000056, 0x3a, &(0x7f0000000200)={0x77359400}) 05:36:42 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:36:42 executing program 3: 05:36:42 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:36:42 executing program 2: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x1c, 0x0, &(0x7f0000000600)=[@acquire, @dead_binder_done={0x40086310, 0x4}, @acquire], 0x0, 0x0, 0x0}) [ 329.149084] binder: 13327:13329 Acquire 1 refcount change on invalid ref 0 ret -22 [ 329.157124] binder: 13327:13329 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 329.164670] binder: 13327:13329 Acquire 1 refcount change on invalid ref 0 ret -22 05:36:42 executing program 3: 05:36:42 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:36:42 executing program 2: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x1c, 0x0, &(0x7f0000000600)=[@acquire, @dead_binder_done={0x40086310, 0x4}, @acquire], 0x0, 0x0, 0x0}) 05:36:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:36:42 executing program 3: 05:36:42 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 329.485802] binder: 13342:13343 Acquire 1 refcount change on invalid ref 0 ret -22 [ 329.493980] binder: 13342:13343 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 329.501407] binder: 13342:13343 Acquire 1 refcount change on invalid ref 0 ret -22 05:36:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:36:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:36:43 executing program 3: 05:36:43 executing program 2: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x1c, 0x0, &(0x7f0000000600)=[@acquire, @dead_binder_done={0x40086310, 0x4}, @acquire], 0x0, 0x0, 0x0}) 05:36:43 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc4", 0x26}], 0x1}, 0x0) recvfrom(r0, &(0x7f0000002780)=""/4096, 0x1000, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001380)=[{{0x0, 0x118, &(0x7f0000000240), 0x0, 0x0, 0x87}}], 0x4000056, 0x3a, &(0x7f0000000200)={0x77359400}) 05:36:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 330.077457] binder: 13361:13362 BC_DEAD_BINDER_DONE 0000000000000004 not found 05:36:43 executing program 3: 05:36:43 executing program 2: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x1c, 0x0, &(0x7f0000000600)=[@acquire, @dead_binder_done={0x40086310, 0x4}, @acquire], 0x0, 0x0, 0x0}) 05:36:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:36:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 330.389873] binder: 13375:13377 BC_DEAD_BINDER_DONE 0000000000000004 not found 05:36:43 executing program 3: 05:36:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:36:43 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c6", 0x39}], 0x1}, 0x0) recvfrom(r0, &(0x7f0000002780)=""/4096, 0x1000, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001380)=[{{0x0, 0x118, &(0x7f0000000240), 0x0, 0x0, 0x87}}], 0x4000056, 0x3a, &(0x7f0000000200)={0x77359400}) 05:36:43 executing program 2: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x1c, 0x0, &(0x7f0000000600)=[@acquire, @dead_binder_done={0x40086310, 0x4}, @acquire], 0x0, 0x0, 0x0}) 05:36:43 executing program 3: 05:36:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:36:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 330.938401] binder: 13398:13402 BC_DEAD_BINDER_DONE 0000000000000004 not found 05:36:44 executing program 2: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x1c, 0x0, &(0x7f0000000600)=[@acquire, @dead_binder_done={0x40086310, 0x4}, @acquire], 0x0, 0x0, 0x0}) 05:36:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:36:44 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x267, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/route\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") preadv(r0, &(0x7f0000000700), 0x31f, 0x10400003) [ 331.150510] binder: 13409:13413 BC_DEAD_BINDER_DONE 0000000000000004 not found 05:36:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:36:44 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:44 executing program 2: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x1c, 0x0, &(0x7f0000000600)=[@acquire, @dead_binder_done={0x40086310, 0x4}, @acquire], 0x0, 0x0, 0x0}) [ 331.364181] binder: 13423:13425 BC_DEAD_BINDER_DONE 0000000000000004 not found 05:36:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:36:44 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf3", 0x43}], 0x1}, 0x0) recvfrom(r0, &(0x7f0000002780)=""/4096, 0x1000, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001380)=[{{0x0, 0x118, &(0x7f0000000240), 0x0, 0x0, 0x87}}], 0x4000056, 0x3a, &(0x7f0000000200)={0x77359400}) 05:36:44 executing program 2: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x1c, 0x0, &(0x7f0000000600)=[@acquire, @dead_binder_done={0x40086310, 0x4}, @acquire], 0x0, 0x0, 0x0}) 05:36:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:36:44 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:44 executing program 3: r0 = eventfd(0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') sendfile(r0, r1, 0x0, 0x101) [ 331.859776] binder: 13433:13435 BC_DEAD_BINDER_DONE 0000000000000004 not found 05:36:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:36:45 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/route\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/204, 0xcc}, {&(0x7f0000000180)=""/125, 0x7d}], 0x2, 0x1) 05:36:45 executing program 2: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x1c, 0x0, &(0x7f0000000600)=[@acquire, @dead_binder_done={0x40086310, 0x4}, @acquire], 0x0, 0x0, 0x0}) [ 332.207092] binder: 13456:13457 BC_DEAD_BINDER_DONE 0000000000000004 not found 05:36:45 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/route\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/204, 0xcc}, {&(0x7f0000000180)=""/125, 0x7d}], 0x2, 0x1) 05:36:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:36:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:36:45 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc88", 0x48}], 0x1}, 0x0) recvfrom(r0, &(0x7f0000002780)=""/4096, 0x1000, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001380)=[{{0x0, 0x118, &(0x7f0000000240), 0x0, 0x0, 0x87}}], 0x4000056, 0x3a, &(0x7f0000000200)={0x77359400}) 05:36:45 executing program 2: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x1c, 0x0, &(0x7f0000000600)=[@acquire, @dead_binder_done={0x40086310, 0x4}, @acquire], 0x0, 0x0, 0x0}) 05:36:45 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/route\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/204, 0xcc}, {&(0x7f0000000180)=""/125, 0x7d}], 0x2, 0x1) 05:36:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:36:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:36:45 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/route\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/204, 0xcc}, {&(0x7f0000000180)=""/125, 0x7d}], 0x2, 0x1) 05:36:45 executing program 2: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x1c, 0x0, &(0x7f0000000600)=[@acquire, @dead_binder_done={0x40086310, 0x4}, @acquire], 0x0, 0x0, 0x0}) 05:36:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:46 executing program 2: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x1c, 0x0, &(0x7f0000000600)=[@acquire, @dead_binder_done={0x40086310, 0x4}, @acquire], 0x0, 0x0, 0x0}) 05:36:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:36:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:36:46 executing program 2: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x1c, 0x0, &(0x7f0000000600)=[@acquire, @dead_binder_done={0x40086310, 0x4}, @acquire], 0x0, 0x0, 0x0}) 05:36:46 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b07", 0x4a}], 0x1}, 0x0) recvfrom(r0, &(0x7f0000002780)=""/4096, 0x1000, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001380)=[{{0x0, 0x118, &(0x7f0000000240), 0x0, 0x0, 0x87}}], 0x4000056, 0x3a, &(0x7f0000000200)={0x77359400}) 05:36:46 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/route\x00') socket$inet_udplite(0x2, 0x2, 0x88) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/204, 0xcc}, {&(0x7f0000000180)=""/125, 0x7d}], 0x2, 0x1) 05:36:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:36:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:36:46 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/route\x00') socket$inet_udplite(0x2, 0x2, 0x88) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/204, 0xcc}, {&(0x7f0000000180)=""/125, 0x7d}], 0x2, 0x1) 05:36:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:46 executing program 2: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x1c, 0x0, &(0x7f0000000600)=[@acquire, @dead_binder_done={0x40086310, 0x4}, @acquire], 0x0, 0x0, 0x0}) 05:36:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 334.008494] binder_thread_write: 4 callbacks suppressed [ 334.008518] binder: 13533:13535 BC_DEAD_BINDER_DONE 0000000000000004 not found 05:36:47 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/route\x00') socket$inet_udplite(0x2, 0x2, 0x88) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/204, 0xcc}, {&(0x7f0000000180)=""/125, 0x7d}], 0x2, 0x1) 05:36:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:36:47 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b0798", 0x4b}], 0x1}, 0x0) recvfrom(r0, &(0x7f0000002780)=""/4096, 0x1000, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001380)=[{{0x0, 0x118, &(0x7f0000000240), 0x0, 0x0, 0x87}}], 0x4000056, 0x3a, &(0x7f0000000200)={0x77359400}) 05:36:47 executing program 2: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0x1c, 0x0, &(0x7f0000000600)=[@acquire, @dead_binder_done={0x40086310, 0x4}, @acquire], 0x0, 0x0, 0x0}) 05:36:47 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/route\x00') ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/204, 0xcc}, {&(0x7f0000000180)=""/125, 0x7d}], 0x2, 0x1) 05:36:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:36:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:36:47 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/route\x00') ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/204, 0xcc}, {&(0x7f0000000180)=""/125, 0x7d}], 0x2, 0x1) 05:36:47 executing program 2: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0x1c, 0x0, &(0x7f0000000600)=[@acquire, @dead_binder_done={0x40086310, 0x4}, @acquire], 0x0, 0x0, 0x0}) 05:36:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:36:48 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/route\x00') ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/204, 0xcc}, {&(0x7f0000000180)=""/125, 0x7d}], 0x2, 0x1) 05:36:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:36:48 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000002780)=""/4096, 0x1000, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001380)=[{{0x0, 0x118, &(0x7f0000000240), 0x0, 0x0, 0x87}}], 0x4000056, 0x3a, &(0x7f0000000200)={0x77359400}) 05:36:48 executing program 2: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0x1c, 0x0, &(0x7f0000000600)=[@acquire, @dead_binder_done={0x40086310, 0x4}, @acquire], 0x0, 0x0, 0x0}) 05:36:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:48 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)=""/204, 0xcc}, {&(0x7f0000000180)=""/125, 0x7d}], 0x2, 0x1) 05:36:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:36:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 335.595151] validate_nla: 69 callbacks suppressed [ 335.595171] netlink: 'syz-executor1': attribute type 29 has an invalid length. [ 335.607667] __nla_parse: 69 callbacks suppressed [ 335.607685] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. [ 335.621606] netlink: 'syz-executor1': attribute type 29 has an invalid length. [ 335.629007] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. 05:36:48 executing program 2: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 05:36:48 executing program 3: r0 = syz_open_procfs(0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/204, 0xcc}, {&(0x7f0000000180)=""/125, 0x7d}], 0x2, 0x1) [ 335.657322] netlink: 'syz-executor1': attribute type 29 has an invalid length. [ 335.664996] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. [ 335.677686] netlink: 'syz-executor1': attribute type 29 has an invalid length. [ 335.685391] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. [ 335.724801] netlink: 'syz-executor1': attribute type 29 has an invalid length. [ 335.732671] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. [ 335.767271] netlink: 'syz-executor1': attribute type 29 has an invalid length. [ 335.775386] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. [ 335.806617] binder: 13605:13607 ioctl c0306201 0 returned -14 05:36:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 335.841139] netlink: 'syz-executor1': attribute type 29 has an invalid length. [ 335.848883] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. [ 335.872338] netlink: 'syz-executor1': attribute type 29 has an invalid length. [ 335.879877] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. 05:36:49 executing program 2: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:36:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 335.929386] netlink: 'syz-executor1': attribute type 29 has an invalid length. [ 335.937067] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. 05:36:49 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/route\x00') socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/204, 0xcc}, {&(0x7f0000000180)=""/125, 0x7d}], 0x2, 0x1) [ 335.997693] netlink: 'syz-executor1': attribute type 29 has an invalid length. [ 336.005678] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. 05:36:52 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001380)=[{{0x0, 0x118, &(0x7f0000000240), 0x0, 0x0, 0x87}}], 0x4000056, 0x3a, &(0x7f0000000200)={0x77359400}) 05:36:52 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/route\x00') socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/204, 0xcc}, {&(0x7f0000000180)=""/125, 0x7d}], 0x2, 0x1) 05:36:52 executing program 2: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:36:52 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:36:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:36:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:36:52 executing program 2: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:36:52 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/route\x00') socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/204, 0xcc}, {&(0x7f0000000180)=""/125, 0x7d}], 0x2, 0x1) 05:36:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:36:52 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 05:36:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:36:52 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/route\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000140)="0adc1f023c123f3188a070") preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/204, 0xcc}, {&(0x7f0000000180)=""/125, 0x7d}], 0x2, 0x1) 05:36:56 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) recvfrom(r0, &(0x7f0000002780)=""/4096, 0x1000, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001380)=[{{0x0, 0x118, &(0x7f0000000240), 0x0, 0x0, 0x87}}], 0x4000056, 0x3a, &(0x7f0000000200)={0x77359400}) 05:36:56 executing program 2: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000600)=[@acquire, @dead_binder_done={0x40086310, 0x4}], 0x0, 0x0, 0x0}) 05:36:56 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:36:56 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/route\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000140)="0adc1f023c123f3188a070") preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/204, 0xcc}, {&(0x7f0000000180)=""/125, 0x7d}], 0x2, 0x1) 05:36:56 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 05:36:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 342.997698] binder: 13663:13668 BC_DEAD_BINDER_DONE 0000000000000004 not found 05:36:56 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/route\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000140)="0adc1f023c123f3188a070") preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/204, 0xcc}, {&(0x7f0000000180)=""/125, 0x7d}], 0x2, 0x1) [ 343.092114] validate_nla: 22 callbacks suppressed [ 343.092134] netlink: 'syz-executor1': attribute type 29 has an invalid length. [ 343.104693] __nla_parse: 22 callbacks suppressed [ 343.104712] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. [ 343.118307] netlink: 'syz-executor1': attribute type 29 has an invalid length. [ 343.125802] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. 05:36:56 executing program 2: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x8, 0x0, &(0x7f0000000600)=[@acquire], 0x0, 0x0, 0x0}) 05:36:56 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 05:36:56 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:36:56 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/route\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/204, 0xcc}, {&(0x7f0000000180)=""/125, 0x7d}], 0x2, 0x1) [ 343.313554] netlink: 'syz-executor1': attribute type 29 has an invalid length. [ 343.321087] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. 05:36:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:36:56 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) recvfrom(r0, &(0x7f0000002780)=""/4096, 0x1000, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x3a, &(0x7f0000000200)={0x77359400}) 05:36:56 executing program 2: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x8, 0x0, &(0x7f0000000600)=[@acquire], 0x0, 0x0, 0x0}) 05:36:56 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/route\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/204, 0xcc}, {&(0x7f0000000180)=""/125, 0x7d}], 0x2, 0x1) 05:36:56 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 05:36:56 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 343.723521] input: syz1 as /devices/virtual/input/input16 [ 343.771993] input: syz1 as /devices/virtual/input/input17 05:36:56 executing program 2: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x8, 0x0, &(0x7f0000000600)=[@acquire], 0x0, 0x0, 0x0}) [ 343.826521] netlink: 'syz-executor1': attribute type 29 has an invalid length. [ 343.834251] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. [ 343.843158] netlink: 'syz-executor1': attribute type 29 has an invalid length. [ 343.850558] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. 05:36:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:36:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:36:57 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/route\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/204, 0xcc}, {&(0x7f0000000180)=""/125, 0x7d}], 0x2, 0x1) 05:36:57 executing program 0: [ 344.040476] netlink: 'syz-executor1': attribute type 29 has an invalid length. [ 344.048042] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. 05:36:57 executing program 2: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000600)=[@acquire, @dead_binder_done], 0x0, 0x0, 0x0}) 05:36:57 executing program 0: [ 344.286743] binder: 13730:13733 BC_DEAD_BINDER_DONE 0000000000000000 not found 05:36:57 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/route\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/204, 0xcc}, {&(0x7f0000000180)=""/125, 0x7d}], 0x2, 0x1) 05:36:57 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) recvfrom(r0, &(0x7f0000002780)=""/4096, 0x1000, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x3a, &(0x7f0000000200)={0x77359400}) 05:36:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:36:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:36:57 executing program 2: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000600)=[@dead_binder_done], 0x0, 0x0, 0x0}) 05:36:57 executing program 0: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x10006, 0x0, 0x0, 0xffffffff}]}) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000280)=""/203, 0xcb) [ 344.474451] netlink: 'syz-executor1': attribute type 29 has an invalid length. [ 344.482139] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. [ 344.490796] netlink: 'syz-executor1': attribute type 29 has an invalid length. [ 344.498311] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. 05:36:57 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/route\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/204, 0xcc}, {&(0x7f0000000180)=""/125, 0x7d}], 0x2, 0x1) [ 344.577773] binder: 13747:13749 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 344.632781] netlink: 'syz-executor1': attribute type 29 has an invalid length. [ 344.640286] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. 05:36:57 executing program 2: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000600)=[@dead_binder_done], 0x0, 0x0, 0x0}) 05:36:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:36:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 344.835275] audit: type=1326 audit(1547617017.880:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13751 comm="syz-executor0" exe="/root/syz-executor0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ad2a code=0xffff0000 [ 344.867412] binder: 13759:13761 BC_DEAD_BINDER_DONE 0000000000000000 not found 05:36:57 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) recvfrom(r0, &(0x7f0000002780)=""/4096, 0x1000, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x3a, &(0x7f0000000200)={0x77359400}) 05:36:57 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/route\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/204, 0xcc}, {&(0x7f0000000180)=""/125, 0x7d}], 0x2, 0x1) 05:36:58 executing program 2: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000600)=[@dead_binder_done], 0x0, 0x0, 0x0}) [ 345.058159] netlink: 'syz-executor1': attribute type 29 has an invalid length. [ 345.065840] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. 05:36:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:36:58 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/route\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c12") preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/204, 0xcc}, {&(0x7f0000000180)=""/125, 0x7d}], 0x2, 0x1) 05:36:58 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) recvfrom(r0, &(0x7f0000002780)=""/4096, 0x1000, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001380), 0x0, 0x3a, &(0x7f0000000200)={0x77359400}) [ 345.189864] binder: 13775:13777 BC_DEAD_BINDER_DONE 0000000000000000 not found 05:36:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 345.457762] audit: type=1326 audit(1547617018.500:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13751 comm="syz-executor0" exe="/root/syz-executor0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ad2a code=0xffff0000 05:36:58 executing program 0: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x10006, 0x0, 0x0, 0xffffffff}]}) r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @local}, 0x10) shutdown(r0, 0x0) 05:36:58 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000000)) 05:36:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:36:58 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/route\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c12") preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/204, 0xcc}, {&(0x7f0000000180)=""/125, 0x7d}], 0x2, 0x1) 05:36:58 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) recvfrom(r0, &(0x7f0000002780)=""/4096, 0x1000, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001380), 0x0, 0x3a, &(0x7f0000000200)={0x77359400}) 05:36:58 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[@ANYRES16], 0x2) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40046602, &(0x7f0000000080)) [ 345.725496] audit: type=1326 audit(1547617018.770:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13801 comm="syz-executor0" exe="/root/syz-executor0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ad2a code=0xffff0000 05:36:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:36:58 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/route\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c12") preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/204, 0xcc}, {&(0x7f0000000180)=""/125, 0x7d}], 0x2, 0x1) 05:36:58 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) recvfrom(r0, &(0x7f0000002780)=""/4096, 0x1000, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001380), 0x0, 0x3a, &(0x7f0000000200)={0x77359400}) 05:36:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 05:36:59 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$vcsn(&(0x7f0000000240)='/dev/vcs#\x00', 0x9, 0x402882) fchmodat(r1, &(0x7f0000000140)='./file0\x00', 0x80) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) unshare(0x80403fd) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8081, 0x20) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_LEAVE_GROUP(r2, 0x0, 0x2d, &(0x7f0000000180)={0x80, {{0x2, 0x4e23, @rand_addr=0x3}}}, 0x88) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000480)={"ceec394db518e22f32b34e512f251d3d0fb259c61b3fb981541f74c2656ec2db55b441fcf565a0bd84e69ac0be2de01df3d076508682251ee3ddbf3fbc1fef1f23253deb389bfe6ddaa1fa1c6197eb91b2ed959f13994d3667a5750f6be6988eb7730f9c8fbf9853d51b9e2f5309a45dc63f9ed9f8c75f4799325eb672d9065d57f4f3b4462815c0e968dfd7516eaef11296eff1e9d0282035ff4c68855c729ae7ba2a084c256cd6513d337c6559af2f8d8da5a8ab32d9f889f0368eca8d481973a5ac79bc5ece7e6e7bad1b6669b66717ea1b5137c1bc40b1f876b872cef1c76b2369df4e348b92ee98d49f10673a7b2d4baab2c0df0bef2c70b10a88d9a51d7b5344dd43f328f37f2e29444a3094e76077bee361e7f1151795ad1c15fe51ffee5f43e7a5417cdf7034d8f64e73d8aa6f048f03d8ce9ea389bc5e84c196b461b1ac704ca7a94bbf17294708a5056901e4ea44c17cdab5c783cf661d7674c6e2075a3b65978bfa3bbabd9ca4c3b15760fbb971aa4834aae264f734a8adc044b93999699ac6a6bc7610065edeafda20fdcb99d4c617b35f6736b3be7109e1e4fcb7ba84f50f0bbfef3041c512cb2fa80c4933474b3a20740c1f1da77ebdf7c60cefd0776d2bf14f8403c495b12265e41458908a515c72a46463a9bda2dbb6c28a8533a02a8dc8a66ee87a7f43b7ec3967f85615097280b9f858983c4e3e9738170712a117808d35c8037d2e8e14c87b44adc6f6632f5b6275299df32bba50ef2e0afa0a97ade30d6d538286e354f99d6110352b96d67374219cc9f145885b334cbec7882b15eee6b5f6396e90bba7e737d3fc7fa0150aeb6434806716bd67b637ed1e38fada5f0ae77bd120964394b1d594602056a4500d4e5b2e7f0213858cac143db66610e9f12fc8ffb8f3d68edd388ab0eaf01debc4a054d0461afd9efa432209850d611620390830cf2009f47397ea4d59988f5c422794a65030f864bd5f8059d0d70bd2734a28bd4cfa8862558c4b8eaa70348b39e8b7617b088b28c33b094c45d07a72338dcd42800f1089a7d42174258afbb5e9db6d34e305a02a872122225f612fdf570a358c15a1a8edc6c5a4acbb4d495a86bfb9390bf91b5ce2eeea5a40b2c2fed9d1f1d6b95a9470b80619254c41586924bf65c93bf9b146c1098479147aca610562b9706901adc3d66098697a490b20de1225a743f76a60c4628b18d9c2943dfd6b935dc5b247524e17aeab019ae1cb75217c28ee35949493a034d747c69820307e823325ce75ec30fcb1a4408e35ae8d7beb26837a8a8af08fe5fafd919969abdcc99bd9eb20669fde2e67ca01e717dea3096f4d4694cfd77af125b2f0238998fce4304a13e150c4b919f104190bb5b5d8425c66fabacc1c8e26b4287017f1024aee153f2ae2ab258fd5de125d83d9d969408bb48af0f5865f"}) 05:36:59 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) recvfrom(r0, &(0x7f0000002780)=""/4096, 0x1000, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x3a, &(0x7f0000000200)={0x77359400}) [ 346.475956] audit: type=1326 audit(1547617019.520:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13801 comm="syz-executor0" exe="/root/syz-executor0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ad2a code=0xffff0000 05:36:59 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000300)="a18eace541d5cd444b8046832a95ace3e2c87731379284b1ec84d614be036bebf5a1541bebc37f5d81a35aaae1ec999665da3287b2b33a21f5b70740efb37941117b9fee34a5d87891d0ff2fdda53875208d", 0x52, 0x0) 05:36:59 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/route\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188") preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/204, 0xcc}, {&(0x7f0000000180)=""/125, 0x7d}], 0x2, 0x1) 05:36:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 05:36:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:36:59 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) recvfrom(r0, &(0x7f0000002780)=""/4096, 0x1000, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x3a, &(0x7f0000000200)={0x77359400}) 05:36:59 executing program 2: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x910, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0xc0540, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f00000000c0)) 05:36:59 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/route\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188") preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/204, 0xcc}, {&(0x7f0000000180)=""/125, 0x7d}], 0x2, 0x1) 05:36:59 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) recvfrom(r0, &(0x7f0000002780)=""/4096, 0x1000, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x3a, &(0x7f0000000200)={0x77359400}) [ 346.777631] audit: type=1400 audit(1547617019.820:36): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=13854 comm="syz-executor0" 05:36:59 executing program 2: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pwrite64(r0, &(0x7f0000000300)="a18eace541d5cd444b8046832a95ace3e2c87731379284b1ec84d614be036bebf5a1541bebc37f5d81a35aaae1ec999665da3287b2b33a21f5b70740efb37941117b9fee34a5d87891d0ff2fdda53875208d", 0x52, 0x0) 05:36:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 05:37:00 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='/exe\x00\x00\x00\x00\x00\x00') fcntl$setstatus(r2, 0x4, 0x80000000005ffb) io_setup(0x6, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x7, 0x0, 0x0, r2, &(0x7f0000000200), 0xa6052c55}]) 05:37:00 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/route\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188") preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/204, 0xcc}, {&(0x7f0000000180)=""/125, 0x7d}], 0x2, 0x1) [ 347.068501] audit: type=1400 audit(1547617020.110:37): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=13866 comm="syz-executor2" 05:37:00 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) recvfrom(r0, &(0x7f0000002780)=""/4096, 0x1000, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001380)=[{{0x0, 0x118, &(0x7f0000000240), 0x0, 0x0, 0x87}}], 0x4000056, 0x0, &(0x7f0000000200)={0x77359400}) 05:37:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:37:00 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/route\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a0") preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/204, 0xcc}, {&(0x7f0000000180)=""/125, 0x7d}], 0x2, 0x1) 05:37:00 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setfsgid(r1) 05:37:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) 05:37:00 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000540)='/dev/zero\x00', 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) close(r0) prctl$PR_SET_ENDIAN(0x14, 0x0) socket$unix(0x1, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 05:37:00 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/route\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a0") preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/204, 0xcc}, {&(0x7f0000000180)=""/125, 0x7d}], 0x2, 0x1) 05:37:00 executing program 2: sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) gettid() ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000000)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') 05:37:00 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net//..\x00', 0x314ea2ec15e387bd, 0x0) close(r0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x9c) 05:37:00 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xfffffffffffffda0, &(0x7f0000000140), 0x10000000000000cd, 0x0, 0xfffffffffffffd61}, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, &(0x7f0000000080)='\x06\x00\x00\x001\x00Rw\x97\x8b\xf2\x98\x02q\x80)\xd4\x7f\x87') ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f0, &(0x7f0000000080)='ip6tnl0\x00') 05:37:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 347.878554] device lo entered promiscuous mode 05:37:01 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/route\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a0") preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/204, 0xcc}, {&(0x7f0000000180)=""/125, 0x7d}], 0x2, 0x1) 05:37:01 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) recvfrom(r0, &(0x7f0000002780)=""/4096, 0x1000, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001380)=[{{0x0, 0x0, &(0x7f0000000240)}}], 0x1, 0x3a, 0x0) 05:37:01 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d000b0000001000034000ff39a0053582c137153e37835b3f00040000000000", 0x2e}], 0x1}, 0x0) [ 348.138266] validate_nla: 38 callbacks suppressed [ 348.138285] netlink: 'syz-executor1': attribute type 29 has an invalid length. [ 348.150807] __nla_parse: 38 callbacks suppressed [ 348.150826] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. 05:37:01 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000740)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000780), 0x12) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$cgroup_procs(r0, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000080), 0x12) [ 348.542803] netlink: 'syz-executor1': attribute type 29 has an invalid length. [ 348.550290] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. [ 348.582266] netlink: 'syz-executor1': attribute type 29 has an invalid length. 05:37:01 executing program 3: syz_open_procfs(0x0, &(0x7f00000002c0)='net/route\x00') r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)=""/204, 0xcc}, {&(0x7f0000000180)=""/125, 0x7d}], 0x2, 0x1) [ 348.589755] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. [ 348.599914] netlink: 'syz-executor1': attribute type 29 has an invalid length. [ 348.607541] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. 05:37:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 05:37:01 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x0, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x802}) gettid() socket$kcm(0x11, 0x2, 0x300) write$cgroup_int(r0, &(0x7f0000000000), 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) 05:37:01 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) recvfrom(r0, &(0x7f0000002780)=""/4096, 0x1000, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001380)=[{{0x0, 0x0, &(0x7f0000000240)}}], 0x1, 0x3a, 0x0) [ 348.856252] netlink: 'syz-executor1': attribute type 29 has an invalid length. [ 348.863908] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. [ 348.972449] protocol 88fb is buggy, dev hsr_slave_0 [ 348.978121] protocol 88fb is buggy, dev hsr_slave_1 [ 349.097855] netlink: 'syz-executor1': attribute type 29 has an invalid length. [ 349.105417] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. [ 349.142131] protocol 88fb is buggy, dev hsr_slave_0 [ 349.147663] protocol 88fb is buggy, dev hsr_slave_1 [ 349.178370] netlink: 'syz-executor1': attribute type 29 has an invalid length. 05:37:02 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000740)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000780), 0x12) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$cgroup_procs(r0, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000080), 0x12) 05:37:02 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/route\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") preadv(r0, 0x0, 0x0, 0x1) 05:37:02 executing program 2: sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) gettid() ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000000)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') [ 349.186242] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. [ 349.196280] netlink: 'syz-executor1': attribute type 29 has an invalid length. [ 349.203930] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. 05:37:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 05:37:02 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000740)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000780), 0x12) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$cgroup_procs(r0, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000080), 0x12) 05:37:02 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) recvfrom(r0, &(0x7f0000002780)=""/4096, 0x1000, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001380)=[{{0x0, 0x0, &(0x7f0000000240)}}], 0x1, 0x3a, 0x0) 05:37:02 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="720af8ff7d440000bfa100000000000007010000f8ffffffb702000003000000bf13000000000000850000002d000000b7000000000000009500000000000000"], 0x0}, 0x48) 05:37:02 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/route\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") preadv(r0, 0x0, 0x0, 0x1) 05:37:02 executing program 2: sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) gettid() ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000000)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') 05:37:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 349.553792] netlink: 'syz-executor1': attribute type 29 has an invalid length. [ 349.561243] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. [ 349.570034] netlink: 'syz-executor1': attribute type 29 has an invalid length. [ 349.577549] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. 05:37:02 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000740)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000780), 0x12) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$cgroup_procs(r0, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000080), 0x12) 05:37:02 executing program 5: recvmsg$kcm(0xffffffffffffffff, &(0x7f0000002c00)={&(0x7f0000000f80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0xfffffedd, &(0x7f0000002b80)=[{&(0x7f0000001900)=""/210, 0x4260966a}], 0x1, 0x0, 0x20d}, 0x0) r0 = socket$kcm(0x10, 0x40000000000002, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000280)="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", 0xcfa}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000200)=@sco, 0x26c, &(0x7f0000002b80), 0x1e4, &(0x7f00000076c0)=""/156, 0xfffffffffffffe11}, 0x0) 05:37:02 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/route\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") preadv(r0, 0x0, 0x0, 0x1) 05:37:03 executing program 4: clone(0x8002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 05:37:03 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/route\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/204, 0xcc}], 0x1, 0x1) 05:37:03 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000740)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000780), 0x12) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$cgroup_procs(r0, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000080), 0x12) 05:37:03 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="02120000020000000a000097d3d34473"], 0x10}}, 0x0) 05:37:03 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r0, &(0x7f0000000100), 0x2a2, 0x10400003) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 05:37:03 executing program 2: sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) gettid() ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000000)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') 05:37:03 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/route\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/204, 0xcc}], 0x1, 0x1) 05:37:03 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000001040)={0x2, 0x4e23, @loopback}, 0x10) 05:37:03 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000740)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000780), 0x12) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$cgroup_procs(r0, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) 05:37:03 executing program 1: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xe78f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xc, 0x10011, r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000240)) 05:37:03 executing program 5: openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x4000, 0x84003ff) write$cgroup_type(r1, &(0x7f0000000240)='threaded\x00', 0x70b5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fallocate(r1, 0x3, 0x7fff, 0x8000) fsync(r1) 05:37:03 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f00000004c0)=[{}], 0x1, 0x0) 05:37:03 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) unshare(0x80403fd) 05:37:04 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/route\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/204, 0xcc}], 0x1, 0x1) 05:37:04 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000740)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000780), 0x12) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:37:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x3003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:37:04 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x4000, 0x84003ff) write$cgroup_type(r1, &(0x7f0000000240)='threaded\x00', 0x70b5) fallocate(r1, 0x3, 0x7fff, 0x8000) fsync(r1) 05:37:04 executing program 2: sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) gettid() ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') 05:37:04 executing program 1: perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c61, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) 05:37:04 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/route\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/204, 0xcc}, {0x0}], 0x2, 0x1) 05:37:04 executing program 2: sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) gettid() ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') 05:37:04 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x10006, 0x0, 0x0, 0xffffffff}]}) migrate_pages(0x0, 0x0, 0x0, 0x0) 05:37:04 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000740)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000780), 0x12) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) 05:37:04 executing program 1: creat(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c61, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x10000000000003, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) [ 351.729890] audit: type=1326 audit(1547617024.770:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14086 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ad2a code=0xffff0000 05:37:04 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) unshare(0x40600) r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) 05:37:04 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/route\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/204, 0xcc}, {0x0}], 0x2, 0x1) 05:37:04 executing program 2: sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) gettid() ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') 05:37:05 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000740)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000780), 0x12) 05:37:05 executing program 1: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x10006, 0x0, 0x0, 0xffffffff}]}) r0 = socket$packet(0x11, 0x3, 0x300) getsockname(r0, 0x0, &(0x7f0000000240)) 05:37:05 executing program 2: sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) gettid() ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000000)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') 05:37:05 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/route\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/204, 0xcc}, {0x0}], 0x2, 0x1) 05:37:05 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x10006, 0x0, 0x0, 0xffffffff}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/route\x00') pread64(r0, 0x0, 0xf5dddd3da312275f, 0x7c0120) 05:37:05 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/route\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/125, 0x7d}], 0x1, 0x1) [ 352.279659] audit: type=1326 audit(1547617025.320:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14116 comm="syz-executor1" exe="/root/syz-executor1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ad2a code=0xffff0000 [ 352.346254] audit: type=1326 audit(1547617025.360:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14115 comm="syz-executor5" exe="/root/syz-executor5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ad2a code=0xffff0000 [ 352.412171] protocol 88fb is buggy, dev hsr_slave_0 [ 352.417703] protocol 88fb is buggy, dev hsr_slave_1 05:37:05 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r0, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) 05:37:05 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000780), 0x12) 05:37:05 executing program 2: sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) gettid() ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000000)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') 05:37:05 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/route\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/125, 0x7d}], 0x1, 0x1) [ 352.498364] audit: type=1326 audit(1547617025.540:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14086 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ad2a code=0xffff0000 05:37:05 executing program 0: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000740)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f0000000780), 0x12) 05:37:05 executing program 2: sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) gettid() ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000000)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') 05:37:05 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/route\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/125, 0x7d}], 0x1, 0x1) [ 353.033025] audit: type=1326 audit(1547617026.080:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14115 comm="syz-executor5" exe="/root/syz-executor5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ad2a code=0xffff0000 [ 353.056634] audit: type=1326 audit(1547617026.100:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14116 comm="syz-executor1" exe="/root/syz-executor1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ad2a code=0xffff0000 [ 353.132095] protocol 88fb is buggy, dev hsr_slave_0 [ 353.137477] protocol 88fb is buggy, dev hsr_slave_1 05:37:06 executing program 1: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x10006, 0x0, 0x0, 0xffffffff}]}) timer_create(0x0, 0x0, &(0x7f0000000340)) timer_delete(0x0) 05:37:06 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000740)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000780), 0x12) 05:37:06 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="5400000030000005000000000000000000000000400001003ccd7b802c2c868667686df3a300000000000c000100736b626564697400240002000800040000000000180002"], 0x1}}, 0x0) r0 = socket$packet(0x11, 0x802, 0x300) setsockopt$packet_int(r0, 0x107, 0x20000000001, &(0x7f00000000c0)=0x3, 0x3a) 05:37:06 executing program 2: sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) gettid() ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000000)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') 05:37:06 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/route\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") preadv(r0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000180)=""/125, 0x7d}], 0x2, 0x1) 05:37:06 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x10006, 0x0, 0x0, 0xffffffff}]}) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) chroot(&(0x7f0000000080)='./file0\x00') 05:37:06 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000740)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f0000000780), 0x12) [ 353.268711] audit: type=1326 audit(1547617026.310:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14160 comm="syz-executor5" exe="/root/syz-executor5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ad2a code=0xffff0000 [ 353.302109] protocol 88fb is buggy, dev hsr_slave_0 [ 353.307558] protocol 88fb is buggy, dev hsr_slave_1 05:37:06 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/route\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") preadv(r0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000180)=""/125, 0x7d}], 0x2, 0x1) [ 353.359140] audit: type=1326 audit(1547617026.400:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14170 comm="syz-executor1" exe="/root/syz-executor1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ad2a code=0xffff0000 05:37:06 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x10006, 0x0, 0x0, 0xffffffff}]}) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) rmdir(&(0x7f0000000100)='./file0\x00') 05:37:06 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000780), 0x12) [ 353.547370] audit: type=1326 audit(1547617026.590:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14181 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ad2a code=0xffff0000 05:37:06 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000740)='tasks\x00', 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000780), 0x12) 05:37:06 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000740)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, 0x0, 0x0) [ 354.056738] audit: type=1326 audit(1547617027.100:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14160 comm="syz-executor5" exe="/root/syz-executor5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ad2a code=0xffff0000 05:37:07 executing program 1: perf_event_open(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 05:37:07 executing program 0: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x10006, 0x0, 0x0, 0xffffffff}]}) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) listxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 05:37:07 executing program 2: sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) gettid() ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000000)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') 05:37:07 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/route\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") preadv(r0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000180)=""/125, 0x7d}], 0x2, 0x1) 05:37:07 executing program 5: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x412, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='/exe\x00\xe1\xff\xff\xff\x04\t\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\xa9\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xde\xe9\x01\xd2q\xfb\xbcxd\xc3\xcfs\x18\xe8\x9cn\x97\xcaI\xe2R?\x8dT\xc6F\xddG\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x82\xc8\xedx\x0f\xc8\xde\x13\xaa\xc8\x1aS\x93\x80,\xac\x9b0\xbd4\xf4\xb1\xaa\x91\x95\x0e3!\t^\xd1\xdc\x06\t\xcf\x05\xb8\xb2\x9c\a\x00\x00\x00\x00\x00\x00\x00hm\x0eM\x0e5O\xfb\xec\xf9\xb6\xcbV\xdf7\xda\xady3\x93\xcd\xf9m`\xc34\xd7\xde\xe9\x9dX\xbb\x98\xec\x8f\xba\xe8\x85\t\xab\xe3/\xd4B9\xab\xb4\xcc\xf6Y\xf5\\v\xc2\x88\xae\x1d\x12\xb8\xae\xf6\x89\xf1\x9c9\xd9\xcd\xd8\xa2I\x96\x91\x85\xb3\xf2)\xa4\x8e\xf3\x016]\av*\x19g\xeb2A\xf4\x97\x96\xf3\xf6\xce\xb2\x8f\xd1\x830qPHmVA\xc3\xdf\xc8L%\xba\xa2\xb3q,\xb8%\x12g\xe7\x01Y\x89Om\xd8\xf2\x93\xe8\xcdD\xea5\xca\x1cR\xf1\xc1e\xb69\x1dw\x94\x05\xfa\xbf\xaf\x83\\)(\xc6\x12\x82\xa1\f\xfe\xe5#\xc6\x94\x13\x9d\x9b\x15\x8c\x8a\xc9\xc2\x06\x8d\xea\xe9V:\x86a\xce\xf5\xdf\xb8qIi\xccr\x7fR\x13\x99\x96\xdd/W[\n\xf9\xcc\x01?\']6Q\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') flistxattr(r0, 0x0, 0x0) 05:37:07 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) 05:37:07 executing program 5: perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000002d40), 0x8, 0x0) read(r0, &(0x7f0000000000)=""/128, 0xfd8a) signalfd4(r0, &(0x7f0000a71ff8), 0x8, 0x0) 05:37:07 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xffdbc2ca) unlink(&(0x7f00000001c0)='./file0\x00') removexattr(&(0x7f0000000080)='./file1\x00', 0x0) mount(&(0x7f0000000000)=ANY=[], &(0x7f0000000040)='.\x00', 0x0, 0x2002, 0x0) [ 354.502212] protocol 88fb is buggy, dev hsr_slave_0 [ 354.507670] protocol 88fb is buggy, dev hsr_slave_1 05:37:07 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/route\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/204, 0xcc}, {&(0x7f0000000180)=""/125, 0x7d}], 0x2, 0x0) 05:37:07 executing program 2: sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) gettid() ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000000)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') 05:37:08 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000200)=ANY=[], 0xfffffffffffffdf3) unlink(&(0x7f00000001c0)='./file0\x00') mount(&(0x7f0000000000)=ANY=[], &(0x7f0000000100)='./file0\x00', 0x0, 0x2002, 0x0) lremovexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@random={'btrfs.', 'trustedsystemtrustedem0lo\x00'}) [ 355.212216] protocol 88fb is buggy, dev hsr_slave_0 [ 355.217980] protocol 88fb is buggy, dev hsr_slave_1 05:37:08 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000200)=ANY=[], 0xfffffffffffffdf3) unlink(&(0x7f00000001c0)='./file0\x00') mount(&(0x7f0000000000)=ANY=[], &(0x7f00000005c0)='./file0\x00', 0x0, 0x2002, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) [ 355.368402] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.376078] protocol 88fb is buggy, dev hsr_slave_0 [ 355.381680] protocol 88fb is buggy, dev hsr_slave_1 05:37:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f7fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:37:08 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xffdbc2ca) unlink(&(0x7f00000001c0)='./file0\x00') unlink(&(0x7f0000000140)='./file0\x00') mount(&(0x7f0000000000)=ANY=[], &(0x7f0000000040)='.\x00', 0x0, 0x2002, 0x0) 05:37:08 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/route\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/204, 0xcc}, {&(0x7f0000000180)=""/125, 0x7d}], 0x2, 0x0) [ 355.612352] protocol 88fb is buggy, dev hsr_slave_0 [ 355.617931] protocol 88fb is buggy, dev hsr_slave_1 05:37:08 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='/exe\x00\xe1\xff\xff\xff\x04\t\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\xa9\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xde\xe9\x01\xd2q\xfb\xbcxd\xc3\xcfs\x18\xe8\x9cn\x97\xcaI\xe2R?\x8dT\xc6F\xddG\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x82\xc8\xedx\x0f\xc8\xde\x13\xaa\xc8\x1aS\x93\x80,\xac\x9b0\xbd4\xf4\xb1\xaa\x91\x95\x0e3!\t^\xd1\xdc\x06\t\xcf\x05\xb8\xb2\x9c\a\x00\x00\x00\x00\x00\x00\x00hm\x0eM\x0e5O\xfb\xec\xf9\xb6\xcbV\xdf7\xda\xady3\x93\xcd\xf9m`\xc34\xd7\xde\xe9\x9dX\xbb\x98\xec\x8f\xba\xe8\x85\t\xab\xe3/\xd4B9\xab\xb4\xcc\xf6Y\xf5\\v\xc2\x88\xae\x1d\x12\xb8\xae\xf6\x89\xf1\x9c9\xd9\xcd\xd8\xa2I\x96\x91\x85\xb3\xf2)\xa4\x8e\xf3\x016]\av*\x19g\xeb2A\xf4\x97\x96\xf3\xf6\xce\xb2\x8f\xd1\x830qPHmVA\xc3\xdf\xc8L%\xba\xa2\xb3q,\xb8%\x12g\xe7\x01Y\x89Om\xd8\xf2\x93\xe8\xcdD\xea5\xca\x1cR\xf1\xc1e\xb69\x1dw\x94\x05\xfa\xbf\xaf\x83\\)(\xc6\x12\x82\xa1\f\xfe\xe5#\xc6\x94\x13\x9d\x9b\x15\x8c\x8a\xc9\xc2\x06\x8d\xea\xe9V:\x86a\xce\xf5\xdf\xb8qIi\xccr\x7fR\x13\x99\x96\xdd/W[\n\xf9\xcc\x01?\']6Q\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') fsetxattr(r0, &(0x7f0000000040)=@known='user.syz\x00', 0x0, 0x0, 0x3) 05:37:09 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='/exe\x00\xe1\xff\xff\xff\x04\t\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\xa9\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xde\xe9\x01\xd2q\xfb\xbcxd\xc3\xcfs\x18\xe8\x9cn\x97\xcaI\xe2R?\x8dT\xc6F\xddG\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x82\xc8\xedx\x0f\xc8\xde\x13\xaa\xc8\x1aS\x93\x80,\xac\x9b0\xbd4\xf4\xb1\xaa\x91\x95\x0e3!\t^\xd1\xdc\x06\t\xcf\x05\xb8\xb2\x9c\a\x00\x00\x00\x00\x00\x00\x00hm\x0eM\x0e5O\xfb\xec\xf9\xb6\xcbV\xdf7\xda\xady3\x93\xcd\xf9m`\xc34\xd7\xde\xe9\x9dX\xbb\x98\xec\x8f\xba\xe8\x85\t\xab\xe3/\xd4B9\xab\xb4\xcc\xf6Y\xf5\\v\xc2\x88\xae\x1d\x12\xb8\xae\xf6\x89\xf1\x9c9\xd9\xcd\xd8\xa2I\x96\x91\x85\xb3\xf2)\xa4\x8e\xf3\x016]\av*\x19g\xeb2A\xf4\x97\x96\xf3\xf6\xce\xb2\x8f\xd1\x830qPHmVA\xc3\xdf\xc8L%\xba\xa2\xb3q,\xb8%\x12g\xe7\x01Y\x89Om\xd8\xf2\x93\xe8\xcdD\xea5\xca\x1cR\xf1\xc1e\xb69\x1dw\x94\x05\xfa\xbf\xaf\x83\\)(\xc6\x12\x82\xa1\f\xfe\xe5#\xc6\x94\x13\x9d\x9b\x15\x8c\x8a\xc9\xc2\x06\x8d\xea\xe9V:\x86a\xce\xf5\xdf\xb8qIi\xccr\x7fR\x13\x99\x96\xdd/W[\n\xf9\xcc\x01?\']6Q\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') fsetxattr(r0, &(0x7f0000000040)=@known='user.syz\x00', 0x0, 0x0, 0x3) [ 356.012447] protocol 88fb is buggy, dev hsr_slave_0 [ 356.017981] protocol 88fb is buggy, dev hsr_slave_1 05:37:09 executing program 1: clone(0x0, 0x0, 0x0, 0x0, 0x0) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 05:37:09 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='/exe\x00\xe1\xff\xff\xff\x04\t\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\xa9\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xde\xe9\x01\xd2q\xfb\xbcxd\xc3\xcfs\x18\xe8\x9cn\x97\xcaI\xe2R?\x8dT\xc6F\xddG\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x82\xc8\xedx\x0f\xc8\xde\x13\xaa\xc8\x1aS\x93\x80,\xac\x9b0\xbd4\xf4\xb1\xaa\x91\x95\x0e3!\t^\xd1\xdc\x06\t\xcf\x05\xb8\xb2\x9c\a\x00\x00\x00\x00\x00\x00\x00hm\x0eM\x0e5O\xfb\xec\xf9\xb6\xcbV\xdf7\xda\xady3\x93\xcd\xf9m`\xc34\xd7\xde\xe9\x9dX\xbb\x98\xec\x8f\xba\xe8\x85\t\xab\xe3/\xd4B9\xab\xb4\xcc\xf6Y\xf5\\v\xc2\x88\xae\x1d\x12\xb8\xae\xf6\x89\xf1\x9c9\xd9\xcd\xd8\xa2I\x96\x91\x85\xb3\xf2)\xa4\x8e\xf3\x016]\av*\x19g\xeb2A\xf4\x97\x96\xf3\xf6\xce\xb2\x8f\xd1\x830qPHmVA\xc3\xdf\xc8L%\xba\xa2\xb3q,\xb8%\x12g\xe7\x01Y\x89Om\xd8\xf2\x93\xe8\xcdD\xea5\xca\x1cR\xf1\xc1e\xb69\x1dw\x94\x05\xfa\xbf\xaf\x83\\)(\xc6\x12\x82\xa1\f\xfe\xe5#\xc6\x94\x13\x9d\x9b\x15\x8c\x8a\xc9\xc2\x06\x8d\xea\xe9V:\x86a\xce\xf5\xdf\xb8qIi\xccr\x7fR\x13\x99\x96\xdd/W[\n\xf9\xcc\x01?\']6Q\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') fsetxattr(r0, &(0x7f0000000040)=@known='user.syz\x00', 0x0, 0x0, 0x3) 05:37:09 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/route\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/204, 0xcc}, {&(0x7f0000000180)=""/125, 0x7d}], 0x2, 0x0) 05:37:09 executing program 2: sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) gettid() ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000000)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') 05:37:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f7fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:37:09 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='/exe\x00\xe1\xff\xff\xff\x04\t\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\xa9\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xde\xe9\x01\xd2q\xfb\xbcxd\xc3\xcfs\x18\xe8\x9cn\x97\xcaI\xe2R?\x8dT\xc6F\xddG\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x82\xc8\xedx\x0f\xc8\xde\x13\xaa\xc8\x1aS\x93\x80,\xac\x9b0\xbd4\xf4\xb1\xaa\x91\x95\x0e3!\t^\xd1\xdc\x06\t\xcf\x05\xb8\xb2\x9c\a\x00\x00\x00\x00\x00\x00\x00hm\x0eM\x0e5O\xfb\xec\xf9\xb6\xcbV\xdf7\xda\xady3\x93\xcd\xf9m`\xc34\xd7\xde\xe9\x9dX\xbb\x98\xec\x8f\xba\xe8\x85\t\xab\xe3/\xd4B9\xab\xb4\xcc\xf6Y\xf5\\v\xc2\x88\xae\x1d\x12\xb8\xae\xf6\x89\xf1\x9c9\xd9\xcd\xd8\xa2I\x96\x91\x85\xb3\xf2)\xa4\x8e\xf3\x016]\av*\x19g\xeb2A\xf4\x97\x96\xf3\xf6\xce\xb2\x8f\xd1\x830qPHmVA\xc3\xdf\xc8L%\xba\xa2\xb3q,\xb8%\x12g\xe7\x01Y\x89Om\xd8\xf2\x93\xe8\xcdD\xea5\xca\x1cR\xf1\xc1e\xb69\x1dw\x94\x05\xfa\xbf\xaf\x83\\)(\xc6\x12\x82\xa1\f\xfe\xe5#\xc6\x94\x13\x9d\x9b\x15\x8c\x8a\xc9\xc2\x06\x8d\xea\xe9V:\x86a\xce\xf5\xdf\xb8qIi\xccr\x7fR\x13\x99\x96\xdd/W[\n\xf9\xcc\x01?\']6Q\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') fsetxattr(r0, &(0x7f0000000040)=@known='user.syz\x00', 0x0, 0x0, 0x3) 05:37:09 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x40001, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3}) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0) fadvise64(0xffffffffffffffff, 0x25, 0x6, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) 05:37:09 executing program 1: 05:37:09 executing program 0: 05:37:09 executing program 4: fsetxattr(0xffffffffffffffff, &(0x7f0000000040)=@known='user.syz\x00', 0x0, 0x0, 0x3) 05:37:10 executing program 1: 05:37:10 executing program 0: 05:37:10 executing program 1: 05:37:10 executing program 4: fsetxattr(0xffffffffffffffff, &(0x7f0000000040)=@known='user.syz\x00', 0x0, 0x0, 0x3) 05:37:10 executing program 0: 05:37:10 executing program 2: sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) gettid() socketpair(0x0, 0x0, 0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000000)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') 05:37:10 executing program 1: 05:37:10 executing program 0: 05:37:10 executing program 4: fsetxattr(0xffffffffffffffff, &(0x7f0000000040)=@known='user.syz\x00', 0x0, 0x0, 0x3) 05:37:10 executing program 3: 05:37:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f7fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:37:11 executing program 1: 05:37:11 executing program 0: 05:37:11 executing program 3: 05:37:11 executing program 4: r0 = syz_open_procfs(0x0, 0x0) fsetxattr(r0, &(0x7f0000000040)=@known='user.syz\x00', 0x0, 0x0, 0x3) 05:37:11 executing program 1: ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 05:37:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000440), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x5, 0xa0, 0x0, {0x0, 0x7530}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "b6dfd9bade03d4f6"}}, 0x48}}, 0x0) 05:37:11 executing program 2: sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000000)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') 05:37:11 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 05:37:11 executing program 4: r0 = syz_open_procfs(0x0, 0x0) fsetxattr(r0, &(0x7f0000000040)=@known='user.syz\x00', 0x0, 0x0, 0x3) 05:37:11 executing program 5: ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) recvmmsg(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, 0x0, 0x23d) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0x0, "daf2c82ef0a4a7fc37bd440c2ea6593f9e24d66405bb48bcfa18288ee8607032d55e3c40da1ab81fef5b37f7d17e608c345d496f6975ffe9d2166bb2e38910798fc7454ae92070dbaa7e5e92da221017"}, 0xd8) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) socketpair(0x0, 0x0, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x53c) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[@ANYPTR], 0x3) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000180)={0x1, 0x8}, 0x8) close(r0) 05:37:11 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 05:37:11 executing program 4: r0 = syz_open_procfs(0x0, 0x0) fsetxattr(r0, &(0x7f0000000040)=@known='user.syz\x00', 0x0, 0x0, 0x3) 05:37:11 executing program 4: syz_open_procfs(0x0, &(0x7f00000002c0)='/exe\x00\xe1\xff\xff\xff\x04\t\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\xa9\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xde\xe9\x01\xd2q\xfb\xbcxd\xc3\xcfs\x18\xe8\x9cn\x97\xcaI\xe2R?\x8dT\xc6F\xddG\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x82\xc8\xedx\x0f\xc8\xde\x13\xaa\xc8\x1aS\x93\x80,\xac\x9b0\xbd4\xf4\xb1\xaa\x91\x95\x0e3!\t^\xd1\xdc\x06\t\xcf\x05\xb8\xb2\x9c\a\x00\x00\x00\x00\x00\x00\x00hm\x0eM\x0e5O\xfb\xec\xf9\xb6\xcbV\xdf7\xda\xady3\x93\xcd\xf9m`\xc34\xd7\xde\xe9\x9dX\xbb\x98\xec\x8f\xba\xe8\x85\t\xab\xe3/\xd4B9\xab\xb4\xcc\xf6Y\xf5\\v\xc2\x88\xae\x1d\x12\xb8\xae\xf6\x89\xf1\x9c9\xd9\xcd\xd8\xa2I\x96\x91\x85\xb3\xf2)\xa4\x8e\xf3\x016]\av*\x19g\xeb2A\xf4\x97\x96\xf3\xf6\xce\xb2\x8f\xd1\x830qPHmVA\xc3\xdf\xc8L%\xba\xa2\xb3q,\xb8%\x12g\xe7\x01Y\x89Om\xd8\xf2\x93\xe8\xcdD\xea5\xca\x1cR\xf1\xc1e\xb69\x1dw\x94\x05\xfa\xbf\xaf\x83\\)(\xc6\x12\x82\xa1\f\xfe\xe5#\xc6\x94\x13\x9d\x9b\x15\x8c\x8a\xc9\xc2\x06\x8d\xea\xe9V:\x86a\xce\xf5\xdf\xb8qIi\xccr\x7fR\x13\x99\x96\xdd/W[\n\xf9\xcc\x01?\']6Q\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') fsetxattr(0xffffffffffffffff, &(0x7f0000000040)=@known='user.syz\x00', 0x0, 0x0, 0x3) 05:37:11 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r0, &(0x7f0000000e80)="d763ec98de31f5dc47bd7ae5eeceba2e977e432f103b988c19d71150515b1e85734b186237ec9b9430fec0a3117d1440a9c30c12723d46fc4454123028fb5730ac9eb53022e5108d5e6f8fa861b991fcb0123281d4150b0506e8f00c4590b571e43dc126ea669e8e4e2c88f4b8cf4b4540dd7d1bb2981a7fb052afed9c842be23349319c9ef8d893fd656f968ea7e389dc9d942f7a88e123a00f0a215c4281e732e613eeab652fcd162b62bc2d6707625c5d46cefdefc69190f2c3cc9560781c21591b8df9c0887f4c6efd4bc0dba9d990422bc99da74205708160bfaab1b0b1ec814cfec3af29c8f6506c540115c1871c255da471697e83f03269ec8abb0867a224d1045da148a79669e03208672919fc140aa8c4ff0d3e642be95dcec333a9a2fc051f192ded8fcb9b911f77809a7c1374c036c89cb883ec019971f8d6896625162f5aeaa210cf6fd311181bf817fed23908a4615bcba8690fcceec8f92eb500be5c40f62ff070e58c6c6a99f4cf26241e3314a04363d7ba4163ea381a7b3bf8a76fdf359aacbbe058673cc882f08b3343c85d1f9914f81ef6bbaac8ef5f8326f97836f2f3269de8a2371bd9da4f6405b865f1c831508d58d40793be64cc2bf2e6dbd7bcf9d9f71dbfd6a5e294ef555d5297ab5d297a35a1753231c491d74e66a660412c84510e4cdb6e0c966ad63645c6ecafb4c924c922e36dce70c3fc159f5d11bdca4ac8a3cb76c3b616f34457e4ef4686126c00a9aaff6fe93c211c6000dc1d831f1c95a052749318b9c03bc0df7cd8a27cdf974b263843ec7c273b185b2509a9ec0ea1510a0b1f577f6f1ee45445f18187e8284b6eecd6e72efe7aef62bfd2e6d556371365e3f4babc8228c53343ed6c7c8fbb0a48f6ddbdc6b87943723d806b003cd793d67ae575674c5a24fe04b9e11c7c97f10ff38890381fb39d2ae974ea4230267367ae9f1c6359ec1096587b4d4bfdf92c86d8ae7dab8f4b33a1c7de4f5766bf9fb9e0c9bf630aaa0c096f018e70d779894accac73290d77229f8fee36a435bc779a100bc0d9a81bb4ebfbd6dac90da7f21e56fccb4e1851081c58b59714e3973af585a09b3578255873e62b0fac91db58968f4358178f1066b1ff7c3f479beb4c18a74b2fc4e6fbaca32ba6bb2a62210521b3343dca6a7127422c7b9c52a6a88d9b938c44013dae573db8c97b136b92928473f8aa1287d7c009254a4f23cf90beb54e1edf4e581876046c6897e6e3959c3e4e41c37ef02bcbc23863079a691e86a6d916543d60348cb833734908b8c0c4956fecdd4cf1b3803b2e5fa3842d4b07c4210ca4884f1e86d7328ed5450ed89082339c6716910eeccef299717d3c6edfb9f24348717bb57052d5db7f93ba3e79e01dcb01d9de45a2b4794f37291d925ae2b20974f61a99ab6667ec0ecfb82ddb6e55bad4b0392c41ad6431c8ceefab8f945671d6a59e7c57c1814a7dc86470ef0ffc185fff02a3173f4ebde8098688f8176d3425ed07e46eb849abd969c1d08cc14bd910c19b346253036cd33f7c716de190bfcaa8a0a0b7ee2edb2f667670ca700961fd07fd534eb44f7694c5db0f5e09472a0e9e57df", 0x46f, 0x0, 0x0, 0x0) 05:37:12 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)={0x2, 0xd, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0xffff0020, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x40}}, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="02970000020700000000000000000000"], 0x10}}, 0x0) 05:37:12 executing program 4: syz_open_procfs(0x0, &(0x7f00000002c0)='/exe\x00\xe1\xff\xff\xff\x04\t\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\xa9\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xde\xe9\x01\xd2q\xfb\xbcxd\xc3\xcfs\x18\xe8\x9cn\x97\xcaI\xe2R?\x8dT\xc6F\xddG\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x82\xc8\xedx\x0f\xc8\xde\x13\xaa\xc8\x1aS\x93\x80,\xac\x9b0\xbd4\xf4\xb1\xaa\x91\x95\x0e3!\t^\xd1\xdc\x06\t\xcf\x05\xb8\xb2\x9c\a\x00\x00\x00\x00\x00\x00\x00hm\x0eM\x0e5O\xfb\xec\xf9\xb6\xcbV\xdf7\xda\xady3\x93\xcd\xf9m`\xc34\xd7\xde\xe9\x9dX\xbb\x98\xec\x8f\xba\xe8\x85\t\xab\xe3/\xd4B9\xab\xb4\xcc\xf6Y\xf5\\v\xc2\x88\xae\x1d\x12\xb8\xae\xf6\x89\xf1\x9c9\xd9\xcd\xd8\xa2I\x96\x91\x85\xb3\xf2)\xa4\x8e\xf3\x016]\av*\x19g\xeb2A\xf4\x97\x96\xf3\xf6\xce\xb2\x8f\xd1\x830qPHmVA\xc3\xdf\xc8L%\xba\xa2\xb3q,\xb8%\x12g\xe7\x01Y\x89Om\xd8\xf2\x93\xe8\xcdD\xea5\xca\x1cR\xf1\xc1e\xb69\x1dw\x94\x05\xfa\xbf\xaf\x83\\)(\xc6\x12\x82\xa1\f\xfe\xe5#\xc6\x94\x13\x9d\x9b\x15\x8c\x8a\xc9\xc2\x06\x8d\xea\xe9V:\x86a\xce\xf5\xdf\xb8qIi\xccr\x7fR\x13\x99\x96\xdd/W[\n\xf9\xcc\x01?\']6Q\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') fsetxattr(0xffffffffffffffff, &(0x7f0000000040)=@known='user.syz\x00', 0x0, 0x0, 0x3) 05:37:12 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000000080)=ANY=[@ANYBLOB="b700000005ed0050bfa30000000000000703000028feffff7a0af0ffe8ffffff71a4f0ff00000000b7060000000000012d400500000000005504000001ed00003c060000000000006f460000000000006b0a00fe000000008500000007000000c7000000000000009500000000000000"], 0x0}, 0x48) ioctl$FICLONE(r1, 0x40049409, r0) 05:37:12 executing program 1: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0e00a047a3b96b0000000000040046f14c93aa9e622f66dbf83bd51f90f6f2ff8d0b0374ae51d516b30440d4ce04f9b25b52a9925555abb2cf"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x220000002b) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 05:37:12 executing program 2: sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000000)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') 05:37:12 executing program 4: syz_open_procfs(0x0, &(0x7f00000002c0)='/exe\x00\xe1\xff\xff\xff\x04\t\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\xa9\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xde\xe9\x01\xd2q\xfb\xbcxd\xc3\xcfs\x18\xe8\x9cn\x97\xcaI\xe2R?\x8dT\xc6F\xddG\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x82\xc8\xedx\x0f\xc8\xde\x13\xaa\xc8\x1aS\x93\x80,\xac\x9b0\xbd4\xf4\xb1\xaa\x91\x95\x0e3!\t^\xd1\xdc\x06\t\xcf\x05\xb8\xb2\x9c\a\x00\x00\x00\x00\x00\x00\x00hm\x0eM\x0e5O\xfb\xec\xf9\xb6\xcbV\xdf7\xda\xady3\x93\xcd\xf9m`\xc34\xd7\xde\xe9\x9dX\xbb\x98\xec\x8f\xba\xe8\x85\t\xab\xe3/\xd4B9\xab\xb4\xcc\xf6Y\xf5\\v\xc2\x88\xae\x1d\x12\xb8\xae\xf6\x89\xf1\x9c9\xd9\xcd\xd8\xa2I\x96\x91\x85\xb3\xf2)\xa4\x8e\xf3\x016]\av*\x19g\xeb2A\xf4\x97\x96\xf3\xf6\xce\xb2\x8f\xd1\x830qPHmVA\xc3\xdf\xc8L%\xba\xa2\xb3q,\xb8%\x12g\xe7\x01Y\x89Om\xd8\xf2\x93\xe8\xcdD\xea5\xca\x1cR\xf1\xc1e\xb69\x1dw\x94\x05\xfa\xbf\xaf\x83\\)(\xc6\x12\x82\xa1\f\xfe\xe5#\xc6\x94\x13\x9d\x9b\x15\x8c\x8a\xc9\xc2\x06\x8d\xea\xe9V:\x86a\xce\xf5\xdf\xb8qIi\xccr\x7fR\x13\x99\x96\xdd/W[\n\xf9\xcc\x01?\']6Q\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') fsetxattr(0xffffffffffffffff, &(0x7f0000000040)=@known='user.syz\x00', 0x0, 0x0, 0x3) 05:37:12 executing program 5: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="390040ef7500002e0000002bebc0c35595920681000000bd10c3c83640caee40ffe93e1dc5aa2905484ac7b67f0d03362ea297dc458a7b2da9"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x1f, r0, 0x0, 0x0) 05:37:12 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000040)=""/148, 0x94}], 0x119d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') flock(r0, 0xffffffffffffdffe) preadv(r1, &(0x7f0000000480), 0x10000000000001cf, 0x0) [ 359.568428] ptrace attach of "/root/syz-executor1"[14410] was attempted by "/root/syz-executor1"[14413] 05:37:12 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 05:37:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000480)={0x0, 0x1dc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r1, 0xa23, 0x0, 0x0, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x1}}}, 0x24}}, 0x0) [ 359.768450] Started in network mode [ 359.772296] Own node identity 1, cluster identity 4711 [ 359.777600] 32-bit node address hash set to 1 05:37:12 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='/exe\x00\xe1\xff\xff\xff\x04\t\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\xa9\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xde\xe9\x01\xd2q\xfb\xbcxd\xc3\xcfs\x18\xe8\x9cn\x97\xcaI\xe2R?\x8dT\xc6F\xddG\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x82\xc8\xedx\x0f\xc8\xde\x13\xaa\xc8\x1aS\x93\x80,\xac\x9b0\xbd4\xf4\xb1\xaa\x91\x95\x0e3!\t^\xd1\xdc\x06\t\xcf\x05\xb8\xb2\x9c\a\x00\x00\x00\x00\x00\x00\x00hm\x0eM\x0e5O\xfb\xec\xf9\xb6\xcbV\xdf7\xda\xady3\x93\xcd\xf9m`\xc34\xd7\xde\xe9\x9dX\xbb\x98\xec\x8f\xba\xe8\x85\t\xab\xe3/\xd4B9\xab\xb4\xcc\xf6Y\xf5\\v\xc2\x88\xae\x1d\x12\xb8\xae\xf6\x89\xf1\x9c9\xd9\xcd\xd8\xa2I\x96\x91\x85\xb3\xf2)\xa4\x8e\xf3\x016]\av*\x19g\xeb2A\xf4\x97\x96\xf3\xf6\xce\xb2\x8f\xd1\x830qPHmVA\xc3\xdf\xc8L%\xba\xa2\xb3q,\xb8%\x12g\xe7\x01Y\x89Om\xd8\xf2\x93\xe8\xcdD\xea5\xca\x1cR\xf1\xc1e\xb69\x1dw\x94\x05\xfa\xbf\xaf\x83\\)(\xc6\x12\x82\xa1\f\xfe\xe5#\xc6\x94\x13\x9d\x9b\x15\x8c\x8a\xc9\xc2\x06\x8d\xea\xe9V:\x86a\xce\xf5\xdf\xb8qIi\xccr\x7fR\x13\x99\x96\xdd/W[\n\xf9\xcc\x01?\']6Q\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') fsetxattr(r0, 0x0, 0x0, 0x0, 0x3) 05:37:12 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x6102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = dup(r0) ioctl$TIOCMBIS(r1, 0x5416, 0x0) 05:37:12 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x201000000000013, &(0x7f00000003c0)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) syz_execute_func(&(0x7f0000000040)="3666440f50f564ff0941c3c4e2c9975842c0c27d794e0066d742421be2e3e30f1110c442019dccc4c105d0da3e470f01d4") clone(0x2002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000380)=[@window={0x3, 0x0, 0x800}, @mss], 0x2037) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, 0x0, 0x0) 05:37:13 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='/exe\x00\xe1\xff\xff\xff\x04\t\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\xa9\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xde\xe9\x01\xd2q\xfb\xbcxd\xc3\xcfs\x18\xe8\x9cn\x97\xcaI\xe2R?\x8dT\xc6F\xddG\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x82\xc8\xedx\x0f\xc8\xde\x13\xaa\xc8\x1aS\x93\x80,\xac\x9b0\xbd4\xf4\xb1\xaa\x91\x95\x0e3!\t^\xd1\xdc\x06\t\xcf\x05\xb8\xb2\x9c\a\x00\x00\x00\x00\x00\x00\x00hm\x0eM\x0e5O\xfb\xec\xf9\xb6\xcbV\xdf7\xda\xady3\x93\xcd\xf9m`\xc34\xd7\xde\xe9\x9dX\xbb\x98\xec\x8f\xba\xe8\x85\t\xab\xe3/\xd4B9\xab\xb4\xcc\xf6Y\xf5\\v\xc2\x88\xae\x1d\x12\xb8\xae\xf6\x89\xf1\x9c9\xd9\xcd\xd8\xa2I\x96\x91\x85\xb3\xf2)\xa4\x8e\xf3\x016]\av*\x19g\xeb2A\xf4\x97\x96\xf3\xf6\xce\xb2\x8f\xd1\x830qPHmVA\xc3\xdf\xc8L%\xba\xa2\xb3q,\xb8%\x12g\xe7\x01Y\x89Om\xd8\xf2\x93\xe8\xcdD\xea5\xca\x1cR\xf1\xc1e\xb69\x1dw\x94\x05\xfa\xbf\xaf\x83\\)(\xc6\x12\x82\xa1\f\xfe\xe5#\xc6\x94\x13\x9d\x9b\x15\x8c\x8a\xc9\xc2\x06\x8d\xea\xe9V:\x86a\xce\xf5\xdf\xb8qIi\xccr\x7fR\x13\x99\x96\xdd/W[\n\xf9\xcc\x01?\']6Q\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') fsetxattr(r0, 0x0, 0x0, 0x0, 0x3) 05:37:13 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='/exe\x00\xe1\xff\xff\xff\x04\t\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\xa9\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xde\xe9\x01\xd2q\xfb\xbcxd\xc3\xcfs\x18\xe8\x9cn\x97\xcaI\xe2R?\x8dT\xc6F\xddG\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x82\xc8\xedx\x0f\xc8\xde\x13\xaa\xc8\x1aS\x93\x80,\xac\x9b0\xbd4\xf4\xb1\xaa\x91\x95\x0e3!\t^\xd1\xdc\x06\t\xcf\x05\xb8\xb2\x9c\a\x00\x00\x00\x00\x00\x00\x00hm\x0eM\x0e5O\xfb\xec\xf9\xb6\xcbV\xdf7\xda\xady3\x93\xcd\xf9m`\xc34\xd7\xde\xe9\x9dX\xbb\x98\xec\x8f\xba\xe8\x85\t\xab\xe3/\xd4B9\xab\xb4\xcc\xf6Y\xf5\\v\xc2\x88\xae\x1d\x12\xb8\xae\xf6\x89\xf1\x9c9\xd9\xcd\xd8\xa2I\x96\x91\x85\xb3\xf2)\xa4\x8e\xf3\x016]\av*\x19g\xeb2A\xf4\x97\x96\xf3\xf6\xce\xb2\x8f\xd1\x830qPHmVA\xc3\xdf\xc8L%\xba\xa2\xb3q,\xb8%\x12g\xe7\x01Y\x89Om\xd8\xf2\x93\xe8\xcdD\xea5\xca\x1cR\xf1\xc1e\xb69\x1dw\x94\x05\xfa\xbf\xaf\x83\\)(\xc6\x12\x82\xa1\f\xfe\xe5#\xc6\x94\x13\x9d\x9b\x15\x8c\x8a\xc9\xc2\x06\x8d\xea\xe9V:\x86a\xce\xf5\xdf\xb8qIi\xccr\x7fR\x13\x99\x96\xdd/W[\n\xf9\xcc\x01?\']6Q\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') fsetxattr(r0, 0x0, 0x0, 0x0, 0x3) 05:37:13 executing program 5: syz_execute_func(&(0x7f0000000880)="3666440f50f564ff0941c3c4e2c9975842c0c27d794e0066420fe2e33e0f1110c442019dccc4c105d0da3e470f01d4") clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x1042, 0x0) execve(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109) creat(&(0x7f0000000100)='./file1\x00', 0x8) dup2(r0, r1) execve(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0\x00', 0x841, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) sched_yield() 05:37:13 executing program 2: sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000000)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') 05:37:13 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='/exe\x00\xe1\xff\xff\xff\x04\t\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\xa9\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xde\xe9\x01\xd2q\xfb\xbcxd\xc3\xcfs\x18\xe8\x9cn\x97\xcaI\xe2R?\x8dT\xc6F\xddG\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x82\xc8\xedx\x0f\xc8\xde\x13\xaa\xc8\x1aS\x93\x80,\xac\x9b0\xbd4\xf4\xb1\xaa\x91\x95\x0e3!\t^\xd1\xdc\x06\t\xcf\x05\xb8\xb2\x9c\a\x00\x00\x00\x00\x00\x00\x00hm\x0eM\x0e5O\xfb\xec\xf9\xb6\xcbV\xdf7\xda\xady3\x93\xcd\xf9m`\xc34\xd7\xde\xe9\x9dX\xbb\x98\xec\x8f\xba\xe8\x85\t\xab\xe3/\xd4B9\xab\xb4\xcc\xf6Y\xf5\\v\xc2\x88\xae\x1d\x12\xb8\xae\xf6\x89\xf1\x9c9\xd9\xcd\xd8\xa2I\x96\x91\x85\xb3\xf2)\xa4\x8e\xf3\x016]\av*\x19g\xeb2A\xf4\x97\x96\xf3\xf6\xce\xb2\x8f\xd1\x830qPHmVA\xc3\xdf\xc8L%\xba\xa2\xb3q,\xb8%\x12g\xe7\x01Y\x89Om\xd8\xf2\x93\xe8\xcdD\xea5\xca\x1cR\xf1\xc1e\xb69\x1dw\x94\x05\xfa\xbf\xaf\x83\\)(\xc6\x12\x82\xa1\f\xfe\xe5#\xc6\x94\x13\x9d\x9b\x15\x8c\x8a\xc9\xc2\x06\x8d\xea\xe9V:\x86a\xce\xf5\xdf\xb8qIi\xccr\x7fR\x13\x99\x96\xdd/W[\n\xf9\xcc\x01?\']6Q\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') fsetxattr(r0, &(0x7f0000000040)=@known='user.syz\x00', 0x0, 0x0, 0x0) 05:37:13 executing program 1: syz_execute_func(&(0x7f00000002c0)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) clone(0x3102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = dup2(r2, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x131f64) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, 0x0, &(0x7f0000000080)) 05:37:13 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x201000000000013, &(0x7f00000003c0)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000380)=[@window, @mss], 0x2037) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, 0x0, 0x0) 05:37:13 executing program 1: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) close(r0) 05:37:13 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='/exe\x00\xe1\xff\xff\xff\x04\t\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\xa9\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xde\xe9\x01\xd2q\xfb\xbcxd\xc3\xcfs\x18\xe8\x9cn\x97\xcaI\xe2R?\x8dT\xc6F\xddG\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x82\xc8\xedx\x0f\xc8\xde\x13\xaa\xc8\x1aS\x93\x80,\xac\x9b0\xbd4\xf4\xb1\xaa\x91\x95\x0e3!\t^\xd1\xdc\x06\t\xcf\x05\xb8\xb2\x9c\a\x00\x00\x00\x00\x00\x00\x00hm\x0eM\x0e5O\xfb\xec\xf9\xb6\xcbV\xdf7\xda\xady3\x93\xcd\xf9m`\xc34\xd7\xde\xe9\x9dX\xbb\x98\xec\x8f\xba\xe8\x85\t\xab\xe3/\xd4B9\xab\xb4\xcc\xf6Y\xf5\\v\xc2\x88\xae\x1d\x12\xb8\xae\xf6\x89\xf1\x9c9\xd9\xcd\xd8\xa2I\x96\x91\x85\xb3\xf2)\xa4\x8e\xf3\x016]\av*\x19g\xeb2A\xf4\x97\x96\xf3\xf6\xce\xb2\x8f\xd1\x830qPHmVA\xc3\xdf\xc8L%\xba\xa2\xb3q,\xb8%\x12g\xe7\x01Y\x89Om\xd8\xf2\x93\xe8\xcdD\xea5\xca\x1cR\xf1\xc1e\xb69\x1dw\x94\x05\xfa\xbf\xaf\x83\\)(\xc6\x12\x82\xa1\f\xfe\xe5#\xc6\x94\x13\x9d\x9b\x15\x8c\x8a\xc9\xc2\x06\x8d\xea\xe9V:\x86a\xce\xf5\xdf\xb8qIi\xccr\x7fR\x13\x99\x96\xdd/W[\n\xf9\xcc\x01?\']6Q\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') fsetxattr(r0, &(0x7f0000000040)=@known='user.syz\x00', 0x0, 0x0, 0x0) 05:37:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x8, 0x11, [@generic="e2"]}]}, 0x1c}, 0x1, 0x300}, 0x0) 05:37:16 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='uid_map\x00') write$P9_RSYMLINK(r0, 0x0, 0x0) 05:37:16 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='/exe\x00\xe1\xff\xff\xff\x04\t\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\xa9\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xde\xe9\x01\xd2q\xfb\xbcxd\xc3\xcfs\x18\xe8\x9cn\x97\xcaI\xe2R?\x8dT\xc6F\xddG\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x82\xc8\xedx\x0f\xc8\xde\x13\xaa\xc8\x1aS\x93\x80,\xac\x9b0\xbd4\xf4\xb1\xaa\x91\x95\x0e3!\t^\xd1\xdc\x06\t\xcf\x05\xb8\xb2\x9c\a\x00\x00\x00\x00\x00\x00\x00hm\x0eM\x0e5O\xfb\xec\xf9\xb6\xcbV\xdf7\xda\xady3\x93\xcd\xf9m`\xc34\xd7\xde\xe9\x9dX\xbb\x98\xec\x8f\xba\xe8\x85\t\xab\xe3/\xd4B9\xab\xb4\xcc\xf6Y\xf5\\v\xc2\x88\xae\x1d\x12\xb8\xae\xf6\x89\xf1\x9c9\xd9\xcd\xd8\xa2I\x96\x91\x85\xb3\xf2)\xa4\x8e\xf3\x016]\av*\x19g\xeb2A\xf4\x97\x96\xf3\xf6\xce\xb2\x8f\xd1\x830qPHmVA\xc3\xdf\xc8L%\xba\xa2\xb3q,\xb8%\x12g\xe7\x01Y\x89Om\xd8\xf2\x93\xe8\xcdD\xea5\xca\x1cR\xf1\xc1e\xb69\x1dw\x94\x05\xfa\xbf\xaf\x83\\)(\xc6\x12\x82\xa1\f\xfe\xe5#\xc6\x94\x13\x9d\x9b\x15\x8c\x8a\xc9\xc2\x06\x8d\xea\xe9V:\x86a\xce\xf5\xdf\xb8qIi\xccr\x7fR\x13\x99\x96\xdd/W[\n\xf9\xcc\x01?\']6Q\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') fsetxattr(r0, &(0x7f0000000040)=@known='user.syz\x00', 0x0, 0x0, 0x0) 05:37:16 executing program 1: r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x800) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x10, 0x11, [@generic="e2abb4ec7645192056d52f"]}]}, 0x24}, 0x1, 0x300}, 0x0) 05:37:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x8, 0x11, [@generic="e2abb4"]}]}, 0x1c}, 0x1, 0x300}, 0x0) 05:37:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x8, 0x11, [@generic="e2"]}]}, 0x1c}, 0x1, 0x300}, 0x0) 05:37:16 executing program 2: sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000000)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') 05:37:16 executing program 4: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x1042, 0x0) execve(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109) creat(&(0x7f0000000100)='./file1\x00', 0x8) dup2(r0, r1) execve(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0\x00', 0x841, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) sched_yield() 05:37:16 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x6) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = gettid() write$P9_RCREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKBSZGET(r1, 0x80081270, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x8001004000000016) 05:37:16 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) getgid() listen(r1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r2 = accept(r1, 0x0, 0x0) connect$unix(r0, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) writev(r2, 0x0, 0xfffffffffffffeda) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x0, 0x0, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x78) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) syncfs(0xffffffffffffffff) [ 364.054204] sysfs: cannot create duplicate filename '/class/ieee80211/â«´ìvE VÕ!' [ 364.062185] CPU: 0 PID: 14521 Comm: syz-executor1 Not tainted 5.0.0-rc1+ #7 [ 364.069327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 364.078718] Call Trace: [ 364.081369] dump_stack+0x173/0x1d0 [ 364.085058] sysfs_warn_dup+0x1c4/0x1f0 [ 364.089113] sysfs_do_create_link_sd+0x293/0x360 [ 364.093931] sysfs_create_link+0x125/0x190 [ 364.098212] device_add+0x1730/0x2ed0 [ 364.102094] wiphy_register+0x2b4b/0x3900 [ 364.106338] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 364.111603] ieee80211_register_hw+0x3ac2/0x5ca0 [ 364.116419] ? ieee80211_register_hw+0x1041/0x5ca0 [ 364.121417] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 364.126926] ? tasklet_hrtimer_init+0x114/0x1b0 [ 364.131640] ? hw_scan_work+0xc40/0xc40 [ 364.135670] mac80211_hwsim_new_radio+0x3267/0x4f50 [ 364.140754] hwsim_new_radio_nl+0x1444/0x1990 [ 364.145322] ? hwsim_tx_info_frame_received_nl+0x1220/0x1220 [ 364.151170] genl_rcv_msg+0x185f/0x1a60 [ 364.155244] netlink_rcv_skb+0x431/0x620 [ 364.159352] ? genl_unbind+0x390/0x390 [ 364.163298] genl_rcv+0x63/0x80 [ 364.166625] netlink_unicast+0xf3e/0x1020 [ 364.170809] netlink_sendmsg+0x127f/0x1300 [ 364.175118] ___sys_sendmsg+0xdb9/0x11b0 [ 364.179240] ? netlink_getsockopt+0x1460/0x1460 [ 364.184058] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 364.189315] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 364.194728] ? __fget_light+0x6e1/0x750 [ 364.198764] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 364.204013] __se_sys_sendmsg+0x305/0x460 [ 364.208243] __x64_sys_sendmsg+0x4a/0x70 [ 364.212356] do_syscall_64+0xbc/0xf0 [ 364.216136] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 364.221360] RIP: 0033:0x457ec9 [ 364.224603] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 364.243549] RSP: 002b:00007f17c2a42c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 05:37:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x8, 0x11, [@generic="e2abb4"]}]}, 0x1c}, 0x1, 0x300}, 0x0) 05:37:17 executing program 2: sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000000)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') [ 364.251313] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457ec9 [ 364.258625] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 364.265943] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 364.273261] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f17c2a436d4 [ 364.280573] R13: 00000000004c53fb R14: 00000000004d9038 R15: 00000000ffffffff 05:37:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x8, 0x11, [@generic="e2"]}]}, 0x1c}, 0x1, 0x300}, 0x0) 05:37:17 executing program 4: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000140)=@un=@abs={0x1}, 0x4b, &(0x7f0000000480), 0x0, &(0x7f0000000500)}, 0x0) 05:37:17 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x800003e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0x4, 0x4, 0x9}, 0x2c) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x30, &(0x7f0000000280)=r0, 0x706) 05:37:18 executing program 1: r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x800) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x10, 0x11, [@generic="e2abb4ec7645192056d52f"]}]}, 0x24}, 0x1, 0x300}, 0x0) 05:37:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x8, 0x11, [@generic="e2"]}]}, 0x1c}, 0x1, 0x300}, 0x0) 05:37:18 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000022c0)={&(0x7f0000002300)=ANY=[@ANYBLOB="9feb01df18"], 0x0, 0x5}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000002300)=ANY=[], &(0x7f0000000100)=""/4096, 0x14e147, 0x1000, 0x1}, 0x20) 05:37:18 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x800003e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x29, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0x4, 0x4, 0x9}, 0x2c) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x30, &(0x7f0000000280), 0x706) 05:37:18 executing program 2: sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000000)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') [ 365.695274] sysfs: cannot create duplicate filename '/class/ieee80211/â«´ìvE VÕ!' [ 365.703125] CPU: 0 PID: 14580 Comm: syz-executor1 Not tainted 5.0.0-rc1+ #7 [ 365.710243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 365.719619] Call Trace: [ 365.722271] dump_stack+0x173/0x1d0 [ 365.725956] sysfs_warn_dup+0x1c4/0x1f0 [ 365.729984] sysfs_do_create_link_sd+0x293/0x360 [ 365.734804] sysfs_create_link+0x125/0x190 [ 365.739078] device_add+0x1730/0x2ed0 [ 365.742949] wiphy_register+0x2b4b/0x3900 [ 365.747176] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 365.752421] ieee80211_register_hw+0x3ac2/0x5ca0 [ 365.757237] ? ieee80211_register_hw+0x1041/0x5ca0 [ 365.762221] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 365.767716] ? tasklet_hrtimer_init+0x114/0x1b0 [ 365.772422] ? hw_scan_work+0xc40/0xc40 [ 365.776437] mac80211_hwsim_new_radio+0x3267/0x4f50 [ 365.781510] hwsim_new_radio_nl+0x1444/0x1990 [ 365.786076] ? hwsim_tx_info_frame_received_nl+0x1220/0x1220 [ 365.792264] genl_rcv_msg+0x185f/0x1a60 [ 365.796330] netlink_rcv_skb+0x431/0x620 [ 365.800431] ? genl_unbind+0x390/0x390 [ 365.804368] genl_rcv+0x63/0x80 [ 365.807686] netlink_unicast+0xf3e/0x1020 [ 365.811883] netlink_sendmsg+0x127f/0x1300 [ 365.816191] ___sys_sendmsg+0xdb9/0x11b0 [ 365.820299] ? netlink_getsockopt+0x1460/0x1460 [ 365.825022] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 365.830263] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 365.835675] ? __fget_light+0x6e1/0x750 [ 365.839703] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 365.844945] __se_sys_sendmsg+0x305/0x460 [ 365.849170] __x64_sys_sendmsg+0x4a/0x70 [ 365.853278] do_syscall_64+0xbc/0xf0 [ 365.857041] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 365.862263] RIP: 0033:0x457ec9 [ 365.865494] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 365.884432] RSP: 002b:00007f17c2a63c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 365.892184] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457ec9 [ 365.899492] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 365.906786] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 365.914083] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f17c2a646d4 [ 365.921390] R13: 00000000004c53fb R14: 00000000004d9038 R15: 00000000ffffffff 05:37:20 executing program 3: epoll_create1(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x1, r0) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000280), &(0x7f0000000240)=0x4) stat(&(0x7f0000002c40)='./file0\x00', 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) r3 = memfd_create(&(0x7f0000000100)='/dev/loop#\x00', 0x2) pwritev(r3, &(0x7f0000000480)=[{&(0x7f00000004c0)="2bd83b0010947db9141978d2d9c93f59a4f3ec7e1e3f098116", 0x19}], 0x1, 0x81806) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) unlinkat(r1, &(0x7f00000003c0)='./file0\x00', 0x200) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000005c0)={@remote}) keyctl$unlink(0x9, 0x0, 0x0) sendfile(r1, r2, &(0x7f0000000300), 0x2000006) r4 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f0000000000)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz'}, 0x0, 0x0, r4) dup2(r2, r1) inotify_rm_watch(0xffffffffffffffff, 0x0) 05:37:20 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000dc9ff0)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bc070") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='lo\x00', 0x10) r2 = accept(r0, &(0x7f0000001440)=@rc, &(0x7f00000014c0)=0x80) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000001540)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000001640)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)={0x68, r3, 0x200, 0x70bd25, 0x25dfdbfe, {{}, 0x0, 0x4107, 0x0, {0x4c, 0x18, {0x3f, @media='ib\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x8080) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f00000000c0)={0x2, 0x4e20}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='bridge_slave_1\x00', 0x10) sendto$inet(r0, &(0x7f0000000240), 0x13f698e4b9e296e3, 0x0, 0x0, 0xffffffffffffff06) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) mmap(&(0x7f0000000000/0xf9a000)=nil, 0xf9a000, 0x1, 0x32, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) 05:37:20 executing program 5: pipe(0x0) socket$inet(0x2b, 0x400000000009, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) 05:37:20 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) request_key(&(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000100)={'syz'}, 0x0, 0xfffffffffffffffb) 05:37:20 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000000)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') 05:37:20 executing program 1: r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x800) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x10, 0x11, [@generic="e2abb4ec7645192056d52f"]}]}, 0x24}, 0x1, 0x300}, 0x0) [ 367.626176] sysfs: cannot create duplicate filename '/class/ieee80211/â«´ìvE VÕ!' [ 367.634179] CPU: 1 PID: 14597 Comm: syz-executor1 Not tainted 5.0.0-rc1+ #7 [ 367.641320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 367.650702] Call Trace: [ 367.653364] dump_stack+0x173/0x1d0 [ 367.657056] sysfs_warn_dup+0x1c4/0x1f0 [ 367.661114] sysfs_do_create_link_sd+0x293/0x360 [ 367.665960] sysfs_create_link+0x125/0x190 [ 367.670251] device_add+0x1730/0x2ed0 [ 367.674134] wiphy_register+0x2b4b/0x3900 [ 367.678362] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 367.683613] ieee80211_register_hw+0x3ac2/0x5ca0 [ 367.688437] ? ieee80211_register_hw+0x1041/0x5ca0 [ 367.693439] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 367.698942] ? tasklet_hrtimer_init+0x114/0x1b0 [ 367.703658] ? hw_scan_work+0xc40/0xc40 [ 367.707683] mac80211_hwsim_new_radio+0x3267/0x4f50 [ 367.712780] hwsim_new_radio_nl+0x1444/0x1990 [ 367.717340] ? hwsim_tx_info_frame_received_nl+0x1220/0x1220 [ 367.723168] genl_rcv_msg+0x185f/0x1a60 [ 367.727199] netlink_rcv_skb+0x431/0x620 [ 367.731286] ? genl_unbind+0x390/0x390 [ 367.735201] genl_rcv+0x63/0x80 [ 367.738509] netlink_unicast+0xf3e/0x1020 [ 367.742687] netlink_sendmsg+0x127f/0x1300 [ 367.746963] ___sys_sendmsg+0xdb9/0x11b0 [ 367.751046] ? netlink_getsockopt+0x1460/0x1460 [ 367.755770] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 367.760985] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 367.766366] ? __fget_light+0x6e1/0x750 [ 367.770374] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 367.775589] __se_sys_sendmsg+0x305/0x460 [ 367.779783] __x64_sys_sendmsg+0x4a/0x70 [ 367.783870] do_syscall_64+0xbc/0xf0 [ 367.787612] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 367.792815] RIP: 0033:0x457ec9 [ 367.796028] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 367.814944] RSP: 002b:00007f17c2a63c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 367.822670] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457ec9 [ 367.830064] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 367.837352] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 367.844632] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f17c2a646d4 [ 367.851915] R13: 00000000004c53fb R14: 00000000004d9038 R15: 00000000ffffffff 05:37:21 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$inet(0x2, 0x8000000000001, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) connect$inet(r2, &(0x7f00000e5000)={0x2, 0x0, @loopback}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) dup2(r0, r2) tkill(r1, 0x1000000000016) 05:37:21 executing program 5: unshare(0x400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r0}, 0x2c) 05:37:21 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000014c0), 0x1000) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, 0x0) close(r0) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$FUSE_ATTR(r0, 0x0, 0x0) 05:37:21 executing program 1: r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x800) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x10, 0x11, [@generic="e2abb4ec7645192056d52f"]}]}, 0x24}, 0x1, 0x300}, 0x0) 05:37:21 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000180)="580000001400192340834b80043f679a0189668b", 0x14}], 0x1) write(r1, &(0x7f00000001c0)="e201d78db436032ff6", 0x9) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 05:37:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000480)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000001940)={"a523fb9656eb871ffcd7ffeb51d84e738a55eba841ae487e33cdd921e8a51ce6c924020f0ac3562dd8cdeb31deac16f46da4ac16ee8165bce439eddce671c5b0a1103ea3f86a43cbb78504f6f9c77c2f09dc27632ec6036ee52a87e321e707c0cfe15576c26d52d0334c8d4693e127b3a046a5ed7796c9c5017cfd58ec871ed76369846fea9ebfa2f7f96496abf4ef57ed1ecd930eb9e13396875f01e932804ffe8a34c8fbedd97cdfb3176ec59fbbfd20a6ff17795431c341a35eb0f5f703480a5211cc6a7e2084e4a9b6aedf60b7b8084b00ca2cbed255b4cc4679c967432fea5e95119f9635e94794aab6ef54f290677fa08d0ee2cc8eae468efd02417055d3f3ccc86b629dfb878c4d115c16c75fe352cffa93648cf49577256b5d2faf0634335c97ffff966ae90cbf81250df3613c25d2789c869c9cc95a6e9d364c4c684059c593f9950e66cf81cd9f36d73fade4f0cbb795010364d13ff32c12efd91d0ebb6533700945f2db6113a630bd521eec89a74c46e1733b72d6e4d2ccee3b40f99809a9a4fb5fc2d1c53e1366d455bcbe81893100ab56b2556b55c1a0c5787356b464c3bf7011488e55f587a6d4420d46d69a74ee5bbfbcb0d6cb00aae8c3dfd6dd2e9f76d7a542f20553207b668dce69f1b463ee9166e81bb109f461b8885f15c9e525d72260ccdbd69e3345612158114780b9409ea856cb724faa6ed27ba836b35c10e7c7d43f2fa34f98f16a00f31565e16a213eaf4a7f438c89733ebe6d16328b930fd942bc64d631dd1f2aa1cc2ccdaff2324076c83e1ba4d2a0e40e010c96b42e7a4a76cd7a89ef592b9b3030f62d9fbd565ee5908ab90b42620b61e5d1e08621a31d21003cd12a450461636472fa64a7e1b98778bfb482fb4b4da31b42ee98b10f9c0f4c085d08c37ee2e3a9e4a5aff72a0ab844fcbfa224842c85f6cdfd25829c44760e3859624f891df4824f7d17938ac2dee1412cf3083e1d5ee2d29b63267ccba535409da7bef05d3fa79a3ef037ee609e01ad345ee17f48b5e8510f767de35df4dfb856f7533ad88866c6b01fe345107ba7191a8809e2e014492acf9c4f35cad664198a65c55f884490f4b30b4526324be842c393f336f16bea2bf6c6b917fdb751e12ff689ab4ffa44625a8b2bc1de4e88682abe5ce9d1942792747681ad23c31046d825140987f19a9cf10323c3f50a20f35a6d1dd8ca6758296b4537a0da1a853011b777623c8774b3689897cf9264a7782470847f36a8093f04000000663438ab39d8a777fb3e10cb4a2402a939a98d387087c5ca5fd8fbc4d96ae698b5bb84a0a8484e2b85743e623a033eb5b1889ccfb4b95885bc69d4c1cb819b95e7923e557c9ec9ec10e94d1e1295fc2f256fa095036f6cfc04c414fc57fc72c120614a586089c93741e97a61c46600"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xfe2f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 368.510262] kvm: vcpu 0: requested 34784 ns lapic timer period limited to 200000 ns [ 368.563042] kvm: vcpu 0: requested 34784 ns lapic timer period limited to 200000 ns [ 368.578534] sysfs: cannot create duplicate filename '/class/ieee80211/â«´ìvE VÕ!' [ 368.586539] CPU: 1 PID: 14627 Comm: syz-executor1 Not tainted 5.0.0-rc1+ #7 [ 368.593678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 368.603071] Call Trace: [ 368.605727] dump_stack+0x173/0x1d0 [ 368.609418] sysfs_warn_dup+0x1c4/0x1f0 [ 368.613708] sysfs_do_create_link_sd+0x293/0x360 [ 368.618537] sysfs_create_link+0x125/0x190 [ 368.622825] device_add+0x1730/0x2ed0 [ 368.626706] wiphy_register+0x2b4b/0x3900 [ 368.630943] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 368.636189] ieee80211_register_hw+0x3ac2/0x5ca0 [ 368.641009] ? ieee80211_register_hw+0x1041/0x5ca0 [ 368.646020] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 368.651527] ? tasklet_hrtimer_init+0x114/0x1b0 [ 368.656224] ? hw_scan_work+0xc40/0xc40 [ 368.660219] mac80211_hwsim_new_radio+0x3267/0x4f50 [ 368.665274] hwsim_new_radio_nl+0x1444/0x1990 [ 368.669806] ? hwsim_tx_info_frame_received_nl+0x1220/0x1220 [ 368.675617] genl_rcv_msg+0x185f/0x1a60 [ 368.679655] netlink_rcv_skb+0x431/0x620 [ 368.683825] ? genl_unbind+0x390/0x390 [ 368.687737] genl_rcv+0x63/0x80 [ 368.691041] netlink_unicast+0xf3e/0x1020 [ 368.695219] netlink_sendmsg+0x127f/0x1300 [ 368.699505] ___sys_sendmsg+0xdb9/0x11b0 [ 368.703585] ? netlink_getsockopt+0x1460/0x1460 [ 368.708284] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 368.713495] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 368.718875] ? __fget_light+0x6e1/0x750 [ 368.722877] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 368.728106] __se_sys_sendmsg+0x305/0x460 [ 368.732287] __x64_sys_sendmsg+0x4a/0x70 [ 368.736365] do_syscall_64+0xbc/0xf0 [ 368.740115] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 368.745319] RIP: 0033:0x457ec9 05:37:21 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x0, 0x0, "760d267938a277d1c2ce95fb9a24c3de8463580d9b31ed74c3c0dc6dce463d3a"}) [ 368.748533] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 368.767458] RSP: 002b:00007f17c2a42c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 368.775189] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457ec9 [ 368.782469] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 368.789995] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 368.797280] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f17c2a436d4 [ 368.804579] R13: 00000000004c53fb R14: 00000000004d9038 R15: 00000000ffffffff 05:37:21 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000000)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') 05:37:21 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0xffffffffffffffff, 0xfffffe00}, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='gfs2meta\x00', 0x0, 0x0) 05:37:22 executing program 1: r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x800) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x10, 0x11, [@generic="e2abb4ec7645192056d52f"]}]}, 0x24}, 0x1, 0x300}, 0x0) 05:37:22 executing program 5: sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xf2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) perf_event_open$cgroup(0x0, 0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 05:37:22 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000140)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) [ 369.005020] gfs2: path_lookup on /dev/nbd returned error -2 [ 369.044274] gfs2: path_lookup on /dev/nbd returned error -2 05:37:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="fb"]) ioctl$KVM_NMI(r2, 0xae9a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:37:22 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x200000001, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close(r1) socket$can_bcm(0x1d, 0x2, 0x2) close(r1) [ 369.324282] *** Guest State *** [ 369.327720] CR0: actual=0x0000000000000031, shadow=0x0000000060000011, gh_mask=fffffffffffffff7 [ 369.336708] CR4: actual=0x0000000000002060, shadow=0x0000000000000020, gh_mask=ffffffffffffe871 [ 369.345684] CR3 = 0x0000000000002000 [ 369.349431] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 369.356174] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 369.362764] RSP = 0x0000000000000f80 RIP = 0x0000000000000001 [ 369.368824] RFLAGS=0x00000202 DR7 = 0x0000000000000400 [ 369.374908] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 369.381679] CS: sel=0x0030, attr=0x0409b, limit=0x000fffff, base=0x0000000000000000 [ 369.389703] DS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 369.397789] SS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 369.405928] ES: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 369.414050] FS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 369.422503] GS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 369.430516] GDTR: limit=0x000007ff, base=0x0000000000001000 [ 369.438620] LDTR: sel=0x0008, attr=0x04082, limit=0x000007ff, base=0x0000000000001800 [ 369.446743] IDTR: limit=0x000001ff, base=0x0000000000003800 [ 369.454848] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 369.462949] EFER = 0x0000000000000001 PAT = 0x0007040600070406 05:37:22 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r0, 0x1, 0x0, 0x10000103) [ 369.469389] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 369.476996] Interruptibility = 00000001 ActivityState = 00000000 [ 369.483322] *** Host State *** [ 369.486554] RIP = 0xffffffff812fec40 RSP = 0xffff888028a7f3b0 [ 369.493001] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 369.499905] FSBase=00007f6b96149700 GSBase=ffff88812fc00000 TRBase=fffffe0000003000 [ 369.507843] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 369.513890] CR0=0000000080050033 CR3=000000002a66b000 CR4=00000000001426f0 [ 369.520967] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff8ae015f0 [ 369.527782] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 369.533937] *** Control State *** [ 369.537432] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ca [ 369.544228] EntryControls=0000d1ff ExitControls=002fefff [ 369.549729] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 369.556792] VMEntry: intr_info=80000202 errcode=00000000 ilen=00000000 [ 369.563767] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 369.570382] reason=80000021 qualification=0000000000000003 [ 369.576862] IDTVectoring: info=00000000 errcode=00000000 [ 369.582514] TSC Offset = 0xffffff36113a183c [ 369.586862] EPT pointer = 0x00000000280a101e 05:37:22 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={0x0, 0xfffffffffffffffb}, &(0x7f0000000080)=0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000013000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:37:22 executing program 1: r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x800) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x10, 0x11, [@generic="e2abb4ec7645192056d52f"]}]}, 0x24}, 0x1, 0x300}, 0x0) 05:37:22 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x4e22}, 0x1c) r3 = accept4(r2, 0x0, 0x0, 0x0) sendto(r1, &(0x7f0000000200)="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", 0x591, 0x0, 0x0, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) splice(r3, 0x0, r0, 0x0, 0x80000000, 0x0) [ 369.872223] *** Guest State *** [ 369.875720] CR0: actual=0x0000000000000031, shadow=0x0000000060000011, gh_mask=fffffffffffffff7 [ 369.884728] CR4: actual=0x0000000000002060, shadow=0x0000000000000020, gh_mask=ffffffffffffe871 [ 369.893721] CR3 = 0x0000000000002000 [ 369.897471] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 369.904123] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 369.910655] RSP = 0x0000000000000f80 RIP = 0x0000000000000001 [ 369.916781] RFLAGS=0x00000202 DR7 = 0x0000000000000400 [ 369.922893] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 369.929607] CS: sel=0x0030, attr=0x0409b, limit=0x000fffff, base=0x0000000000000000 [ 369.937742] DS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 369.945862] SS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 369.954030] ES: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 369.962124] FS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 05:37:23 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) socketpair(0x0, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000000)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') [ 369.970154] GS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 369.978293] GDTR: limit=0x000007ff, base=0x0000000000001000 [ 369.986394] LDTR: sel=0x0008, attr=0x04082, limit=0x000007ff, base=0x0000000000001800 [ 369.994527] IDTR: limit=0x000001ff, base=0x0000000000003800 [ 370.002138] net_ratelimit: 2 callbacks suppressed [ 370.002161] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 05:37:23 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002c00)=""/125, 0x7d}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') preadv(r0, &(0x7f00000017c0), 0x3ba, 0x0) [ 370.002627] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 370.025887] EFER = 0x0000000000000001 PAT = 0x0007040600070406 [ 370.032425] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 370.039907] Interruptibility = 00000001 ActivityState = 00000000 [ 370.046240] *** Host State *** [ 370.049473] RIP = 0xffffffff812fec40 RSP = 0xffff88802832f3b0 [ 370.055611] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 370.062132] FSBase=00007f6b96128700 GSBase=ffff88812fc00000 TRBase=fffffe0000003000 [ 370.069966] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 370.076007] CR0=0000000080050033 CR3=000000002a66b000 CR4=00000000001426f0 [ 370.083150] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff8ae015f0 [ 370.089850] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 370.096030] *** Control State *** [ 370.099525] PinBased=0000003f CPUBased=b5986dfe SecondaryExec=000000ca [ 370.106318] EntryControls=0000d1ff ExitControls=002fefff [ 370.111861] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 370.118841] VMEntry: intr_info=80000202 errcode=00000000 ilen=00000000 [ 370.125638] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 370.132320] reason=80000021 qualification=0000000000000003 [ 370.138664] IDTVectoring: info=00000000 errcode=00000000 [ 370.144311] TSC Offset = 0xffffff36113a183c [ 370.148662] EPT pointer = 0x00000000280a101e 05:37:23 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x20000108}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x5b, &(0x7f0000000380)={&(0x7f0000000300)={0x6, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "75abc64b7a58a964"}}, 0x48}}, 0x0) 05:37:23 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x1000) 05:37:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) 05:37:23 executing program 1: r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x800) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x10, 0x11, [@generic="e2abb4ec7645192056d52f"]}]}, 0x24}, 0x1, 0x300}, 0x0) 05:37:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="fb"]) ioctl$KVM_NMI(r2, 0xae9a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:37:23 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) socketpair(0x0, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000000)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') 05:37:23 executing program 1: r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x800) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x10, 0x11, [@generic="e2abb4ec7645192056d52f"]}]}, 0x24}, 0x1, 0x300}, 0x0) 05:37:23 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x20000108}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x5b, &(0x7f0000000380)={&(0x7f0000000300)={0x6, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "75abc64b7a58a964"}}, 0x48}}, 0x0) 05:37:23 executing program 4: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xc) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x39}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 05:37:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) setrlimit(0xc00000000000007, &(0x7f0000000080)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, &(0x7f0000000400)="b9800000c00f3235010000000f301c000f01cbb9800000c00f3235010000000f300f01c86736f36f0f01df0f2083ea0058000065000fc79b01000000", 0x3c}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 370.718466] ptrace attach of "/root/syz-executor4"[14725] was attempted by "/root/syz-executor4"[14726] [ 370.750316] sysfs: cannot create duplicate filename '/class/ieee80211/â«´ìvE VÕ!' [ 370.758331] CPU: 1 PID: 14727 Comm: syz-executor1 Not tainted 5.0.0-rc1+ #7 [ 370.765470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 370.774858] Call Trace: [ 370.777510] dump_stack+0x173/0x1d0 [ 370.781204] sysfs_warn_dup+0x1c4/0x1f0 [ 370.785252] sysfs_do_create_link_sd+0x293/0x360 [ 370.790337] sysfs_create_link+0x125/0x190 [ 370.794624] device_add+0x1730/0x2ed0 [ 370.798506] wiphy_register+0x2b4b/0x3900 [ 370.802748] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 370.808008] ieee80211_register_hw+0x3ac2/0x5ca0 [ 370.812829] ? ieee80211_register_hw+0x1041/0x5ca0 [ 370.817835] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 370.823340] ? tasklet_hrtimer_init+0x114/0x1b0 [ 370.828059] ? hw_scan_work+0xc40/0xc40 [ 370.832108] mac80211_hwsim_new_radio+0x3267/0x4f50 [ 370.837201] hwsim_new_radio_nl+0x1444/0x1990 [ 370.841793] ? hwsim_tx_info_frame_received_nl+0x1220/0x1220 [ 370.847641] genl_rcv_msg+0x185f/0x1a60 [ 370.851712] netlink_rcv_skb+0x431/0x620 [ 370.855839] ? genl_unbind+0x390/0x390 [ 370.859782] genl_rcv+0x63/0x80 [ 370.863122] netlink_unicast+0xf3e/0x1020 05:37:23 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x20000108}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x5b, &(0x7f0000000380)={&(0x7f0000000300)={0x6, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "75abc64b7a58a964"}}, 0x48}}, 0x0) 05:37:23 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x4004550d, 0x0) [ 370.867334] netlink_sendmsg+0x127f/0x1300 [ 370.871635] ___sys_sendmsg+0xdb9/0x11b0 [ 370.875751] ? netlink_getsockopt+0x1460/0x1460 [ 370.880484] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 370.885743] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 370.891180] ? __fget_light+0x6e1/0x750 [ 370.895212] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 370.900455] __se_sys_sendmsg+0x305/0x460 [ 370.904677] __x64_sys_sendmsg+0x4a/0x70 [ 370.908793] do_syscall_64+0xbc/0xf0 [ 370.912568] entry_SYSCALL_64_after_hwframe+0x63/0xe7 05:37:23 executing program 4: set_mempolicy(0x3, &(0x7f0000000000)=0x80, 0x9) [ 370.917791] RIP: 0033:0x457ec9 [ 370.921034] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 370.940114] RSP: 002b:00007f17c2a63c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 370.947880] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457ec9 [ 370.955208] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 370.963037] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 370.970378] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f17c2a646d4 [ 370.977727] R13: 00000000004c53fb R14: 00000000004d9038 R15: 00000000ffffffff 05:37:24 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) socketpair(0x0, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000000)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') 05:37:24 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x20000108}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x5b, &(0x7f0000000380)={&(0x7f0000000300)={0x6, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "75abc64b7a58a964"}}, 0x48}}, 0x0) 05:37:24 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") creat(&(0x7f0000000000)='./file0\x00', 0x0) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='./file1\x00') 05:37:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="fb"]) ioctl$KVM_NMI(r2, 0xae9a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 371.330252] *** Guest State *** [ 371.333781] CR0: actual=0x0000000000000031, shadow=0x0000000060000011, gh_mask=fffffffffffffff7 [ 371.342843] CR4: actual=0x0000000000002060, shadow=0x0000000000000020, gh_mask=ffffffffffffe871 [ 371.351773] CR3 = 0x0000000000002000 [ 371.355521] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 371.362166] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 371.368699] RSP = 0x0000000000000f80 RIP = 0x0000000000000001 [ 371.374851] RFLAGS=0x00000202 DR7 = 0x0000000000000400 [ 371.380868] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 371.387780] CS: sel=0x0030, attr=0x0409b, limit=0x000fffff, base=0x0000000000000000 [ 371.395868] DS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 371.403993] SS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 371.412082] ES: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 371.420112] FS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 371.428322] GS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 371.436401] GDTR: limit=0x000007ff, base=0x0000000000001000 [ 371.444514] LDTR: sel=0x0008, attr=0x04082, limit=0x000007ff, base=0x0000000000001800 [ 371.452662] IDTR: limit=0x000001ff, base=0x0000000000003800 [ 371.460676] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 371.468745] EFER = 0x0000000000000001 PAT = 0x0007040600070406 [ 371.475301] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 371.482839] Interruptibility = 00000001 ActivityState = 00000000 [ 371.489084] *** Host State *** [ 371.492417] RIP = 0xffffffff812fec40 RSP = 0xffff88802819f3b0 [ 371.498440] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 371.505061] FSBase=00007f6b96149700 GSBase=ffff88812fc00000 TRBase=fffffe0000003000 [ 371.513203] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 371.519143] CR0=0000000080050033 CR3=0000000029759000 CR4=00000000001426f0 [ 371.526302] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff8ae015f0 [ 371.533067] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 371.539161] *** Control State *** [ 371.542744] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ca [ 371.549435] EntryControls=0000d1ff ExitControls=002fefff [ 371.555021] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 371.562060] VMEntry: intr_info=80000202 errcode=00000000 ilen=00000000 [ 371.568764] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 05:37:24 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) socketpair(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000000)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') 05:37:24 executing program 1: r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x800) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x10, 0x11, [@generic="e2abb4ec7645192056d52f"]}]}, 0x24}, 0x1, 0x300}, 0x0) 05:37:24 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x5b, &(0x7f0000000380)={&(0x7f0000000300)={0x6, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "75abc64b7a58a964"}}, 0x48}}, 0x0) 05:37:24 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00004b1000)={0x8, 0x3, &(0x7f0000261000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, &(0x7f0000cd0000)='GPL\x00', 0xb4c3, 0x1000, &(0x7f0000cdd000)=""/4096}, 0x48) [ 371.575483] reason=80000021 qualification=0000000000000003 [ 371.581943] IDTVectoring: info=00000000 errcode=00000000 [ 371.583013] sysfs: cannot create duplicate filename '/class/ieee80211/â«´ìvE VÕ!' [ 371.587421] TSC Offset = 0xffffff34fffdac93 [ 371.595271] CPU: 1 PID: 14763 Comm: syz-executor1 Not tainted 5.0.0-rc1+ #7 [ 371.599572] EPT pointer = 0x00000000282b601e [ 371.606658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 371.606672] Call Trace: [ 371.606727] dump_stack+0x173/0x1d0 [ 371.606780] sysfs_warn_dup+0x1c4/0x1f0 [ 371.630686] sysfs_do_create_link_sd+0x293/0x360 [ 371.635470] sysfs_create_link+0x125/0x190 [ 371.639727] device_add+0x1730/0x2ed0 [ 371.643568] wiphy_register+0x2b4b/0x3900 [ 371.647762] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 371.652991] ieee80211_register_hw+0x3ac2/0x5ca0 [ 371.657775] ? ieee80211_register_hw+0x1041/0x5ca0 [ 371.662739] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 371.668210] ? tasklet_hrtimer_init+0x114/0x1b0 [ 371.672897] ? hw_scan_work+0xc40/0xc40 [ 371.676889] mac80211_hwsim_new_radio+0x3267/0x4f50 [ 371.681944] hwsim_new_radio_nl+0x1444/0x1990 [ 371.686473] ? hwsim_tx_info_frame_received_nl+0x1220/0x1220 [ 371.692291] genl_rcv_msg+0x185f/0x1a60 [ 371.696318] netlink_rcv_skb+0x431/0x620 [ 371.700392] ? genl_unbind+0x390/0x390 [ 371.704302] genl_rcv+0x63/0x80 [ 371.707603] netlink_unicast+0xf3e/0x1020 [ 371.711783] netlink_sendmsg+0x127f/0x1300 [ 371.716053] ___sys_sendmsg+0xdb9/0x11b0 [ 371.720139] ? netlink_getsockopt+0x1460/0x1460 [ 371.724842] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 371.730146] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 371.735532] ? __fget_light+0x6e1/0x750 [ 371.739545] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 371.744762] __se_sys_sendmsg+0x305/0x460 [ 371.748941] __x64_sys_sendmsg+0x4a/0x70 [ 371.753025] do_syscall_64+0xbc/0xf0 [ 371.756772] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 371.761984] RIP: 0033:0x457ec9 [ 371.765199] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 371.784120] RSP: 002b:00007f17c2a63c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 371.791851] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457ec9 [ 371.799146] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 371.806426] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 371.813710] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f17c2a646d4 [ 371.820994] R13: 00000000004c53fb R14: 00000000004d9038 R15: 00000000ffffffff 05:37:25 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) bind$alg(r0, &(0x7f000001f000)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha3-224-generic,cbc-camellia-asm)\x00'}, 0x58) 05:37:25 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) socketpair(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000000)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') 05:37:25 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x20000108}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x5b, &(0x7f0000000380)={&(0x7f0000000300)={0x6, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "75abc64b7a58a964"}}, 0x48}}, 0x0) 05:37:25 executing program 4: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4) 05:37:25 executing program 1: r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x800) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x10, 0x11, [@generic="e2abb4ec7645192056d52f"]}]}, 0x24}, 0x1, 0x300}, 0x0) 05:37:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="fb"]) ioctl$KVM_NMI(r2, 0xae9a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 372.315809] sysfs: cannot create duplicate filename '/class/ieee80211/â«´ìvE VÕ!' [ 372.324001] CPU: 1 PID: 14789 Comm: syz-executor1 Not tainted 5.0.0-rc1+ #7 [ 372.331145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 372.340522] Call Trace: [ 372.343154] dump_stack+0x173/0x1d0 [ 372.346814] sysfs_warn_dup+0x1c4/0x1f0 [ 372.350822] sysfs_do_create_link_sd+0x293/0x360 [ 372.355606] sysfs_create_link+0x125/0x190 [ 372.359860] device_add+0x1730/0x2ed0 [ 372.363700] wiphy_register+0x2b4b/0x3900 [ 372.367897] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 372.373123] ieee80211_register_hw+0x3ac2/0x5ca0 [ 372.377907] ? ieee80211_register_hw+0x1041/0x5ca0 [ 372.382866] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 372.388336] ? tasklet_hrtimer_init+0x114/0x1b0 [ 372.393023] ? hw_scan_work+0xc40/0xc40 [ 372.397021] mac80211_hwsim_new_radio+0x3267/0x4f50 [ 372.402074] hwsim_new_radio_nl+0x1444/0x1990 [ 372.406608] ? hwsim_tx_info_frame_received_nl+0x1220/0x1220 [ 372.412429] genl_rcv_msg+0x185f/0x1a60 [ 372.416466] netlink_rcv_skb+0x431/0x620 [ 372.420543] ? genl_unbind+0x390/0x390 [ 372.424454] genl_rcv+0x63/0x80 [ 372.427759] netlink_unicast+0xf3e/0x1020 [ 372.431945] netlink_sendmsg+0x127f/0x1300 [ 372.436216] ___sys_sendmsg+0xdb9/0x11b0 [ 372.440299] ? netlink_getsockopt+0x1460/0x1460 [ 372.444998] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 372.450210] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 372.455609] ? __fget_light+0x6e1/0x750 [ 372.459606] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 372.464818] __se_sys_sendmsg+0x305/0x460 [ 372.468998] __x64_sys_sendmsg+0x4a/0x70 [ 372.473076] do_syscall_64+0xbc/0xf0 [ 372.476820] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 372.482019] RIP: 0033:0x457ec9 [ 372.485239] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 372.504156] RSP: 002b:00007f17c2a63c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 05:37:25 executing program 5: connect$can_bcm(0xffffffffffffffff, &(0x7f0000000440), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x20000108}}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x5b, &(0x7f0000000380)={&(0x7f0000000300)={0x6, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "75abc64b7a58a964"}}, 0x48}}, 0x0) [ 372.511879] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457ec9 [ 372.519155] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 372.526438] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 372.533716] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f17c2a646d4 [ 372.540997] R13: 00000000004c53fb R14: 00000000004d9038 R15: 00000000ffffffff 05:37:25 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @initdev}, r1}}, 0x48) 05:37:25 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) socketpair(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000000)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') 05:37:25 executing program 5: connect$can_bcm(0xffffffffffffffff, &(0x7f0000000440), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x20000108}}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x5b, &(0x7f0000000380)={&(0x7f0000000300)={0x6, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "75abc64b7a58a964"}}, 0x48}}, 0x0) 05:37:25 executing program 1: r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x800) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, 0x0, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x10, 0x11, [@generic="e2abb4ec7645192056d52f"]}]}, 0x24}, 0x1, 0x300}, 0x0) 05:37:25 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000000)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') 05:37:26 executing program 3: ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3e) writev(r0, &(0x7f0000001540)=[{&(0x7f0000001480)='g', 0x1}], 0x1) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x16) 05:37:26 executing program 0: clock_gettime(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clock_settime(0x0, &(0x7f0000000040)) 05:37:26 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0xc2000, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002c00)=""/125, 0x7d}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/netstat\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3ba, 0x0) 05:37:26 executing program 5: connect$can_bcm(0xffffffffffffffff, &(0x7f0000000440), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x20000108}}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x5b, &(0x7f0000000380)={&(0x7f0000000300)={0x6, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "75abc64b7a58a964"}}, 0x48}}, 0x0) 05:37:26 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000000)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') 05:37:26 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000440), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x20000108}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x5b, &(0x7f0000000380)={&(0x7f0000000300)={0x6, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "75abc64b7a58a964"}}, 0x48}}, 0x0) 05:37:26 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'irlan0\x00', 0x4003}) close(r0) 05:37:26 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, 0x0, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x20000108}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x5b, &(0x7f0000000380)={&(0x7f0000000300)={0x6, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "75abc64b7a58a964"}}, 0x48}}, 0x0) 05:37:26 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000000)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') [ 373.732195] sysfs: cannot create duplicate filename '/class/ieee80211/â«´ìvE VÕ!' [ 373.740000] CPU: 0 PID: 14819 Comm: syz-executor1 Not tainted 5.0.0-rc1+ #7 [ 373.747147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 373.756534] Call Trace: [ 373.759186] dump_stack+0x173/0x1d0 [ 373.762888] sysfs_warn_dup+0x1c4/0x1f0 [ 373.766932] sysfs_do_create_link_sd+0x293/0x360 [ 373.771759] sysfs_create_link+0x125/0x190 [ 373.776390] device_add+0x1730/0x2ed0 [ 373.780276] wiphy_register+0x2b4b/0x3900 [ 373.784513] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 373.790127] ieee80211_register_hw+0x3ac2/0x5ca0 [ 373.795073] ? ieee80211_register_hw+0x1041/0x5ca0 [ 373.800091] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 373.805614] ? tasklet_hrtimer_init+0x114/0x1b0 [ 373.810337] ? hw_scan_work+0xc40/0xc40 [ 373.814376] mac80211_hwsim_new_radio+0x3267/0x4f50 [ 373.819467] hwsim_new_radio_nl+0x1444/0x1990 [ 373.824042] ? hwsim_tx_info_frame_received_nl+0x1220/0x1220 [ 373.829893] genl_rcv_msg+0x185f/0x1a60 [ 373.833980] netlink_rcv_skb+0x431/0x620 [ 373.838179] ? genl_unbind+0x390/0x390 [ 373.842134] genl_rcv+0x63/0x80 [ 373.845475] netlink_unicast+0xf3e/0x1020 [ 373.849688] netlink_sendmsg+0x127f/0x1300 [ 373.853994] ___sys_sendmsg+0xdb9/0x11b0 [ 373.858115] ? netlink_getsockopt+0x1460/0x1460 [ 373.862843] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 373.868093] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 373.873515] ? __fget_light+0x6e1/0x750 [ 373.877548] ? kmsan_get_shadow_origin_ptr+0x60/0x440 05:37:26 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000000)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') [ 373.882800] __se_sys_sendmsg+0x305/0x460 [ 373.887012] __x64_sys_sendmsg+0x4a/0x70 [ 373.891121] do_syscall_64+0xbc/0xf0 [ 373.894883] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 373.900112] RIP: 0033:0x457ec9 [ 373.903352] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 373.922298] RSP: 002b:00007f17c2a63c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 373.930059] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457ec9 [ 373.937380] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 373.944688] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 373.951990] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f17c2a646d4 [ 373.959306] R13: 00000000004c53fb R14: 00000000004d9038 R15: 00000000ffffffff 05:37:27 executing program 1: r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x800) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, 0x0, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x10, 0x11, [@generic="e2abb4ec7645192056d52f"]}]}, 0x24}, 0x1, 0x300}, 0x0) 05:37:27 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'irlan0\x00', 0x4003}) [ 374.235576] sysfs: cannot create duplicate filename '/class/ieee80211/â«´ìvE VÕ!' [ 374.243577] CPU: 1 PID: 14877 Comm: syz-executor1 Not tainted 5.0.0-rc1+ #7 [ 374.250724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 374.260125] Call Trace: [ 374.262779] dump_stack+0x173/0x1d0 [ 374.266469] sysfs_warn_dup+0x1c4/0x1f0 [ 374.270477] sysfs_do_create_link_sd+0x293/0x360 [ 374.275260] sysfs_create_link+0x125/0x190 [ 374.279530] device_add+0x1730/0x2ed0 [ 374.283365] wiphy_register+0x2b4b/0x3900 [ 374.287550] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 374.292758] ieee80211_register_hw+0x3ac2/0x5ca0 [ 374.297526] ? ieee80211_register_hw+0x1041/0x5ca0 [ 374.302473] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 374.307948] ? tasklet_hrtimer_init+0x114/0x1b0 [ 374.312655] ? hw_scan_work+0xc40/0xc40 [ 374.316641] mac80211_hwsim_new_radio+0x3267/0x4f50 [ 374.321708] hwsim_new_radio_nl+0x1444/0x1990 [ 374.326272] ? hwsim_tx_info_frame_received_nl+0x1220/0x1220 [ 374.332090] genl_rcv_msg+0x185f/0x1a60 [ 374.336109] netlink_rcv_skb+0x431/0x620 [ 374.340177] ? genl_unbind+0x390/0x390 [ 374.344073] genl_rcv+0x63/0x80 [ 374.347391] netlink_unicast+0xf3e/0x1020 [ 374.351573] netlink_sendmsg+0x127f/0x1300 [ 374.355826] ___sys_sendmsg+0xdb9/0x11b0 [ 374.359917] ? netlink_getsockopt+0x1460/0x1460 [ 374.364625] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 374.369828] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 374.375197] ? __fget_light+0x6e1/0x750 [ 374.379186] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 374.384387] __se_sys_sendmsg+0x305/0x460 [ 374.388555] __x64_sys_sendmsg+0x4a/0x70 [ 374.392621] do_syscall_64+0xbc/0xf0 [ 374.396348] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 374.401562] RIP: 0033:0x457ec9 [ 374.404779] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 374.423701] RSP: 002b:00007f17c2a63c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 374.431484] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457ec9 [ 374.438772] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 374.446041] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 374.453325] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f17c2a646d4 [ 374.460640] R13: 00000000004c53fb R14: 00000000004d9038 R15: 00000000ffffffff 05:37:29 executing program 3: 05:37:29 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, 0x0, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x20000108}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x5b, &(0x7f0000000380)={&(0x7f0000000300)={0x6, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "75abc64b7a58a964"}}, 0x48}}, 0x0) 05:37:29 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000040)=""/148, 0x94}], 0x119d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') flock(r0, 0xffffffffffffdffe) preadv(r1, &(0x7f0000000480), 0x10000000000001cf, 0x0) 05:37:29 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000000)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') 05:37:29 executing program 4: 05:37:29 executing program 1: accept4(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x800) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x10, 0x11, [@generic="e2abb4ec7645192056d52f"]}]}, 0x24}, 0x1, 0x300}, 0x0) [ 376.369670] sysfs: cannot create duplicate filename '/class/ieee80211/â«´ìvE VÕ!' [ 376.377734] CPU: 1 PID: 14888 Comm: syz-executor1 Not tainted 5.0.0-rc1+ #7 [ 376.384875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 376.394257] Call Trace: [ 376.396900] dump_stack+0x173/0x1d0 [ 376.400581] sysfs_warn_dup+0x1c4/0x1f0 [ 376.404617] sysfs_do_create_link_sd+0x293/0x360 [ 376.409527] sysfs_create_link+0x125/0x190 [ 376.413809] device_add+0x1730/0x2ed0 [ 376.417685] wiphy_register+0x2b4b/0x3900 [ 376.421914] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 376.427179] ieee80211_register_hw+0x3ac2/0x5ca0 [ 376.432014] ? ieee80211_register_hw+0x1041/0x5ca0 [ 376.437013] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 376.442514] ? tasklet_hrtimer_init+0x114/0x1b0 [ 376.447229] ? hw_scan_work+0xc40/0xc40 [ 376.451251] mac80211_hwsim_new_radio+0x3267/0x4f50 [ 376.456337] hwsim_new_radio_nl+0x1444/0x1990 [ 376.460905] ? hwsim_tx_info_frame_received_nl+0x1220/0x1220 [ 376.466760] genl_rcv_msg+0x185f/0x1a60 [ 376.470834] netlink_rcv_skb+0x431/0x620 [ 376.474941] ? genl_unbind+0x390/0x390 [ 376.478876] genl_rcv+0x63/0x80 [ 376.482221] netlink_unicast+0xf3e/0x1020 [ 376.486437] netlink_sendmsg+0x127f/0x1300 [ 376.490747] ___sys_sendmsg+0xdb9/0x11b0 [ 376.494952] ? netlink_getsockopt+0x1460/0x1460 [ 376.499680] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 376.504932] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 376.510344] ? __fget_light+0x6e1/0x750 [ 376.514372] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 376.519616] __se_sys_sendmsg+0x305/0x460 [ 376.523833] __x64_sys_sendmsg+0x4a/0x70 [ 376.527945] do_syscall_64+0xbc/0xf0 [ 376.531720] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 376.536949] RIP: 0033:0x457ec9 [ 376.540182] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 376.559130] RSP: 002b:00007f17c2a63c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 05:37:29 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000000)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') 05:37:29 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x20000108}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x5b, &(0x7f0000000380)={&(0x7f0000000300)={0x6, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "75abc64b7a58a964"}}, 0x48}}, 0x0) 05:37:29 executing program 4: 05:37:29 executing program 3: 05:37:29 executing program 0: [ 376.566893] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457ec9 [ 376.574205] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 376.581509] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 376.588814] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f17c2a646d4 [ 376.596130] R13: 00000000004c53fb R14: 00000000004d9038 R15: 00000000ffffffff 05:37:29 executing program 4: 05:37:29 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='/exe\x00\xe1\xff\xff\xff\x04\t\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\xa9\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xde\xe9\x01\xd2q\xfb\xbcxd\xc3\xcfs\x18\xe8\x9cn\x97\xcaI\xe2R?\x8dT\xc6F\xddG\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x82\xc8\xedx\x0f\xc8\xde\x13\xaa\xc8\x1aS\x93\x80,\xac\x9b0\xbd4\xf4\xb1\xaa\x91\x95\x0e3!\t^\xd1\xdc\x06\t\xcf\x05\xb8\xb2\x9c\a\x00\x00\x00\x00\x00\x00\x00hm\x0eM\x0e5O\xfb\xec\xf9\xb6\xcbV\xdf7\xda\xady3\x93\xcd\xf9m`\xc34\xd7\xde\xe9\x9dX\xbb\x98\xec\x8f\xba\xe8\x85\t\xab\xe3/\xd4B9\xab\xb4\xcc\xf6Y\xf5\\v\xc2\x88\xae\x1d\x12\xb8\xae\xf6\x89\xf1\x9c9\xd9\xcd\xd8\xa2I\x96\x91\x85\xb3\xf2)\xa4\x8e\xf3\x016]\av*\x19g\xeb2A\xf4\x97\x96\xf3\xf6\xce\xb2\x8f\xd1\x830qPHmVA\xc3\xdf\xc8L%\xba\xa2\xb3q,\xb8%\x12g\xe7\x01Y\x89Om\xd8\xf2\x93\xe8\xcdD\xea5\xca\x1cR\xf1\xc1e\xb69\x1dw\x94\x05\xfa\xbf\xaf\x83\\)(\xc6\x12\x82\xa1\f\xfe\xe5#\xc6\x94\x13\x9d\x9b\x15\x8c\x8a\xc9\xc2\x06\x8d\xea\xe9V:\x86a\xce\xf5\xdf\xb8qIi\xccr\x7fR\x13\x99\x96\xdd/W[\n\xf9\xcc\x01?\']6Q\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') fsetxattr(r0, &(0x7f0000000000)=@known='user.syz\x00', 0x0, 0x0, 0x0) 05:37:29 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') 05:37:29 executing program 3: 05:37:29 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmsg$can_bcm(r0, 0x0, 0x0) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x5b, &(0x7f0000000380)={&(0x7f0000000300)={0x6, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "75abc64b7a58a964"}}, 0x48}}, 0x0) 05:37:29 executing program 4: 05:37:30 executing program 1: accept4(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x800) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x10, 0x11, [@generic="e2abb4ec7645192056d52f"]}]}, 0x24}, 0x1, 0x300}, 0x0) 05:37:30 executing program 0: 05:37:30 executing program 3: 05:37:30 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') 05:37:30 executing program 4: 05:37:30 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x5b, &(0x7f0000000380)={&(0x7f0000000300)={0x6, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "75abc64b7a58a964"}}, 0x48}}, 0x0) [ 377.327639] sysfs: cannot create duplicate filename '/class/ieee80211/â«´ìvE VÕ!' [ 377.335536] CPU: 0 PID: 14932 Comm: syz-executor1 Not tainted 5.0.0-rc1+ #7 [ 377.342671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 377.352056] Call Trace: [ 377.354710] dump_stack+0x173/0x1d0 [ 377.358402] sysfs_warn_dup+0x1c4/0x1f0 [ 377.362439] sysfs_do_create_link_sd+0x293/0x360 [ 377.367258] sysfs_create_link+0x125/0x190 [ 377.371537] device_add+0x1730/0x2ed0 [ 377.375407] wiphy_register+0x2b4b/0x3900 [ 377.379632] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 377.384886] ieee80211_register_hw+0x3ac2/0x5ca0 [ 377.389698] ? ieee80211_register_hw+0x1041/0x5ca0 [ 377.394691] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 377.400192] ? tasklet_hrtimer_init+0x114/0x1b0 [ 377.404905] ? hw_scan_work+0xc40/0xc40 [ 377.408924] mac80211_hwsim_new_radio+0x3267/0x4f50 [ 377.414011] hwsim_new_radio_nl+0x1444/0x1990 [ 377.418580] ? hwsim_tx_info_frame_received_nl+0x1220/0x1220 05:37:30 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') 05:37:30 executing program 4: 05:37:30 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, 0x0}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x5b, &(0x7f0000000380)={&(0x7f0000000300)={0x6, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "75abc64b7a58a964"}}, 0x48}}, 0x0) 05:37:30 executing program 3: [ 377.424421] genl_rcv_msg+0x185f/0x1a60 [ 377.428483] netlink_rcv_skb+0x431/0x620 [ 377.432591] ? genl_unbind+0x390/0x390 [ 377.436538] genl_rcv+0x63/0x80 [ 377.439878] netlink_unicast+0xf3e/0x1020 [ 377.444089] netlink_sendmsg+0x127f/0x1300 [ 377.448420] ___sys_sendmsg+0xdb9/0x11b0 [ 377.452539] ? netlink_getsockopt+0x1460/0x1460 [ 377.457279] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 377.462525] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 377.467947] ? __fget_light+0x6e1/0x750 [ 377.471989] ? kmsan_get_shadow_origin_ptr+0x60/0x440 05:37:30 executing program 0: [ 377.477243] __se_sys_sendmsg+0x305/0x460 [ 377.481465] __x64_sys_sendmsg+0x4a/0x70 [ 377.485585] do_syscall_64+0xbc/0xf0 [ 377.489368] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 377.494597] RIP: 0033:0x457ec9 [ 377.497840] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 377.516781] RSP: 002b:00007f17c2a63c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 377.524545] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457ec9 [ 377.531852] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 377.539164] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 377.546480] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f17c2a646d4 [ 377.553792] R13: 00000000004c53fb R14: 00000000004d9038 R15: 00000000ffffffff 05:37:30 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000000)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') 05:37:30 executing program 1: accept4(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x800) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x10, 0x11, [@generic="e2abb4ec7645192056d52f"]}]}, 0x24}, 0x1, 0x300}, 0x0) 05:37:30 executing program 4: 05:37:30 executing program 3: 05:37:30 executing program 0: 05:37:30 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x5b, &(0x7f0000000380)={&(0x7f0000000300)={0x6, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "75abc64b7a58a964"}}, 0x48}}, 0x0) 05:37:31 executing program 0: 05:37:31 executing program 4: 05:37:31 executing program 3: 05:37:31 executing program 0: 05:37:31 executing program 4: 05:37:31 executing program 0: [ 378.541881] sysfs: cannot create duplicate filename '/class/ieee80211/â«´ìvE VÕ!' [ 378.549667] CPU: 1 PID: 14960 Comm: syz-executor1 Not tainted 5.0.0-rc1+ #7 [ 378.556798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 378.566188] Call Trace: [ 378.568842] dump_stack+0x173/0x1d0 [ 378.572533] sysfs_warn_dup+0x1c4/0x1f0 [ 378.576568] sysfs_do_create_link_sd+0x293/0x360 [ 378.581390] sysfs_create_link+0x125/0x190 [ 378.585674] device_add+0x1730/0x2ed0 05:37:31 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000000)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, 0x0) [ 378.589551] wiphy_register+0x2b4b/0x3900 [ 378.593779] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 378.599027] ieee80211_register_hw+0x3ac2/0x5ca0 [ 378.603851] ? ieee80211_register_hw+0x1041/0x5ca0 [ 378.608844] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 378.614353] ? tasklet_hrtimer_init+0x114/0x1b0 [ 378.619075] ? hw_scan_work+0xc40/0xc40 [ 378.623122] mac80211_hwsim_new_radio+0x3267/0x4f50 [ 378.628217] hwsim_new_radio_nl+0x1444/0x1990 [ 378.632793] ? hwsim_tx_info_frame_received_nl+0x1220/0x1220 [ 378.638638] genl_rcv_msg+0x185f/0x1a60 [ 378.642712] netlink_rcv_skb+0x431/0x620 [ 378.646840] ? genl_unbind+0x390/0x390 [ 378.650788] genl_rcv+0x63/0x80 [ 378.654137] netlink_unicast+0xf3e/0x1020 [ 378.658346] netlink_sendmsg+0x127f/0x1300 [ 378.662662] ___sys_sendmsg+0xdb9/0x11b0 [ 378.667039] ? netlink_getsockopt+0x1460/0x1460 [ 378.671765] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 378.676984] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 378.682359] ? __fget_light+0x6e1/0x750 [ 378.686384] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 378.691604] __se_sys_sendmsg+0x305/0x460 [ 378.695789] __x64_sys_sendmsg+0x4a/0x70 [ 378.699876] do_syscall_64+0xbc/0xf0 [ 378.703636] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 378.708856] RIP: 0033:0x457ec9 [ 378.712065] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 378.730979] RSP: 002b:00007f17c2a63c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 378.738694] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457ec9 [ 378.745967] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 378.753240] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 378.760521] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f17c2a646d4 [ 378.767795] R13: 00000000004c53fb R14: 00000000004d9038 R15: 00000000ffffffff 05:37:31 executing program 1: accept4(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x800) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x10, 0x11, [@generic="e2abb4ec7645192056d52f"]}]}, 0x24}, 0x1, 0x300}, 0x0) 05:37:31 executing program 3: 05:37:31 executing program 0: 05:37:31 executing program 4: 05:37:31 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x5b, &(0x7f0000000380)={&(0x7f0000000300)={0x6, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "75abc64b7a58a964"}}, 0x48}}, 0x0) 05:37:31 executing program 2: [ 379.010554] sysfs: cannot create duplicate filename '/class/ieee80211/â«´ìvE VÕ!' [ 379.018426] CPU: 0 PID: 14989 Comm: syz-executor1 Not tainted 5.0.0-rc1+ #7 [ 379.025563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 379.034950] Call Trace: [ 379.037599] dump_stack+0x173/0x1d0 [ 379.041292] sysfs_warn_dup+0x1c4/0x1f0 [ 379.045328] sysfs_do_create_link_sd+0x293/0x360 [ 379.050161] sysfs_create_link+0x125/0x190 [ 379.054444] device_add+0x1730/0x2ed0 05:37:32 executing program 0: 05:37:32 executing program 2: [ 379.058333] wiphy_register+0x2b4b/0x3900 [ 379.062559] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 379.067843] ieee80211_register_hw+0x3ac2/0x5ca0 [ 379.072684] ? ieee80211_register_hw+0x1041/0x5ca0 [ 379.077686] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 379.083197] ? tasklet_hrtimer_init+0x114/0x1b0 [ 379.087913] ? hw_scan_work+0xc40/0xc40 [ 379.091942] mac80211_hwsim_new_radio+0x3267/0x4f50 [ 379.097032] hwsim_new_radio_nl+0x1444/0x1990 [ 379.101598] ? hwsim_tx_info_frame_received_nl+0x1220/0x1220 05:37:32 executing program 3: 05:37:32 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}}, 0x0) 05:37:32 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x20000108}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x5b, &(0x7f0000000380)={&(0x7f0000000300)={0x6, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "75abc64b7a58a964"}}, 0x48}}, 0x0) [ 379.107436] genl_rcv_msg+0x185f/0x1a60 [ 379.111500] netlink_rcv_skb+0x431/0x620 [ 379.115605] ? genl_unbind+0x390/0x390 [ 379.119550] genl_rcv+0x63/0x80 [ 379.122892] netlink_unicast+0xf3e/0x1020 [ 379.127111] netlink_sendmsg+0x127f/0x1300 [ 379.131418] ___sys_sendmsg+0xdb9/0x11b0 [ 379.135536] ? netlink_getsockopt+0x1460/0x1460 [ 379.140269] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 379.145515] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 379.150926] ? __fget_light+0x6e1/0x750 [ 379.154964] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 379.160211] __se_sys_sendmsg+0x305/0x460 [ 379.164433] __x64_sys_sendmsg+0x4a/0x70 [ 379.168549] do_syscall_64+0xbc/0xf0 [ 379.172319] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 379.177542] RIP: 0033:0x457ec9 [ 379.180784] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 379.199724] RSP: 002b:00007f17c2a63c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 379.207483] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457ec9 [ 379.214791] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 379.222104] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 379.229409] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f17c2a646d4 [ 379.236716] R13: 00000000004c53fb R14: 00000000004d9038 R15: 00000000ffffffff 05:37:32 executing program 2: 05:37:32 executing program 3: 05:37:32 executing program 0: 05:37:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x10, 0x11, [@generic="e2abb4ec7645192056d52f"]}]}, 0x24}, 0x1, 0x300}, 0x0) 05:37:32 executing program 2: 05:37:32 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x20000108}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x5b, &(0x7f0000000380)={&(0x7f0000000300)={0x6, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "75abc64b7a58a964"}}, 0x48}}, 0x0) 05:37:32 executing program 4: [ 379.643417] sysfs: cannot create duplicate filename '/class/ieee80211/â«´ìvE VÕ!' [ 379.651223] CPU: 1 PID: 15015 Comm: syz-executor1 Not tainted 5.0.0-rc1+ #7 [ 379.658360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 379.667750] Call Trace: [ 379.670399] dump_stack+0x173/0x1d0 [ 379.674153] sysfs_warn_dup+0x1c4/0x1f0 [ 379.678194] sysfs_do_create_link_sd+0x293/0x360 [ 379.683117] sysfs_create_link+0x125/0x190 [ 379.687405] device_add+0x1730/0x2ed0 [ 379.691284] wiphy_register+0x2b4b/0x3900 [ 379.695515] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 379.700797] ieee80211_register_hw+0x3ac2/0x5ca0 [ 379.705629] ? ieee80211_register_hw+0x1041/0x5ca0 [ 379.710628] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 379.716145] ? tasklet_hrtimer_init+0x114/0x1b0 [ 379.720861] ? hw_scan_work+0xc40/0xc40 [ 379.724891] mac80211_hwsim_new_radio+0x3267/0x4f50 [ 379.729986] hwsim_new_radio_nl+0x1444/0x1990 [ 379.734557] ? hwsim_tx_info_frame_received_nl+0x1220/0x1220 [ 379.740401] genl_rcv_msg+0x185f/0x1a60 [ 379.744560] netlink_rcv_skb+0x431/0x620 [ 379.748672] ? genl_unbind+0x390/0x390 [ 379.752614] genl_rcv+0x63/0x80 [ 379.755974] netlink_unicast+0xf3e/0x1020 [ 379.760182] netlink_sendmsg+0x127f/0x1300 [ 379.764494] ___sys_sendmsg+0xdb9/0x11b0 [ 379.768610] ? netlink_getsockopt+0x1460/0x1460 [ 379.773344] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 379.778593] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 379.784004] ? __fget_light+0x6e1/0x750 [ 379.788051] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 379.793311] __se_sys_sendmsg+0x305/0x460 [ 379.797527] __x64_sys_sendmsg+0x4a/0x70 [ 379.801638] do_syscall_64+0xbc/0xf0 [ 379.805669] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 379.810893] RIP: 0033:0x457ec9 [ 379.814146] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 379.833104] RSP: 002b:00007f17c2a63c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 05:37:32 executing program 2: 05:37:32 executing program 4: 05:37:32 executing program 2: 05:37:32 executing program 4: 05:37:32 executing program 0: 05:37:32 executing program 3: [ 379.840861] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457ec9 [ 379.848256] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 379.855564] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 379.862871] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f17c2a646d4 [ 379.870176] R13: 00000000004c53fb R14: 00000000004d9038 R15: 00000000ffffffff 05:37:33 executing program 2: 05:37:33 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x20000108}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x5b, &(0x7f0000000380)={&(0x7f0000000300)={0x6, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "75abc64b7a58a964"}}, 0x48}}, 0x0) 05:37:33 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x10, 0x11, [@generic="e2abb4ec7645192056d52f"]}]}, 0x24}, 0x1, 0x300}, 0x0) 05:37:33 executing program 4: 05:37:33 executing program 3: 05:37:33 executing program 2: 05:37:33 executing program 0: 05:37:33 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x20000108}}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x5b, &(0x7f0000000380)={&(0x7f0000000300)={0x6, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "75abc64b7a58a964"}}, 0x48}}, 0x0) [ 380.396837] sysfs: cannot create duplicate filename '/class/ieee80211/â«´ìvE VÕ!' [ 380.404876] CPU: 1 PID: 15047 Comm: syz-executor1 Not tainted 5.0.0-rc1+ #7 [ 380.412017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 380.421409] Call Trace: [ 380.424063] dump_stack+0x173/0x1d0 [ 380.427783] sysfs_warn_dup+0x1c4/0x1f0 [ 380.431830] sysfs_do_create_link_sd+0x293/0x360 [ 380.436650] sysfs_create_link+0x125/0x190 [ 380.440940] device_add+0x1730/0x2ed0 [ 380.444838] wiphy_register+0x2b4b/0x3900 [ 380.449078] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 380.454339] ieee80211_register_hw+0x3ac2/0x5ca0 [ 380.459174] ? ieee80211_register_hw+0x1041/0x5ca0 [ 380.464175] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 380.469677] ? tasklet_hrtimer_init+0x114/0x1b0 [ 380.474402] ? hw_scan_work+0xc40/0xc40 [ 380.478426] mac80211_hwsim_new_radio+0x3267/0x4f50 [ 380.483516] hwsim_new_radio_nl+0x1444/0x1990 [ 380.488089] ? hwsim_tx_info_frame_received_nl+0x1220/0x1220 [ 380.493948] genl_rcv_msg+0x185f/0x1a60 [ 380.498015] netlink_rcv_skb+0x431/0x620 [ 380.502134] ? genl_unbind+0x390/0x390 [ 380.506081] genl_rcv+0x63/0x80 [ 380.509425] netlink_unicast+0xf3e/0x1020 [ 380.513637] netlink_sendmsg+0x127f/0x1300 [ 380.517948] ___sys_sendmsg+0xdb9/0x11b0 [ 380.522067] ? netlink_getsockopt+0x1460/0x1460 [ 380.526806] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 380.532058] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 380.537480] ? __fget_light+0x6e1/0x750 [ 380.541526] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 380.546786] __se_sys_sendmsg+0x305/0x460 [ 380.551008] __x64_sys_sendmsg+0x4a/0x70 [ 380.555129] do_syscall_64+0xbc/0xf0 [ 380.558905] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 380.564141] RIP: 0033:0x457ec9 [ 380.567386] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 380.586328] RSP: 002b:00007f17c2a63c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 05:37:33 executing program 2: 05:37:33 executing program 4: 05:37:33 executing program 3: 05:37:33 executing program 2: 05:37:33 executing program 4: 05:37:33 executing program 3: [ 380.594078] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457ec9 [ 380.601393] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 380.608696] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 380.616010] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f17c2a646d4 [ 380.623317] R13: 00000000004c53fb R14: 00000000004d9038 R15: 00000000ffffffff 05:37:33 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x20000108}}, 0x0) sendmsg$can_bcm(r0, 0x0, 0x0) 05:37:33 executing program 0: 05:37:33 executing program 4: 05:37:33 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x10, 0x11, [@generic="e2abb4ec7645192056d52f"]}]}, 0x24}, 0x1, 0x300}, 0x0) 05:37:33 executing program 2: 05:37:33 executing program 3: 05:37:34 executing program 0: [ 381.058746] sysfs: cannot create duplicate filename '/class/ieee80211/â«´ìvE VÕ!' [ 381.066785] CPU: 1 PID: 15071 Comm: syz-executor1 Not tainted 5.0.0-rc1+ #7 [ 381.073937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 381.083329] Call Trace: [ 381.085989] dump_stack+0x173/0x1d0 [ 381.089683] sysfs_warn_dup+0x1c4/0x1f0 [ 381.093738] sysfs_do_create_link_sd+0x293/0x360 [ 381.098558] sysfs_create_link+0x125/0x190 [ 381.102841] device_add+0x1730/0x2ed0 05:37:34 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x20000108}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 05:37:34 executing program 2: [ 381.106715] wiphy_register+0x2b4b/0x3900 [ 381.110945] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 381.116187] ieee80211_register_hw+0x3ac2/0x5ca0 [ 381.120998] ? ieee80211_register_hw+0x1041/0x5ca0 [ 381.125989] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 381.131488] ? tasklet_hrtimer_init+0x114/0x1b0 [ 381.136199] ? hw_scan_work+0xc40/0xc40 [ 381.140222] mac80211_hwsim_new_radio+0x3267/0x4f50 [ 381.145424] hwsim_new_radio_nl+0x1444/0x1990 [ 381.149995] ? hwsim_tx_info_frame_received_nl+0x1220/0x1220 [ 381.155843] genl_rcv_msg+0x185f/0x1a60 [ 381.159909] netlink_rcv_skb+0x431/0x620 [ 381.164027] ? genl_unbind+0x390/0x390 [ 381.167971] genl_rcv+0x63/0x80 [ 381.171312] netlink_unicast+0xf3e/0x1020 [ 381.175524] netlink_sendmsg+0x127f/0x1300 [ 381.179825] ___sys_sendmsg+0xdb9/0x11b0 [ 381.183937] ? netlink_getsockopt+0x1460/0x1460 [ 381.188674] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 381.193923] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 381.199340] ? __fget_light+0x6e1/0x750 [ 381.203381] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 381.208632] __se_sys_sendmsg+0x305/0x460 [ 381.212859] __x64_sys_sendmsg+0x4a/0x70 [ 381.216976] do_syscall_64+0xbc/0xf0 [ 381.220760] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 381.225990] RIP: 0033:0x457ec9 [ 381.229233] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 381.248181] RSP: 002b:00007f17c2a63c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 05:37:34 executing program 3: 05:37:34 executing program 4: 05:37:34 executing program 2: [ 381.256038] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457ec9 [ 381.263349] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 381.270662] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 381.278076] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f17c2a646d4 [ 381.285395] R13: 00000000004c53fb R14: 00000000004d9038 R15: 00000000ffffffff 05:37:34 executing program 0: 05:37:34 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x20000108}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 05:37:34 executing program 2: 05:37:34 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x10, 0x11, [@generic="e2abb4ec7645192056d52f"]}]}, 0x24}, 0x1, 0x300}, 0x0) 05:37:34 executing program 3: creat(&(0x7f0000000040)='./file0\x00', 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x7a00, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) 05:37:34 executing program 4: 05:37:34 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x20000108}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 05:37:34 executing program 0: 05:37:34 executing program 2: 05:37:34 executing program 2: 05:37:34 executing program 4: [ 381.910933] sysfs: cannot create duplicate filename '/class/ieee80211/â«´ìvE VÕ!' [ 381.918953] CPU: 0 PID: 15107 Comm: syz-executor1 Not tainted 5.0.0-rc1+ #7 [ 381.926107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 381.935502] Call Trace: [ 381.938162] dump_stack+0x173/0x1d0 [ 381.941963] sysfs_warn_dup+0x1c4/0x1f0 [ 381.946004] sysfs_do_create_link_sd+0x293/0x360 [ 381.950830] sysfs_create_link+0x125/0x190 [ 381.955127] device_add+0x1730/0x2ed0 [ 381.959009] wiphy_register+0x2b4b/0x3900 [ 381.963246] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 381.968496] ieee80211_register_hw+0x3ac2/0x5ca0 [ 381.973314] ? ieee80211_register_hw+0x1041/0x5ca0 [ 381.978314] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 381.983816] ? tasklet_hrtimer_init+0x114/0x1b0 [ 381.988534] ? hw_scan_work+0xc40/0xc40 [ 381.992562] mac80211_hwsim_new_radio+0x3267/0x4f50 [ 381.997650] hwsim_new_radio_nl+0x1444/0x1990 [ 382.002210] ? hwsim_tx_info_frame_received_nl+0x1220/0x1220 [ 382.008061] genl_rcv_msg+0x185f/0x1a60 [ 382.012141] netlink_rcv_skb+0x431/0x620 [ 382.016255] ? genl_unbind+0x390/0x390 [ 382.020196] genl_rcv+0x63/0x80 [ 382.023532] netlink_unicast+0xf3e/0x1020 [ 382.028180] netlink_sendmsg+0x127f/0x1300 [ 382.032487] ___sys_sendmsg+0xdb9/0x11b0 [ 382.036604] ? netlink_getsockopt+0x1460/0x1460 [ 382.041335] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 382.046586] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 382.052001] ? __fget_light+0x6e1/0x750 [ 382.056032] ? kmsan_get_shadow_origin_ptr+0x60/0x440 05:37:35 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x20000108}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x5b, &(0x7f0000000380)={&(0x7f0000000300)={0x0, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "75abc64b7a58a964"}}, 0x48}}, 0x0) 05:37:35 executing program 0: 05:37:35 executing program 3: [ 382.061279] __se_sys_sendmsg+0x305/0x460 [ 382.065495] __x64_sys_sendmsg+0x4a/0x70 [ 382.069604] do_syscall_64+0xbc/0xf0 [ 382.073379] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 382.078600] RIP: 0033:0x457ec9 [ 382.081840] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 382.100777] RSP: 002b:00007f17c2a63c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 05:37:35 executing program 2: [ 382.108532] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457ec9 [ 382.115842] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 382.123150] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 382.130457] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f17c2a646d4 [ 382.137760] R13: 00000000004c53fb R14: 00000000004d9038 R15: 00000000ffffffff 05:37:35 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x10, 0x11, [@generic="e2abb4ec7645192056d52f"]}]}, 0x24}, 0x1, 0x300}, 0x0) 05:37:35 executing program 4: 05:37:35 executing program 0: 05:37:35 executing program 3: 05:37:35 executing program 5: 05:37:35 executing program 2: [ 382.532523] sysfs: cannot create duplicate filename '/class/ieee80211/â«´ìvE VÕ!' [ 382.540323] CPU: 0 PID: 15132 Comm: syz-executor1 Not tainted 5.0.0-rc1+ #7 [ 382.547455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 382.556844] Call Trace: [ 382.559492] dump_stack+0x173/0x1d0 [ 382.563189] sysfs_warn_dup+0x1c4/0x1f0 [ 382.567239] sysfs_do_create_link_sd+0x293/0x360 [ 382.572053] sysfs_create_link+0x125/0x190 [ 382.576340] device_add+0x1730/0x2ed0 05:37:35 executing program 2: 05:37:35 executing program 3: [ 382.580211] wiphy_register+0x2b4b/0x3900 [ 382.584446] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 382.589696] ieee80211_register_hw+0x3ac2/0x5ca0 [ 382.594513] ? ieee80211_register_hw+0x1041/0x5ca0 [ 382.599512] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 382.605015] ? tasklet_hrtimer_init+0x114/0x1b0 [ 382.609732] ? hw_scan_work+0xc40/0xc40 [ 382.613765] mac80211_hwsim_new_radio+0x3267/0x4f50 [ 382.618852] hwsim_new_radio_nl+0x1444/0x1990 [ 382.623420] ? hwsim_tx_info_frame_received_nl+0x1220/0x1220 [ 382.629276] genl_rcv_msg+0x185f/0x1a60 [ 382.633348] netlink_rcv_skb+0x431/0x620 [ 382.637629] ? genl_unbind+0x390/0x390 [ 382.641570] genl_rcv+0x63/0x80 [ 382.644904] netlink_unicast+0xf3e/0x1020 [ 382.649130] netlink_sendmsg+0x127f/0x1300 [ 382.653436] ___sys_sendmsg+0xdb9/0x11b0 [ 382.657550] ? netlink_getsockopt+0x1460/0x1460 [ 382.662281] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 382.667535] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 382.672946] ? __fget_light+0x6e1/0x750 [ 382.676985] ? kmsan_get_shadow_origin_ptr+0x60/0x440 05:37:35 executing program 0: [ 382.682238] __se_sys_sendmsg+0x305/0x460 [ 382.686463] __x64_sys_sendmsg+0x4a/0x70 [ 382.690569] do_syscall_64+0xbc/0xf0 [ 382.694336] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 382.699564] RIP: 0033:0x457ec9 [ 382.702806] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 382.721744] RSP: 002b:00007f17c2a63c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 05:37:35 executing program 4: 05:37:35 executing program 5: [ 382.729502] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457ec9 [ 382.736812] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 382.744122] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 382.751423] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f17c2a646d4 [ 382.758731] R13: 00000000004c53fb R14: 00000000004d9038 R15: 00000000ffffffff 05:37:35 executing program 3: 05:37:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x10, 0x11, [@generic="e2abb4ec7645192056d52f"]}]}, 0x24}, 0x1, 0x300}, 0x0) 05:37:36 executing program 2: 05:37:36 executing program 0: 05:37:36 executing program 5: 05:37:36 executing program 4: 05:37:36 executing program 3: [ 383.189336] sysfs: cannot create duplicate filename '/class/ieee80211/â«´ìvE VÕ!' [ 383.197302] CPU: 1 PID: 15156 Comm: syz-executor1 Not tainted 5.0.0-rc1+ #7 [ 383.204441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 383.213830] Call Trace: [ 383.216478] dump_stack+0x173/0x1d0 [ 383.220164] sysfs_warn_dup+0x1c4/0x1f0 [ 383.224211] sysfs_do_create_link_sd+0x293/0x360 [ 383.229035] sysfs_create_link+0x125/0x190 [ 383.233327] device_add+0x1730/0x2ed0 [ 383.237208] wiphy_register+0x2b4b/0x3900 [ 383.241438] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 383.246688] ieee80211_register_hw+0x3ac2/0x5ca0 [ 383.251517] ? ieee80211_register_hw+0x1041/0x5ca0 [ 383.256519] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 383.262030] ? tasklet_hrtimer_init+0x114/0x1b0 [ 383.266757] ? hw_scan_work+0xc40/0xc40 [ 383.270798] mac80211_hwsim_new_radio+0x3267/0x4f50 [ 383.275899] hwsim_new_radio_nl+0x1444/0x1990 [ 383.280475] ? hwsim_tx_info_frame_received_nl+0x1220/0x1220 [ 383.286321] genl_rcv_msg+0x185f/0x1a60 [ 383.290392] netlink_rcv_skb+0x431/0x620 [ 383.294504] ? genl_unbind+0x390/0x390 [ 383.298449] genl_rcv+0x63/0x80 [ 383.301787] netlink_unicast+0xf3e/0x1020 [ 383.306000] netlink_sendmsg+0x127f/0x1300 [ 383.310306] ___sys_sendmsg+0xdb9/0x11b0 [ 383.314422] ? netlink_getsockopt+0x1460/0x1460 [ 383.319158] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 383.324403] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 383.329813] ? __fget_light+0x6e1/0x750 [ 383.333848] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 383.339105] __se_sys_sendmsg+0x305/0x460 [ 383.343321] __x64_sys_sendmsg+0x4a/0x70 [ 383.347431] do_syscall_64+0xbc/0xf0 [ 383.351228] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 383.356450] RIP: 0033:0x457ec9 [ 383.359692] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 383.378635] RSP: 002b:00007f17c2a63c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 05:37:36 executing program 0: 05:37:36 executing program 4: 05:37:36 executing program 5: 05:37:36 executing program 0: 05:37:36 executing program 4: 05:37:36 executing program 5: [ 383.386392] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457ec9 [ 383.393698] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 383.401005] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 383.408307] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f17c2a646d4 [ 383.415612] R13: 00000000004c53fb R14: 00000000004d9038 R15: 00000000ffffffff 05:37:36 executing program 2: 05:37:36 executing program 3: 05:37:36 executing program 0: 05:37:36 executing program 4: 05:37:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x10, 0x11, [@generic="e2abb4ec7645192056d52f"]}]}, 0x24}, 0x1, 0x300}, 0x0) 05:37:36 executing program 5: [ 383.743232] sysfs: cannot create duplicate filename '/class/ieee80211/â«´ìvE VÕ!' [ 383.751035] CPU: 0 PID: 15177 Comm: syz-executor1 Not tainted 5.0.0-rc1+ #7 [ 383.758172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 383.767556] Call Trace: [ 383.770203] dump_stack+0x173/0x1d0 [ 383.773895] sysfs_warn_dup+0x1c4/0x1f0 [ 383.777924] sysfs_do_create_link_sd+0x293/0x360 [ 383.782740] sysfs_create_link+0x125/0x190 [ 383.787030] device_add+0x1730/0x2ed0 05:37:36 executing program 4: 05:37:36 executing program 3: [ 383.790902] wiphy_register+0x2b4b/0x3900 [ 383.795139] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 383.800380] ieee80211_register_hw+0x3ac2/0x5ca0 [ 383.805188] ? ieee80211_register_hw+0x1041/0x5ca0 [ 383.810198] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 383.815706] ? tasklet_hrtimer_init+0x114/0x1b0 [ 383.820424] ? hw_scan_work+0xc40/0xc40 [ 383.824834] mac80211_hwsim_new_radio+0x3267/0x4f50 [ 383.829926] hwsim_new_radio_nl+0x1444/0x1990 [ 383.834515] ? hwsim_tx_info_frame_received_nl+0x1220/0x1220 05:37:36 executing program 0: [ 383.840361] genl_rcv_msg+0x185f/0x1a60 [ 383.844427] netlink_rcv_skb+0x431/0x620 [ 383.848537] ? genl_unbind+0x390/0x390 [ 383.852476] genl_rcv+0x63/0x80 [ 383.855819] netlink_unicast+0xf3e/0x1020 [ 383.860016] netlink_sendmsg+0x127f/0x1300 [ 383.864321] ___sys_sendmsg+0xdb9/0x11b0 [ 383.868436] ? netlink_getsockopt+0x1460/0x1460 [ 383.873170] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 383.878416] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 383.883825] ? __fget_light+0x6e1/0x750 [ 383.887856] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 383.893102] __se_sys_sendmsg+0x305/0x460 [ 383.897330] __x64_sys_sendmsg+0x4a/0x70 [ 383.901439] do_syscall_64+0xbc/0xf0 [ 383.905234] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 383.910458] RIP: 0033:0x457ec9 [ 383.913695] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 383.932639] RSP: 002b:00007f17c2a63c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 05:37:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000480)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000001940)={"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"}) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:37:37 executing program 2: request_key(&(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0xfffffffffffffffb) 05:37:37 executing program 4: 05:37:37 executing program 3: [ 383.940391] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457ec9 [ 383.947695] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 383.955731] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 383.963031] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f17c2a646d4 [ 383.970335] R13: 00000000004c53fb R14: 00000000004d9038 R15: 00000000ffffffff 05:37:37 executing program 0: 05:37:37 executing program 2: 05:37:37 executing program 3: [ 384.333892] kvm: vcpu 0: requested 34784 ns lapic timer period limited to 200000 ns [ 384.341987] kvm: vcpu 0: requested 34784 ns lapic timer period limited to 200000 ns 05:37:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x10, 0x11, [@generic="e2abb4ec7645192056d52f"]}]}, 0x24}, 0x1, 0x300}, 0x0) 05:37:37 executing program 4: 05:37:37 executing program 0: 05:37:37 executing program 3: 05:37:37 executing program 2: [ 384.617205] sysfs: cannot create duplicate filename '/class/ieee80211/â«´ìvE VÕ!' [ 384.625203] CPU: 0 PID: 15212 Comm: syz-executor1 Not tainted 5.0.0-rc1+ #7 [ 384.632343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 384.641728] Call Trace: [ 384.644478] dump_stack+0x173/0x1d0 [ 384.648182] sysfs_warn_dup+0x1c4/0x1f0 [ 384.652238] sysfs_do_create_link_sd+0x293/0x360 [ 384.657056] sysfs_create_link+0x125/0x190 [ 384.661354] device_add+0x1730/0x2ed0 [ 384.665239] wiphy_register+0x2b4b/0x3900 [ 384.669465] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 384.674711] ieee80211_register_hw+0x3ac2/0x5ca0 [ 384.679531] ? ieee80211_register_hw+0x1041/0x5ca0 [ 384.684524] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 384.690023] ? tasklet_hrtimer_init+0x114/0x1b0 [ 384.694732] ? hw_scan_work+0xc40/0xc40 [ 384.698756] mac80211_hwsim_new_radio+0x3267/0x4f50 [ 384.703838] hwsim_new_radio_nl+0x1444/0x1990 [ 384.708411] ? hwsim_tx_info_frame_received_nl+0x1220/0x1220 [ 384.714260] genl_rcv_msg+0x185f/0x1a60 [ 384.718333] netlink_rcv_skb+0x431/0x620 [ 384.722440] ? genl_unbind+0x390/0x390 [ 384.726382] genl_rcv+0x63/0x80 [ 384.729716] netlink_unicast+0xf3e/0x1020 [ 384.733932] netlink_sendmsg+0x127f/0x1300 [ 384.738251] ___sys_sendmsg+0xdb9/0x11b0 [ 384.742362] ? netlink_getsockopt+0x1460/0x1460 [ 384.747090] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 384.752351] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 384.757766] ? __fget_light+0x6e1/0x750 [ 384.761815] ? kmsan_get_shadow_origin_ptr+0x60/0x440 05:37:37 executing program 5: 05:37:37 executing program 4: 05:37:37 executing program 3: 05:37:37 executing program 0: [ 384.767060] __se_sys_sendmsg+0x305/0x460 [ 384.771295] __x64_sys_sendmsg+0x4a/0x70 [ 384.775407] do_syscall_64+0xbc/0xf0 [ 384.779184] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 384.784414] RIP: 0033:0x457ec9 [ 384.787660] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 384.806936] RSP: 002b:00007f17c2a63c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 05:37:37 executing program 2: [ 384.814697] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457ec9 [ 384.822009] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 384.829318] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 384.836716] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f17c2a646d4 [ 384.844024] R13: 00000000004c53fb R14: 00000000004d9038 R15: 00000000ffffffff 05:37:38 executing program 4: 05:37:38 executing program 3: 05:37:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x10, 0x11, [@generic="e2abb4ec7645192056d52f"]}]}, 0x24}, 0x1, 0x300}, 0x0) 05:37:38 executing program 5: 05:37:38 executing program 2: 05:37:38 executing program 0: [ 385.257409] sysfs: cannot create duplicate filename '/class/ieee80211/â«´ìvE VÕ!' [ 385.265356] CPU: 0 PID: 15236 Comm: syz-executor1 Not tainted 5.0.0-rc1+ #7 [ 385.272493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 385.281878] Call Trace: [ 385.284613] dump_stack+0x173/0x1d0 [ 385.288303] sysfs_warn_dup+0x1c4/0x1f0 [ 385.292337] sysfs_do_create_link_sd+0x293/0x360 [ 385.297170] sysfs_create_link+0x125/0x190 [ 385.301460] device_add+0x1730/0x2ed0 [ 385.305335] wiphy_register+0x2b4b/0x3900 [ 385.309562] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 385.314825] ieee80211_register_hw+0x3ac2/0x5ca0 [ 385.319653] ? ieee80211_register_hw+0x1041/0x5ca0 [ 385.324648] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 385.330163] ? tasklet_hrtimer_init+0x114/0x1b0 [ 385.334877] ? hw_scan_work+0xc40/0xc40 [ 385.338901] mac80211_hwsim_new_radio+0x3267/0x4f50 [ 385.343991] hwsim_new_radio_nl+0x1444/0x1990 [ 385.348556] ? hwsim_tx_info_frame_received_nl+0x1220/0x1220 05:37:38 executing program 4: 05:37:38 executing program 3: 05:37:38 executing program 5: [ 385.354402] genl_rcv_msg+0x185f/0x1a60 [ 385.358458] netlink_rcv_skb+0x431/0x620 [ 385.362565] ? genl_unbind+0x390/0x390 [ 385.366509] genl_rcv+0x63/0x80 [ 385.369845] netlink_unicast+0xf3e/0x1020 [ 385.374053] netlink_sendmsg+0x127f/0x1300 [ 385.378370] ___sys_sendmsg+0xdb9/0x11b0 [ 385.382485] ? netlink_getsockopt+0x1460/0x1460 [ 385.387215] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 385.392469] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 385.397883] ? __fget_light+0x6e1/0x750 [ 385.401916] ? kmsan_get_shadow_origin_ptr+0x60/0x440 05:37:38 executing program 0: 05:37:38 executing program 2: [ 385.407167] __se_sys_sendmsg+0x305/0x460 [ 385.411388] __x64_sys_sendmsg+0x4a/0x70 [ 385.415496] do_syscall_64+0xbc/0xf0 [ 385.419283] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 385.424503] RIP: 0033:0x457ec9 [ 385.427744] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 385.446682] RSP: 002b:00007f17c2a63c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 385.454442] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457ec9 [ 385.462188] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 385.469499] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 385.476806] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f17c2a646d4 [ 385.484123] R13: 00000000004c53fb R14: 00000000004d9038 R15: 00000000ffffffff 05:37:38 executing program 0: 05:37:38 executing program 3: 05:37:38 executing program 4: 05:37:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x10, 0x11, [@generic="e2abb4ec7645192056d52f"]}]}, 0x24}, 0x1, 0x300}, 0x0) 05:37:38 executing program 2: 05:37:38 executing program 5: 05:37:38 executing program 0: 05:37:38 executing program 4: 05:37:38 executing program 3: 05:37:39 executing program 5: [ 386.005560] sysfs: cannot create duplicate filename '/class/ieee80211/â«´ìvE VÕ!' [ 386.013642] CPU: 1 PID: 15264 Comm: syz-executor1 Not tainted 5.0.0-rc1+ #7 [ 386.020777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 386.030162] Call Trace: [ 386.032818] dump_stack+0x173/0x1d0 [ 386.036516] sysfs_warn_dup+0x1c4/0x1f0 [ 386.040553] sysfs_do_create_link_sd+0x293/0x360 [ 386.045375] sysfs_create_link+0x125/0x190 [ 386.049666] device_add+0x1730/0x2ed0 [ 386.053546] wiphy_register+0x2b4b/0x3900 [ 386.057799] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 386.063049] ieee80211_register_hw+0x3ac2/0x5ca0 [ 386.067877] ? ieee80211_register_hw+0x1041/0x5ca0 [ 386.072875] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 386.078379] ? tasklet_hrtimer_init+0x114/0x1b0 [ 386.083102] ? hw_scan_work+0xc40/0xc40 [ 386.087139] mac80211_hwsim_new_radio+0x3267/0x4f50 [ 386.092229] hwsim_new_radio_nl+0x1444/0x1990 [ 386.096809] ? hwsim_tx_info_frame_received_nl+0x1220/0x1220 05:37:39 executing program 2: 05:37:39 executing program 5: [ 386.102665] genl_rcv_msg+0x185f/0x1a60 [ 386.106725] netlink_rcv_skb+0x431/0x620 [ 386.110842] ? genl_unbind+0x390/0x390 [ 386.114785] genl_rcv+0x63/0x80 [ 386.118120] netlink_unicast+0xf3e/0x1020 [ 386.122335] netlink_sendmsg+0x127f/0x1300 [ 386.126641] ___sys_sendmsg+0xdb9/0x11b0 [ 386.130755] ? netlink_getsockopt+0x1460/0x1460 [ 386.135484] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 386.140732] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 386.146151] ? __fget_light+0x6e1/0x750 [ 386.150191] ? kmsan_get_shadow_origin_ptr+0x60/0x440 05:37:39 executing program 0: 05:37:39 executing program 4: [ 386.155436] __se_sys_sendmsg+0x305/0x460 [ 386.159657] __x64_sys_sendmsg+0x4a/0x70 [ 386.163857] do_syscall_64+0xbc/0xf0 [ 386.167628] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 386.172850] RIP: 0033:0x457ec9 [ 386.176090] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 386.195043] RSP: 002b:00007f17c2a63c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 386.202809] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457ec9 [ 386.210126] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 386.217434] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 386.224747] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f17c2a646d4 [ 386.232054] R13: 00000000004c53fb R14: 00000000004d9038 R15: 00000000ffffffff 05:37:39 executing program 3: 05:37:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x10, 0x11, [@generic="e2abb4ec7645192056d52f"]}]}, 0x24}, 0x1, 0x300}, 0x0) 05:37:39 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f123c123f319bc070") setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000000340)=[{0x6, 0x8, 0x0, 0x7f}]}, 0x10) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) getsockname$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000180)=0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xc, 0x4, 0x4, 0x1, 0x0, r2}, 0x2c) fallocate(r1, 0x23, 0x6, 0x3) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000200)="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", 0x10c, 0x4d, 0x0, 0x0) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xd1) 05:37:39 executing program 0: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_udplite(0xa, 0x2, 0x88) write(r1, &(0x7f0000000340), 0x10000014c) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) getpgid(0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) keyctl$describe(0x6, 0x0, &(0x7f0000000380)=""/129, 0x81) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000040)={0x4, 0x8, 0x1}) pselect6(0x40, &(0x7f00000000c0)={0x64}, 0x0, 0x0, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) symlinkat(0x0, r1, 0x0) io_setup(0x4, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000002c0)={r1}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$bt_hci(r3, 0x0, 0x3, 0x0, &(0x7f00000005c0)) 05:37:39 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @multicast1}, 0x10) 05:37:39 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000580)) 05:37:39 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1004e20}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000180)={&(0x7f0000000200)=@pppol2tp, 0x80, &(0x7f0000000100)=[{&(0x7f0000000040)=""/10, 0xa}, {&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000000280)=""/179, 0xb3}], 0x3, &(0x7f0000000340)=""/185, 0xb9}, 0x20) [ 386.670438] sysfs: cannot create duplicate filename '/class/ieee80211/â«´ìvE VÕ!' [ 386.678417] CPU: 0 PID: 15294 Comm: syz-executor1 Not tainted 5.0.0-rc1+ #7 [ 386.685554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 386.694938] Call Trace: [ 386.698009] dump_stack+0x173/0x1d0 [ 386.701689] sysfs_warn_dup+0x1c4/0x1f0 [ 386.705709] sysfs_do_create_link_sd+0x293/0x360 [ 386.710496] sysfs_create_link+0x125/0x190 [ 386.714755] device_add+0x1730/0x2ed0 [ 386.718594] wiphy_register+0x2b4b/0x3900 [ 386.722784] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 386.727998] ieee80211_register_hw+0x3ac2/0x5ca0 [ 386.732782] ? ieee80211_register_hw+0x1041/0x5ca0 [ 386.737742] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 386.743218] ? tasklet_hrtimer_init+0x114/0x1b0 [ 386.747917] ? hw_scan_work+0xc40/0xc40 [ 386.751912] mac80211_hwsim_new_radio+0x3267/0x4f50 [ 386.756963] hwsim_new_radio_nl+0x1444/0x1990 [ 386.761498] ? hwsim_tx_info_frame_received_nl+0x1220/0x1220 [ 386.767326] genl_rcv_msg+0x185f/0x1a60 [ 386.771353] netlink_rcv_skb+0x431/0x620 [ 386.775455] ? genl_unbind+0x390/0x390 [ 386.779367] genl_rcv+0x63/0x80 [ 386.782678] netlink_unicast+0xf3e/0x1020 [ 386.786857] netlink_sendmsg+0x127f/0x1300 [ 386.791537] ___sys_sendmsg+0xdb9/0x11b0 [ 386.795668] ? netlink_getsockopt+0x1460/0x1460 [ 386.800372] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 386.805595] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 386.810985] ? __fget_light+0x6e1/0x750 [ 386.815026] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 386.820251] __se_sys_sendmsg+0x305/0x460 [ 386.824443] __x64_sys_sendmsg+0x4a/0x70 [ 386.828528] do_syscall_64+0xbc/0xf0 [ 386.832284] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 386.837490] RIP: 0033:0x457ec9 [ 386.840711] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 386.859680] RSP: 002b:00007f17c2a63c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 05:37:39 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r0, &(0x7f00000e5000)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r0, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x209) [ 386.867420] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457ec9 [ 386.874710] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 386.882002] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 386.889292] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f17c2a646d4 [ 386.896583] R13: 00000000004c53fb R14: 00000000004d9038 R15: 00000000ffffffff 05:37:40 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x10006, 0x0, 0x0, 0xffffffff}]}) rt_sigsuspend(0x0, 0x0) 05:37:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x10, 0x11, [@generic="e2abb4ec7645192056d52f"]}]}, 0x24}, 0x1, 0x300}, 0x0) [ 387.102838] kauditd_printk_skb: 4 callbacks suppressed [ 387.102915] audit: type=1326 audit(1547617060.150:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15301 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ad2a code=0xffff0000 [ 387.142583] sysfs: cannot create duplicate filename '/class/ieee80211/â«´ìvE VÕ!' [ 387.150427] CPU: 1 PID: 15306 Comm: syz-executor1 Not tainted 5.0.0-rc1+ #7 [ 387.157576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 387.166973] Call Trace: [ 387.169631] dump_stack+0x173/0x1d0 [ 387.173332] sysfs_warn_dup+0x1c4/0x1f0 [ 387.177381] sysfs_do_create_link_sd+0x293/0x360 [ 387.182220] sysfs_create_link+0x125/0x190 [ 387.186515] device_add+0x1730/0x2ed0 [ 387.190400] wiphy_register+0x2b4b/0x3900 [ 387.194638] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 387.199898] ieee80211_register_hw+0x3ac2/0x5ca0 [ 387.204724] ? ieee80211_register_hw+0x1041/0x5ca0 [ 387.209848] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 387.215549] ? tasklet_hrtimer_init+0x114/0x1b0 [ 387.220273] ? hw_scan_work+0xc40/0xc40 [ 387.224312] mac80211_hwsim_new_radio+0x3267/0x4f50 [ 387.229411] hwsim_new_radio_nl+0x1444/0x1990 [ 387.233986] ? hwsim_tx_info_frame_received_nl+0x1220/0x1220 [ 387.239842] genl_rcv_msg+0x185f/0x1a60 [ 387.243914] netlink_rcv_skb+0x431/0x620 [ 387.248032] ? genl_unbind+0x390/0x390 [ 387.251986] genl_rcv+0x63/0x80 [ 387.255337] netlink_unicast+0xf3e/0x1020 [ 387.259557] netlink_sendmsg+0x127f/0x1300 [ 387.263877] ___sys_sendmsg+0xdb9/0x11b0 [ 387.267997] ? netlink_getsockopt+0x1460/0x1460 [ 387.272740] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 387.277996] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 387.283417] ? __fget_light+0x6e1/0x750 [ 387.287463] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 387.292723] __se_sys_sendmsg+0x305/0x460 [ 387.296955] __x64_sys_sendmsg+0x4a/0x70 [ 387.301074] do_syscall_64+0xbc/0xf0 [ 387.304880] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 387.310136] RIP: 0033:0x457ec9 [ 387.313388] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 387.332947] RSP: 002b:00007f17c2a63c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 387.340725] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457ec9 [ 387.348063] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 387.355410] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 387.362737] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f17c2a646d4 [ 387.370059] R13: 00000000004c53fb R14: 00000000004d9038 R15: 00000000ffffffff 05:37:40 executing program 5: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000140)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0401273, &(0x7f00000000c0)={[], 0x0, 0x1000, 0x1000, 0xfc}) 05:37:40 executing program 3: clone(0x2000000002001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, 0x0, 0x8) r0 = getpid() pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ptrace(0x4206, r0) tkill(r0, 0x9) 05:37:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x10, 0x11, [@generic="e2abb4ec7645192056d52f"]}]}, 0x24}, 0x1, 0x300}, 0x0) 05:37:40 executing program 0: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_udplite(0xa, 0x2, 0x88) write(r1, &(0x7f0000000340), 0x10000014c) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) getpgid(0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) keyctl$describe(0x6, 0x0, &(0x7f0000000380)=""/129, 0x81) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000040)={0x4, 0x8, 0x1}) pselect6(0x40, &(0x7f00000000c0)={0x64}, 0x0, 0x0, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) symlinkat(0x0, r1, 0x0) io_setup(0x4, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000002c0)={r1}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$bt_hci(r3, 0x0, 0x3, 0x0, &(0x7f00000005c0)) [ 387.685591] sysfs: cannot create duplicate filename '/class/ieee80211/â«´ìvE VÕ!' [ 387.693781] CPU: 1 PID: 15329 Comm: syz-executor1 Not tainted 5.0.0-rc1+ #7 [ 387.700928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 387.710330] Call Trace: [ 387.712991] dump_stack+0x173/0x1d0 [ 387.716698] sysfs_warn_dup+0x1c4/0x1f0 [ 387.720763] sysfs_do_create_link_sd+0x293/0x360 [ 387.725598] sysfs_create_link+0x125/0x190 [ 387.729899] device_add+0x1730/0x2ed0 [ 387.733790] wiphy_register+0x2b4b/0x3900 [ 387.738028] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 387.743378] ieee80211_register_hw+0x3ac2/0x5ca0 [ 387.748209] ? ieee80211_register_hw+0x1041/0x5ca0 [ 387.753213] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 387.758724] ? tasklet_hrtimer_init+0x114/0x1b0 [ 387.763453] ? hw_scan_work+0xc40/0xc40 [ 387.767497] mac80211_hwsim_new_radio+0x3267/0x4f50 [ 387.772591] hwsim_new_radio_nl+0x1444/0x1990 [ 387.777179] ? hwsim_tx_info_frame_received_nl+0x1220/0x1220 [ 387.783034] genl_rcv_msg+0x185f/0x1a60 [ 387.787147] netlink_rcv_skb+0x431/0x620 [ 387.791269] ? genl_unbind+0x390/0x390 [ 387.795221] genl_rcv+0x63/0x80 [ 387.798565] netlink_unicast+0xf3e/0x1020 [ 387.802791] netlink_sendmsg+0x127f/0x1300 [ 387.807134] ___sys_sendmsg+0xdb9/0x11b0 [ 387.811275] ? netlink_getsockopt+0x1460/0x1460 [ 387.816019] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 387.821276] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 387.826706] ? __fget_light+0x6e1/0x750 [ 387.830767] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 387.836022] __se_sys_sendmsg+0x305/0x460 [ 387.840254] __x64_sys_sendmsg+0x4a/0x70 [ 387.844379] do_syscall_64+0xbc/0xf0 [ 387.848178] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 387.853431] RIP: 0033:0x457ec9 [ 387.856676] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 387.875632] RSP: 002b:00007f17c2a63c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 05:37:40 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) 05:37:40 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0) sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="2e0000002e008183ad5de0713c444d000b0000001000034000ff39a0053582c137153e37835b3f00040000000000", 0x2e}], 0x1}, 0x0) [ 387.883402] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457ec9 [ 387.890718] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 387.898039] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 387.905353] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f17c2a646d4 [ 387.912668] R13: 00000000004c53fb R14: 00000000004d9038 R15: 00000000ffffffff 05:37:41 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$sock_attach_bpf(r0, 0x6, 0x3, &(0x7f0000000200), 0x4) 05:37:41 executing program 2: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x10006, 0x0, 0x0, 0xffffffff}]}) capget(&(0x7f0000000100)={0x20071026}, 0x0) 05:37:41 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) splice(r0, 0x0, r1, 0x0, 0x18, 0x0) 05:37:41 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x10006, 0x0, 0x0, 0xffffffff}]}) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) [ 388.167203] audit: type=1326 audit(1547617061.210:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15349 comm="syz-executor2" exe="/root/syz-executor2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ad2a code=0xffff0000 05:37:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c12") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x10, 0x11, [@generic="e2abb4ec7645192056d52f"]}]}, 0x24}, 0x1, 0x300}, 0x0) [ 388.316980] audit: type=1326 audit(1547617061.360:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15360 comm="syz-executor5" exe="/root/syz-executor5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ad2a code=0xffff0000 [ 388.347501] sysfs: cannot create duplicate filename '/class/ieee80211/â«´ìvE VÕ!' [ 388.355408] CPU: 0 PID: 15365 Comm: syz-executor1 Not tainted 5.0.0-rc1+ #7 [ 388.362552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 388.371946] Call Trace: [ 388.374604] dump_stack+0x173/0x1d0 [ 388.378307] sysfs_warn_dup+0x1c4/0x1f0 [ 388.382356] sysfs_do_create_link_sd+0x293/0x360 [ 388.387198] sysfs_create_link+0x125/0x190 [ 388.391495] device_add+0x1730/0x2ed0 [ 388.395382] wiphy_register+0x2b4b/0x3900 [ 388.399623] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 388.404871] ieee80211_register_hw+0x3ac2/0x5ca0 [ 388.409687] ? ieee80211_register_hw+0x1041/0x5ca0 [ 388.414685] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 388.420192] ? tasklet_hrtimer_init+0x114/0x1b0 [ 388.424919] ? hw_scan_work+0xc40/0xc40 [ 388.428951] mac80211_hwsim_new_radio+0x3267/0x4f50 [ 388.434048] hwsim_new_radio_nl+0x1444/0x1990 [ 388.438642] ? hwsim_tx_info_frame_received_nl+0x1220/0x1220 [ 388.444492] genl_rcv_msg+0x185f/0x1a60 [ 388.448557] netlink_rcv_skb+0x431/0x620 [ 388.452675] ? genl_unbind+0x390/0x390 [ 388.456623] genl_rcv+0x63/0x80 [ 388.459974] netlink_unicast+0xf3e/0x1020 05:37:41 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x10006, 0x0, 0x0, 0xffffffff}]}) quotactl(0x0, 0x0, 0x0, 0x0) 05:37:41 executing program 3: futex(&(0x7f0000000100)=0x1, 0x800000000006, 0x0, &(0x7f0000000040)={0x77359400}, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000100)={0x0, 'bond\x00'}, 0x1ca) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) clone(0x0, &(0x7f0000623000), 0x0, 0x0, 0x0) tkill(r0, 0x1000000000016) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) [ 388.464193] netlink_sendmsg+0x127f/0x1300 [ 388.468509] ___sys_sendmsg+0xdb9/0x11b0 [ 388.472625] ? netlink_getsockopt+0x1460/0x1460 [ 388.477365] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 388.482617] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 388.488041] ? __fget_light+0x6e1/0x750 [ 388.492088] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 388.497365] __se_sys_sendmsg+0x305/0x460 [ 388.501591] __x64_sys_sendmsg+0x4a/0x70 [ 388.505715] do_syscall_64+0xbc/0xf0 [ 388.509501] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 388.514732] RIP: 0033:0x457ec9 [ 388.517979] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 388.536931] RSP: 002b:00007f17c2a63c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 388.544698] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457ec9 [ 388.552017] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 388.559336] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 388.566675] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f17c2a646d4 [ 388.573996] R13: 00000000004c53fb R14: 00000000004d9038 R15: 00000000ffffffff [ 388.645584] audit: type=1326 audit(1547617061.690:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15367 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ad2a code=0xffff0000 05:37:41 executing program 0: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_udplite(0xa, 0x2, 0x88) write(r1, &(0x7f0000000340), 0x10000014c) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) getpgid(0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) keyctl$describe(0x6, 0x0, &(0x7f0000000380)=""/129, 0x81) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000040)={0x4, 0x8, 0x1}) pselect6(0x40, &(0x7f00000000c0)={0x64}, 0x0, 0x0, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) symlinkat(0x0, r1, 0x0) io_setup(0x4, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000002c0)={r1}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$bt_hci(r3, 0x0, 0x3, 0x0, &(0x7f00000005c0)) 05:37:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c12") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x10, 0x11, [@generic="e2abb4ec7645192056d52f"]}]}, 0x24}, 0x1, 0x300}, 0x0) [ 388.798890] sysfs: cannot create duplicate filename '/class/ieee80211/â«´ìvE VÕ!' [ 388.806858] CPU: 0 PID: 15379 Comm: syz-executor1 Not tainted 5.0.0-rc1+ #7 [ 388.814005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 388.823403] Call Trace: [ 388.826064] dump_stack+0x173/0x1d0 [ 388.829783] sysfs_warn_dup+0x1c4/0x1f0 [ 388.833832] sysfs_do_create_link_sd+0x293/0x360 [ 388.838669] sysfs_create_link+0x125/0x190 [ 388.842964] device_add+0x1730/0x2ed0 [ 388.846855] wiphy_register+0x2b4b/0x3900 [ 388.851113] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 388.856373] ieee80211_register_hw+0x3ac2/0x5ca0 [ 388.861205] ? ieee80211_register_hw+0x1041/0x5ca0 [ 388.866250] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 388.871762] ? tasklet_hrtimer_init+0x114/0x1b0 [ 388.876485] ? hw_scan_work+0xc40/0xc40 [ 388.880528] mac80211_hwsim_new_radio+0x3267/0x4f50 [ 388.885629] hwsim_new_radio_nl+0x1444/0x1990 [ 388.890211] ? hwsim_tx_info_frame_received_nl+0x1220/0x1220 [ 388.896075] genl_rcv_msg+0x185f/0x1a60 [ 388.900191] netlink_rcv_skb+0x431/0x620 [ 388.904318] ? genl_unbind+0x390/0x390 [ 388.908265] genl_rcv+0x63/0x80 [ 388.911606] netlink_unicast+0xf3e/0x1020 [ 388.915815] netlink_sendmsg+0x127f/0x1300 [ 388.920148] ___sys_sendmsg+0xdb9/0x11b0 [ 388.924288] ? netlink_getsockopt+0x1460/0x1460 [ 388.929016] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 388.934253] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 388.939659] ? __fget_light+0x6e1/0x750 [ 388.943677] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 388.948903] __se_sys_sendmsg+0x305/0x460 [ 388.953109] __x64_sys_sendmsg+0x4a/0x70 [ 388.957603] do_syscall_64+0xbc/0xf0 [ 388.961361] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 388.966574] RIP: 0033:0x457ec9 [ 388.969793] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 388.988722] RSP: 002b:00007f17c2a63c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 05:37:42 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu\x00\xa4-X\x8a\xa8V8)\xdc\xe4\x18\x00&\xe1?k\x19P\x13\xb0o\xde\xca%\x1a\xca7\xa1\x1e\xd1\x1e\x84\xa0\xeb\x93bS\x1a\xeeC{\b\xeb\xa5\xf5\xbe\xf16\xe2h\xbcW{\xd9\x1cP\xc5q\x99\x83\xd6ntl\x99\xf2y\x01\xdd\x7f\x81\x91%\x00\xdb\xc6\t5\\\x84u\xc0W\x01\x97}\x97I\x81\xc2\x19\xb6a\x8a\r\xea= \x15\x90\x93&\xfc\xa5J\xd3o\x1fI#t', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000900)='TIPC\x00') fchdir(r0) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x8000000000000) write$P9_RREMOVE(r1, &(0x7f0000000280)={0x7}, 0xbb35e999) r2 = open(0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) fdatasync(r1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000040)=0x5, 0x4) ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f0000000080)) [ 388.996466] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457ec9 [ 389.004118] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 389.011408] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 389.018698] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f17c2a646d4 [ 389.026164] R13: 00000000004c53fb R14: 00000000004d9038 R15: 00000000ffffffff 05:37:42 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_score_adj\x00') lseek(r0, 0x80004, 0x80000000001) 05:37:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c12") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x10, 0x11, [@generic="e2abb4ec7645192056d52f"]}]}, 0x24}, 0x1, 0x300}, 0x0) 05:37:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x3003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x5000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 389.292236] sysfs: cannot create duplicate filename '/class/ieee80211/â«´ìvE VÕ!' [ 389.300652] CPU: 0 PID: 15397 Comm: syz-executor1 Not tainted 5.0.0-rc1+ #7 [ 389.307796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 389.317192] Call Trace: [ 389.319857] dump_stack+0x173/0x1d0 [ 389.323560] sysfs_warn_dup+0x1c4/0x1f0 [ 389.327608] sysfs_do_create_link_sd+0x293/0x360 [ 389.332442] sysfs_create_link+0x125/0x190 [ 389.336759] device_add+0x1730/0x2ed0 [ 389.340643] wiphy_register+0x2b4b/0x3900 [ 389.344880] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 389.350158] ieee80211_register_hw+0x3ac2/0x5ca0 [ 389.354986] ? ieee80211_register_hw+0x1041/0x5ca0 [ 389.359992] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 389.365508] ? tasklet_hrtimer_init+0x114/0x1b0 [ 389.370242] ? hw_scan_work+0xc40/0xc40 [ 389.374290] mac80211_hwsim_new_radio+0x3267/0x4f50 [ 389.379390] hwsim_new_radio_nl+0x1444/0x1990 [ 389.383972] ? hwsim_tx_info_frame_received_nl+0x1220/0x1220 [ 389.389824] genl_rcv_msg+0x185f/0x1a60 [ 389.393897] netlink_rcv_skb+0x431/0x620 [ 389.398000] ? genl_unbind+0x390/0x390 [ 389.401936] genl_rcv+0x63/0x80 [ 389.405277] netlink_unicast+0xf3e/0x1020 [ 389.409493] netlink_sendmsg+0x127f/0x1300 [ 389.413812] ___sys_sendmsg+0xdb9/0x11b0 [ 389.417942] ? netlink_getsockopt+0x1460/0x1460 [ 389.422686] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 389.428061] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 389.433480] ? __fget_light+0x6e1/0x750 [ 389.437496] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 389.442728] __se_sys_sendmsg+0x305/0x460 [ 389.446922] __x64_sys_sendmsg+0x4a/0x70 [ 389.451115] do_syscall_64+0xbc/0xf0 [ 389.454867] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 389.460079] RIP: 0033:0x457ec9 [ 389.463319] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 389.482252] RSP: 002b:00007f17c2a63c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 05:37:42 executing program 5: mkdir(&(0x7f0000001340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getdents(r0, &(0x7f0000001480)=""/4096, 0x1000) r2 = inotify_init() inotify_add_watch(r2, &(0x7f00000012c0)='./file0\x00', 0x80000009) getdents(r0, 0x0, 0x0) [ 389.489986] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457ec9 [ 389.497275] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 389.504564] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 389.511891] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f17c2a646d4 [ 389.519187] R13: 00000000004c53fb R14: 00000000004d9038 R15: 00000000ffffffff [ 389.537793] audit: type=1326 audit(1547617062.580:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15367 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ad2a code=0xffff0000 05:37:42 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet_int(r0, 0x0, 0x1f, &(0x7f0000000080)=0x6, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 05:37:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x10, 0x11, [@generic="e2abb4ec7645192056d52f"]}]}, 0x24}, 0x1, 0x300}, 0x0) 05:37:42 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x8000000000000) write$P9_RREMOVE(r0, &(0x7f0000000280)={0x7}, 0xbb35e999) r1 = open(&(0x7f0000000000)='./file0\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) [ 389.879070] sysfs: cannot create duplicate filename '/class/ieee80211/â«´ìvE VÕ!' [ 389.887223] CPU: 1 PID: 15419 Comm: syz-executor1 Not tainted 5.0.0-rc1+ #7 [ 389.894367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 389.903768] Call Trace: [ 389.906422] dump_stack+0x173/0x1d0 [ 389.910139] sysfs_warn_dup+0x1c4/0x1f0 [ 389.914194] sysfs_do_create_link_sd+0x293/0x360 [ 389.919020] sysfs_create_link+0x125/0x190 [ 389.923314] device_add+0x1730/0x2ed0 [ 389.927202] wiphy_register+0x2b4b/0x3900 [ 389.931437] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 389.936697] ieee80211_register_hw+0x3ac2/0x5ca0 [ 389.941525] ? ieee80211_register_hw+0x1041/0x5ca0 [ 389.946523] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 389.952039] ? tasklet_hrtimer_init+0x114/0x1b0 [ 389.956767] ? hw_scan_work+0xc40/0xc40 [ 389.960805] mac80211_hwsim_new_radio+0x3267/0x4f50 [ 389.966189] hwsim_new_radio_nl+0x1444/0x1990 [ 389.970776] ? hwsim_tx_info_frame_received_nl+0x1220/0x1220 [ 389.976740] genl_rcv_msg+0x185f/0x1a60 [ 389.980823] netlink_rcv_skb+0x431/0x620 [ 389.984947] ? genl_unbind+0x390/0x390 [ 389.988910] genl_rcv+0x63/0x80 [ 389.992263] netlink_unicast+0xf3e/0x1020 [ 389.996484] netlink_sendmsg+0x127f/0x1300 [ 390.000803] ___sys_sendmsg+0xdb9/0x11b0 [ 390.004930] ? netlink_getsockopt+0x1460/0x1460 [ 390.009668] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 390.014923] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 390.020344] ? __fget_light+0x6e1/0x750 [ 390.024394] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 390.029646] __se_sys_sendmsg+0x305/0x460 [ 390.033878] __x64_sys_sendmsg+0x4a/0x70 [ 390.038001] do_syscall_64+0xbc/0xf0 [ 390.041786] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 390.047016] RIP: 0033:0x457ec9 [ 390.050264] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 390.069215] RSP: 002b:00007f17c2a63c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 05:37:43 executing program 4: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x10006, 0x0, 0x0, 0xffffffff}]}) ftruncate(r0, 0x0) 05:37:43 executing program 0: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x10006, 0x0, 0x0, 0xffffffff}]}) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) chdir(&(0x7f0000000140)='./file0\x00') 05:37:43 executing program 2: pipe(&(0x7f0000001600)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) write(r1, &(0x7f0000000140)="a9", 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) [ 390.076980] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457ec9 [ 390.084298] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 390.091616] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 390.098929] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f17c2a646d4 [ 390.106247] R13: 00000000004c53fb R14: 00000000004d9038 R15: 00000000ffffffff 05:37:43 executing program 3: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(0x0) request_key(0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) chroot(&(0x7f00000004c0)='./file0\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 05:37:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x10, 0x11, [@generic="e2abb4ec7645192056d52f"]}]}, 0x24}, 0x1, 0x300}, 0x0) [ 390.282367] audit: type=1326 audit(1547617063.330:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15427 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ad2a code=0xffff0000 [ 390.347775] sysfs: cannot create duplicate filename '/class/ieee80211/â«´ìvE VÕ!' [ 390.355781] CPU: 1 PID: 15437 Comm: syz-executor1 Not tainted 5.0.0-rc1+ #7 [ 390.362924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 390.370244] audit: type=1326 audit(1547617063.360:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15426 comm="syz-executor0" exe="/root/syz-executor0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ad2a code=0xffff0000 [ 390.372314] Call Trace: [ 390.372373] dump_stack+0x173/0x1d0 [ 390.372425] sysfs_warn_dup+0x1c4/0x1f0 [ 390.372467] sysfs_do_create_link_sd+0x293/0x360 [ 390.372516] sysfs_create_link+0x125/0x190 [ 390.413327] device_add+0x1730/0x2ed0 [ 390.417186] wiphy_register+0x2b4b/0x3900 [ 390.421387] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 390.426617] ieee80211_register_hw+0x3ac2/0x5ca0 [ 390.431455] ? ieee80211_register_hw+0x1041/0x5ca0 [ 390.436428] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 390.441909] ? tasklet_hrtimer_init+0x114/0x1b0 [ 390.446601] ? hw_scan_work+0xc40/0xc40 [ 390.450601] mac80211_hwsim_new_radio+0x3267/0x4f50 [ 390.455660] hwsim_new_radio_nl+0x1444/0x1990 [ 390.460198] ? hwsim_tx_info_frame_received_nl+0x1220/0x1220 [ 390.466024] genl_rcv_msg+0x185f/0x1a60 [ 390.470058] netlink_rcv_skb+0x431/0x620 [ 390.474155] ? genl_unbind+0x390/0x390 [ 390.478070] genl_rcv+0x63/0x80 [ 390.481392] netlink_unicast+0xf3e/0x1020 [ 390.485587] netlink_sendmsg+0x127f/0x1300 [ 390.489864] ___sys_sendmsg+0xdb9/0x11b0 [ 390.493995] ? netlink_getsockopt+0x1460/0x1460 [ 390.498699] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 390.503923] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 390.509313] ? __fget_light+0x6e1/0x750 [ 390.513325] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 390.518766] __se_sys_sendmsg+0x305/0x460 [ 390.522957] __x64_sys_sendmsg+0x4a/0x70 [ 390.527044] do_syscall_64+0xbc/0xf0 [ 390.530791] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 390.536001] RIP: 0033:0x457ec9 [ 390.539219] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 390.558153] RSP: 002b:00007f17c2a63c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 390.565888] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457ec9 [ 390.573181] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 390.580469] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 390.587760] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f17c2a646d4 [ 390.595048] R13: 00000000004c53fb R14: 00000000004d9038 R15: 00000000ffffffff 05:37:43 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x8000000002, 0x0) rt_sigprocmask(0x0, &(0x7f0000001880)={0x7fffffff}, 0x0, 0x8) splice(r1, 0x0, r2, 0x0, 0x200, 0x0) 05:37:43 executing program 2: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) chroot(&(0x7f00000004c0)='./file0\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 05:37:43 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x1f, 0x9}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xd, 0xc, 0x4, 0xe9, 0x0, r0}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f00000001c0), 0x0}, 0x20) 05:37:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x10, 0x11, [@generic="e2abb4ec7645192056d52f"]}]}, 0x24}, 0x1, 0x300}, 0x0) 05:37:44 executing program 5: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000000)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$unlink(0x9, r0, 0xfffffffffffffffd) [ 391.026313] audit: type=1326 audit(1547617064.070:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15426 comm="syz-executor0" exe="/root/syz-executor0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ad2a code=0xffff0000 [ 391.172118] sysfs: cannot create duplicate filename '/class/ieee80211/â«´ìvE VÕ!' [ 391.179928] CPU: 0 PID: 15467 Comm: syz-executor1 Not tainted 5.0.0-rc1+ #7 [ 391.187069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 391.196483] Call Trace: [ 391.199162] dump_stack+0x173/0x1d0 [ 391.202863] sysfs_warn_dup+0x1c4/0x1f0 [ 391.206907] sysfs_do_create_link_sd+0x293/0x360 [ 391.211738] sysfs_create_link+0x125/0x190 [ 391.216073] device_add+0x1730/0x2ed0 05:37:44 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) pwritev(0xffffffffffffffff, 0x0, 0xff, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_mtu(r2, 0x29, 0x17, 0x0, 0x0) getgid() listen(r1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) accept4(r1, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) semget$private(0x0, 0x0, 0x0) lstat(0x0, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000180)) [ 391.219976] wiphy_register+0x2b4b/0x3900 [ 391.224214] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 391.229476] ieee80211_register_hw+0x3ac2/0x5ca0 [ 391.234316] ? ieee80211_register_hw+0x1041/0x5ca0 [ 391.240122] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 391.245641] ? tasklet_hrtimer_init+0x114/0x1b0 [ 391.250368] ? hw_scan_work+0xc40/0xc40 [ 391.254411] mac80211_hwsim_new_radio+0x3267/0x4f50 [ 391.259513] hwsim_new_radio_nl+0x1444/0x1990 [ 391.264087] ? hwsim_tx_info_frame_received_nl+0x1220/0x1220 05:37:44 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000540)='/dev/zero\x00', 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) close(r0) prctl$PR_SET_ENDIAN(0x14, 0x0) socket$unix(0x1, 0x1, 0x0) prctl$PR_SET_ENDIAN(0x14, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/180, 0xb4, 0x0, 0x0, 0x0) [ 391.269961] genl_rcv_msg+0x185f/0x1a60 [ 391.274032] netlink_rcv_skb+0x431/0x620 [ 391.278172] ? genl_unbind+0x390/0x390 [ 391.282142] genl_rcv+0x63/0x80 [ 391.285491] netlink_unicast+0xf3e/0x1020 [ 391.289719] netlink_sendmsg+0x127f/0x1300 [ 391.294043] ___sys_sendmsg+0xdb9/0x11b0 [ 391.298182] ? netlink_getsockopt+0x1460/0x1460 [ 391.302928] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 391.308186] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 391.313616] ? __fget_light+0x6e1/0x750 [ 391.317659] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 391.322919] __se_sys_sendmsg+0x305/0x460 [ 391.327167] __x64_sys_sendmsg+0x4a/0x70 [ 391.331287] do_syscall_64+0xbc/0xf0 [ 391.335056] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 391.340280] RIP: 0033:0x457ec9 [ 391.343504] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 391.362427] RSP: 002b:00007f17c2a63c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 391.370166] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457ec9 [ 391.377459] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 391.384751] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 391.392037] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f17c2a646d4 [ 391.399352] R13: 00000000004c53fb R14: 00000000004d9038 R15: 00000000ffffffff 05:37:44 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) accept(0xffffffffffffffff, 0x0, 0x0) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000680)={0x0, @multicast2, 0x4e24, 0x0, 'lc\x00', 0x20}, 0x2c) getresuid(0x0, &(0x7f0000000600), 0x0) 05:37:44 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x1e628281cc4f499f, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x4, &(0x7f0000000000), 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x103080, 0x0) connect$caif(r3, &(0x7f00000001c0)=@dbg={0x25, 0x7ff, 0x5}, 0x18) socketpair(0xd, 0x2, 0x81, &(0x7f00000000c0)) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe9b) 05:37:44 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) close(r1) 05:37:44 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x3003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x0, 0x104000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:37:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a0") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x10, 0x11, [@generic="e2abb4ec7645192056d52f"]}]}, 0x24}, 0x1, 0x300}, 0x0) 05:37:44 executing program 4: creat(&(0x7f00000305c0)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x1010, 0x80) 05:37:44 executing program 5: open(&(0x7f0000000000)='./file0\x00', 0x110001, 0x28) [ 391.726300] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20004 [ 391.752324] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20004 05:37:44 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getuid() unshare(0x200) io_setup(0x7, &(0x7f00000000c0)=0x0) r2 = creat(&(0x7f0000000100)='./file0\x00', 0xc6) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x2, 0x9, r0, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, r2}]) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') setns(r3, 0x0) clone(0x70024103, 0x0, 0x0, 0x0, 0x0) [ 391.886630] sysfs: cannot create duplicate filename '/class/ieee80211/â«´ìvE VÕ!' [ 391.894503] CPU: 0 PID: 15502 Comm: syz-executor1 Not tainted 5.0.0-rc1+ #7 [ 391.902596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 391.911988] Call Trace: [ 391.914653] dump_stack+0x173/0x1d0 [ 391.918356] sysfs_warn_dup+0x1c4/0x1f0 [ 391.922402] sysfs_do_create_link_sd+0x293/0x360 [ 391.927241] sysfs_create_link+0x125/0x190 [ 391.931536] device_add+0x1730/0x2ed0 05:37:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x3003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x0, 0x104000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 391.935425] wiphy_register+0x2b4b/0x3900 [ 391.939664] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 391.944924] ieee80211_register_hw+0x3ac2/0x5ca0 [ 391.949746] ? ieee80211_register_hw+0x1041/0x5ca0 [ 391.954753] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 391.960271] ? tasklet_hrtimer_init+0x114/0x1b0 [ 391.964992] ? hw_scan_work+0xc40/0xc40 [ 391.969028] mac80211_hwsim_new_radio+0x3267/0x4f50 [ 391.974156] hwsim_new_radio_nl+0x1444/0x1990 [ 391.978733] ? hwsim_tx_info_frame_received_nl+0x1220/0x1220 05:37:45 executing program 5: r0 = socket$inet(0x2, 0x2, 0x2200000088) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1004e20}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x8084, &(0x7f00000002c0)={0x2, 0x4e20}, 0x10) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000c00)=0x6, 0x4) sendto$inet(r0, &(0x7f0000000440)="dd", 0x1, 0x0, 0x0, 0x0) [ 391.984579] genl_rcv_msg+0x185f/0x1a60 [ 391.988643] netlink_rcv_skb+0x431/0x620 [ 391.992757] ? genl_unbind+0x390/0x390 [ 391.996706] genl_rcv+0x63/0x80 [ 392.000042] netlink_unicast+0xf3e/0x1020 [ 392.004263] netlink_sendmsg+0x127f/0x1300 [ 392.008579] ___sys_sendmsg+0xdb9/0x11b0 [ 392.012700] ? netlink_getsockopt+0x1460/0x1460 [ 392.017433] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 392.022688] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 392.028128] ? __fget_light+0x6e1/0x750 [ 392.032187] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 392.037445] __se_sys_sendmsg+0x305/0x460 [ 392.041673] __x64_sys_sendmsg+0x4a/0x70 [ 392.045790] do_syscall_64+0xbc/0xf0 [ 392.049576] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 392.054805] RIP: 0033:0x457ec9 [ 392.058054] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 392.066421] IPVS: ftp: loaded support on port[0] = 21 [ 392.077016] RSP: 002b:00007f17c2a63c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 392.077052] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457ec9 [ 392.077073] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 392.077110] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 392.077131] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f17c2a646d4 [ 392.077165] R13: 00000000004c53fb R14: 00000000004d9038 R15: 00000000ffffffff 05:37:45 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 05:37:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x3003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x0, 0x104000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:37:45 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f0000000000)=@in={0x2, 0x0, @initdev}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=[{0x90, 0x119, 0x3, "ec586efb2260366cd73b2627538391fb5df39d11488bb15832bbc3b2a716255492f829fe6c48f5827a41e2f31c044cc8d388f931b738584b7b30415ddc398937b05c630f3048827d48abc13149a3793f219ce0a6cee65421b3938314d9c983e45f51cd6be47c66897d448c086f50138da617332dbaaae5e1e0"}], 0x90}, 0x0) 05:37:45 executing program 2: r0 = socket(0x200000000000011, 0x3, 0x0) sendmmsg(r0, &(0x7f0000006cc0)=[{{&(0x7f00000005c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x0, @local, 0x20}}, 0x80, 0x0}}], 0x1, 0x4000) 05:37:45 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) close(r0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) 05:37:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a0") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x10, 0x11, [@generic="e2abb4ec7645192056d52f"]}]}, 0x24}, 0x1, 0x300}, 0x0) 05:37:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x3003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x0, 0x104000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:37:45 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_create(0x0) epoll_create(0x3b) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, 0x0) r1 = socket$unix(0x1, 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000240)) r2 = gettid() r3 = getpgid(r2) perf_event_open(0x0, r3, 0x0, 0xffffffffffffffff, 0x8) msync(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3) syz_open_dev$evdev(0x0, 0x6, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0) accept4$unix(r1, 0x0, 0x0, 0x80000) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000300)='syz0\x00') write$P9_RRENAME(0xffffffffffffffff, 0x0, 0xffffffffffffffab) r4 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCPKT(r4, 0x5420, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) prctl$PR_GET_NO_NEW_PRIVS(0x27) add_key$user(0x0, 0x0, 0x0, 0xffffffffffffffe1, 0xfffffffffffffffc) prctl$PR_GET_PDEATHSIG(0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f00000000c0)={{0x0, @multicast1, 0x4e21, 0x0, 'none\x00', 0x1d}, {@broadcast, 0x0, 0x0, 0x82f, 0x6aa3, 0x9a47b51}}, 0x44) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0xfffffffeffffffff) clone(0x800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000340)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0xfffd}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x1c, r5, 0x400, 0x70bd2d, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x20000000) 05:37:45 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_create(0x0) epoll_create(0x3b) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, 0x0) r1 = socket$unix(0x1, 0x7, 0x0) sendmsg$unix(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000240)) r2 = gettid() r3 = getpgid(r2) perf_event_open(0x0, r3, 0x0, 0xffffffffffffffff, 0x8) msync(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3) syz_open_dev$evdev(0x0, 0x6, 0x187840) accept4(r1, &(0x7f0000000180)=@generic, &(0x7f0000000080)=0x35, 0x80800) accept4$unix(r1, 0x0, 0x0, 0x80000) r4 = openat$null(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$UI_SET_PHYS(r4, 0x4008556c, &(0x7f0000000300)='syz0\x00') write$P9_RRENAME(r4, 0x0, 0xffffffffffffffab) r5 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCPKT(r5, 0x5420, 0x0) ioctl$TUNDETACHFILTER(r4, 0x401054d6, 0x0) prctl$PR_GET_NO_NEW_PRIVS(0x27) add_key$user(0x0, 0x0, 0x0, 0xffffffffffffffe1, 0xfffffffffffffffc) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000200)) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f00000000c0)={{0x0, @multicast1, 0x4e21, 0x0, 'none\x00', 0x1d, 0x0, 0x62}, {@broadcast, 0x0, 0x0, 0x82f, 0x6aa3, 0x9a47b51}}, 0x44) ioctl$UI_SET_FFBIT(r4, 0x4004556b, 0xfffffffeffffffff) clone(0x800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000340)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0xfffd}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x1c, r6, 0x400, 0x70bd2d, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x20000000) [ 392.767155] sysfs: cannot create duplicate filename '/class/ieee80211/â«´ìvE VÕ!' [ 392.775168] CPU: 1 PID: 15546 Comm: syz-executor1 Not tainted 5.0.0-rc1+ #7 [ 392.782321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 392.791966] Call Trace: [ 392.794628] dump_stack+0x173/0x1d0 [ 392.798333] sysfs_warn_dup+0x1c4/0x1f0 [ 392.802388] sysfs_do_create_link_sd+0x293/0x360 [ 392.807219] sysfs_create_link+0x125/0x190 [ 392.811516] device_add+0x1730/0x2ed0 [ 392.815398] wiphy_register+0x2b4b/0x3900 [ 392.819635] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 392.824892] ieee80211_register_hw+0x3ac2/0x5ca0 [ 392.829721] ? ieee80211_register_hw+0x1041/0x5ca0 [ 392.834751] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 392.840261] ? tasklet_hrtimer_init+0x114/0x1b0 [ 392.844986] ? hw_scan_work+0xc40/0xc40 [ 392.849029] mac80211_hwsim_new_radio+0x3267/0x4f50 [ 392.854165] hwsim_new_radio_nl+0x1444/0x1990 [ 392.858749] ? hwsim_tx_info_frame_received_nl+0x1220/0x1220 [ 392.864600] genl_rcv_msg+0x185f/0x1a60 [ 392.868677] netlink_rcv_skb+0x431/0x620 [ 392.872801] ? genl_unbind+0x390/0x390 [ 392.876760] genl_rcv+0x63/0x80 [ 392.880125] netlink_unicast+0xf3e/0x1020 [ 392.884341] netlink_sendmsg+0x127f/0x1300 [ 392.888654] ___sys_sendmsg+0xdb9/0x11b0 [ 392.892784] ? netlink_getsockopt+0x1460/0x1460 [ 392.897529] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 392.902792] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 392.908215] ? __fget_light+0x6e1/0x750 [ 392.912278] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 392.917560] __se_sys_sendmsg+0x305/0x460 [ 392.921813] __x64_sys_sendmsg+0x4a/0x70 [ 392.925937] do_syscall_64+0xbc/0xf0 [ 392.929737] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 392.934976] RIP: 0033:0x457ec9 [ 392.938227] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 392.957680] RSP: 002b:00007f17c2a63c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 05:37:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x3003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x0, 0x104000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:37:45 executing program 3: migrate_pages(0x0, 0x0, 0x0, 0x0) clone(0x100002122001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x5, &(0x7f00000000c0)) seccomp(0x1, 0x0, &(0x7f0000000100)={0x2000000000000014, &(0x7f0000000080)=[{0x20, 0x0, 0x0, 0xfffffffffffffffb}]}) open(&(0x7f0000000040)='./file0\x00', 0xa8001, 0x120) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, 0x0) 05:37:46 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xfaa}, 0x2c) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) close(r0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 392.965459] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457ec9 [ 392.972778] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 392.980125] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 392.987444] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f17c2a646d4 [ 392.994768] R13: 00000000004c53fb R14: 00000000004d9038 R15: 00000000ffffffff 05:37:46 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_create(0x0) epoll_create(0x3b) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, 0x0) r1 = socket$unix(0x1, 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000240)) r2 = gettid() r3 = getpgid(r2) perf_event_open(0x0, r3, 0x0, 0xffffffffffffffff, 0x8) msync(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3) syz_open_dev$evdev(0x0, 0x6, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0) accept4$unix(r1, 0x0, 0x0, 0x80000) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000300)='syz0\x00') write$P9_RRENAME(0xffffffffffffffff, 0x0, 0xffffffffffffffab) r4 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCPKT(r4, 0x5420, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) prctl$PR_GET_NO_NEW_PRIVS(0x27) add_key$user(0x0, 0x0, 0x0, 0xffffffffffffffe1, 0xfffffffffffffffc) prctl$PR_GET_PDEATHSIG(0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f00000000c0)={{0x0, @multicast1, 0x4e21, 0x0, 'none\x00', 0x1d}, {@broadcast, 0x0, 0x0, 0x82f, 0x6aa3, 0x9a47b51}}, 0x44) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0xfffffffeffffffff) clone(0x800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000340)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0xfffd}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x1c, r5, 0x400, 0x70bd2d, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x20000000) 05:37:46 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001900)="24000000140081ae08060c04000f000010007f03fe0500018701546fabca1b4e7d06a6bd", 0x24}], 0x1}, 0x0) 05:37:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a0") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x10, 0x11, [@generic="e2abb4ec7645192056d52f"]}]}, 0x24}, 0x1, 0x300}, 0x0) 05:37:46 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$sock_attach_bpf(r0, 0x6, 0xa, &(0x7f0000000200), 0x4) 05:37:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x3003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x0, 0x104000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:37:46 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_create(0x0) epoll_create(0x3b) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, 0x0) r1 = socket$unix(0x1, 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000240)) r2 = gettid() r3 = getpgid(r2) perf_event_open(0x0, r3, 0x0, 0xffffffffffffffff, 0x8) msync(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3) syz_open_dev$evdev(0x0, 0x6, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0) accept4$unix(r1, 0x0, 0x0, 0x80000) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000300)='syz0\x00') write$P9_RRENAME(0xffffffffffffffff, 0x0, 0xffffffffffffffab) r4 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCPKT(r4, 0x5420, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) prctl$PR_GET_NO_NEW_PRIVS(0x27) add_key$user(0x0, 0x0, 0x0, 0xffffffffffffffe1, 0xfffffffffffffffc) prctl$PR_GET_PDEATHSIG(0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f00000000c0)={{0x0, @multicast1, 0x4e21, 0x0, 'none\x00', 0x1d}, {@broadcast, 0x0, 0x0, 0x82f, 0x6aa3, 0x9a47b51}}, 0x44) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0xfffffffeffffffff) clone(0x800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000340)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0xfffd}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x1c, r5, 0x400, 0x70bd2d, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x20000000) [ 393.359077] sysfs: cannot create duplicate filename '/class/ieee80211/â«´ìvE VÕ!' [ 393.367055] CPU: 1 PID: 15583 Comm: syz-executor1 Not tainted 5.0.0-rc1+ #7 [ 393.374220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 393.383615] Call Trace: [ 393.386278] dump_stack+0x173/0x1d0 [ 393.389978] sysfs_warn_dup+0x1c4/0x1f0 [ 393.394023] sysfs_do_create_link_sd+0x293/0x360 [ 393.398854] sysfs_create_link+0x125/0x190 [ 393.403162] device_add+0x1730/0x2ed0 [ 393.407049] wiphy_register+0x2b4b/0x3900 [ 393.411304] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 393.416556] ieee80211_register_hw+0x3ac2/0x5ca0 [ 393.421384] ? ieee80211_register_hw+0x1041/0x5ca0 [ 393.426529] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 393.432036] ? tasklet_hrtimer_init+0x114/0x1b0 [ 393.436751] ? hw_scan_work+0xc40/0xc40 [ 393.441634] mac80211_hwsim_new_radio+0x3267/0x4f50 [ 393.446755] hwsim_new_radio_nl+0x1444/0x1990 [ 393.451303] ? hwsim_tx_info_frame_received_nl+0x1220/0x1220 [ 393.457142] genl_rcv_msg+0x185f/0x1a60 [ 393.461191] netlink_rcv_skb+0x431/0x620 [ 393.465280] ? genl_unbind+0x390/0x390 [ 393.469203] genl_rcv+0x63/0x80 [ 393.472516] netlink_unicast+0xf3e/0x1020 [ 393.476706] netlink_sendmsg+0x127f/0x1300 [ 393.480994] ___sys_sendmsg+0xdb9/0x11b0 [ 393.485109] ? netlink_getsockopt+0x1460/0x1460 [ 393.489814] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 393.495033] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 393.500423] ? __fget_light+0x6e1/0x750 [ 393.504439] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 393.509659] __se_sys_sendmsg+0x305/0x460 [ 393.513852] __x64_sys_sendmsg+0x4a/0x70 [ 393.517938] do_syscall_64+0xbc/0xf0 [ 393.521687] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 393.526897] RIP: 0033:0x457ec9 [ 393.530141] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 393.549064] RSP: 002b:00007f17c2a63c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 393.556813] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457ec9 [ 393.564115] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 393.571414] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 393.578705] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f17c2a646d4 [ 393.585998] R13: 00000000004c53fb R14: 00000000004d9038 R15: 00000000ffffffff 05:37:46 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0) write$cgroup_pid(r0, &(0x7f0000000100), 0xda4fff08) sendmsg(r0, &(0x7f0000002e40)={&(0x7f0000000500)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001840)=[{0x10, 0x0, 0x9}], 0x10}, 0x80) r1 = getpid() ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) r2 = gettid() perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, r1, 0x0, 0xffffffffffffffff, 0x0) r3 = getpid() perf_event_open(&(0x7f0000000400)={0x2562f8c4a2ccfd7b, 0x70, 0x64, 0x88b, 0x2, 0x4eee, 0x0, 0x1000, 0x0, 0x0, 0xae5b, 0x4, 0x1, 0xcd, 0x7, 0x0, 0xb7, 0x9, 0x8, 0x100000001, 0x29a, 0x7fff, 0x100000000, 0x38, 0x2, 0x81, 0x3, 0x7, 0x0, 0x5, 0xfffffffffffffdec, 0x5, 0x1, 0x5, 0x4, 0x8, 0x2, 0x8000, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x3}, 0x8, 0x5d, 0x9, 0xd, 0x0, 0x1}, r2, 0x3, 0xffffffffffffff9c, 0x2) perf_event_open(&(0x7f0000000040)={0x3, 0x70, 0x4, 0x200, 0x1f, 0x1, 0x0, 0x9, 0x0, 0x8, 0x100000000, 0x69a, 0x80, 0x0, 0x8, 0x3ff, 0x7af, 0x1, 0x5, 0x200, 0x0, 0x1, 0x3, 0x3, 0x4, 0x10000, 0x5, 0x100, 0x0, 0x2, 0x10000, 0x9, 0x0, 0x0, 0x9, 0x3ff, 0x5c5d, 0x70e, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x3, 0x100, 0xf, 0x1, 0x4, 0x8}, 0x0, 0x0, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) write$cgroup_pid(r0, &(0x7f0000000140)=r3, 0x12) perf_event_open(&(0x7f0000000380)={0x2, 0x70, 0xfff, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x101, 0x1ff, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xc, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x660c, 0xa00) getpid() 05:37:46 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000740)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000780), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000080), 0x12) 05:37:46 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$sock_attach_bpf(r0, 0x6, 0xc, &(0x7f0000000200), 0x4) 05:37:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x10, 0x11, [@generic="e2abb4ec7645192056d52f"]}]}, 0x24}, 0x1, 0x300}, 0x0) 05:37:46 executing program 5: syncfs(0xffffffffffffffff) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000300)=0x72, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e22, @multicast2}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000040), 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r2 = memfd_create(&(0x7f0000000140)='}#*nodevem0\xb7,\x00', 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x360) fcntl$setstatus(r0, 0x4, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000600)=ANY=[@ANYBLOB="66696c7465720000030000000000000000ce3c27e0000000000000000000000000000000710000003ea122a15239eb55ca05a2684d7174b2368abb167fcdd50cc3d45cd9f5d891a77db220c37ae0b7734d5c631853c8d0a8f31c33e08f75c7c4a29f64ea7840725b5c1f30e784ced9ae3e210fb564bc2e4e0d5bdaf157c1bfaf419479c55c5447b94a08f9f9a9bb4515bbfbfe01d7"], 0x0) read(r0, &(0x7f0000000200)=""/250, 0xfa) sendfile(r1, r2, 0x0, 0x80003) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000003c0)={0x0}, &(0x7f0000000400)=0xc) syz_open_procfs(r4, &(0x7f0000000380)='envh&on\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) 05:37:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x3003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x0, 0x104000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:37:47 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1004e20}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x8084, &(0x7f0000319ff0)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000080)="173693c0870dba978d8fcbea54d61da99cc3912ab7e742d2d1472607f2ab3971b43fadb702ee3fd16cbcc2db473d971f35aedab7eab535e866d0e1f487ca453ae482a03a0d", 0x45, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40010063, 0x0) 05:37:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x10, 0x11, [@generic="e2abb4ec7645192056d52f"]}]}, 0x24}, 0x1, 0x300}, 0x0) 05:37:47 executing program 2: syncfs(0xffffffffffffffff) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e22, @multicast2}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0xffffffffffffffff, 0x80, 0x3) r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r2 = memfd_create(&(0x7f0000000140)='}#*nodevem0\xb7,\x00', 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000600)=ANY=[@ANYBLOB="66696c7465720000030000000000000000ce3c27e0000000000000000000000000000000710000003ea122a15239eb55ca05a2684d7174b2368abb167fcdd50cc3d45cd9f5d891a77db220c37ae0b7734d5c631853c8d0a8f31c33e08f75c7c4a29f64ea7840725b5c1f30e784ced9ae3e210fb564bc2e4e0d5bdaf157c1bfaf419479c55c5447b94a08f9f9a9bb4515bbfbfe01d7"], 0x0) read(r0, &(0x7f0000000200)=""/250, 0xfa) sendfile(r1, r2, 0x0, 0x80003) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000003c0)={0x0}, &(0x7f0000000400)=0xc) syz_open_procfs(r4, &(0x7f0000000380)='envh&on\x00') 05:37:47 executing program 2: syncfs(0xffffffffffffffff) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000300)=0x72, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000040), 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0xffffffffffffffff, 0x80, 0x3) r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r2 = memfd_create(&(0x7f0000000140)='}#*nodevem0\xb7,\x00', 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x360) fcntl$setstatus(r0, 0x4, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000600)=ANY=[@ANYBLOB="66696c7465720000030000000000000000ce3c27e0000000000000000000000000000000710000003ea122a15239eb55ca05a2684d7174b2368abb167fcdd50cc3d45cd9f5d891a77db220c37ae0b7734d5c631853c8d0a8f31c33e08f75c7c4a29f64ea7840725b5c1f30e784ced9ae3e210fb564bc2e4e0d5bdaf157c1bfaf419479c55c5447b94a08f9f9a9bb4515bbfbfe01d7"], 0x0) read(r0, &(0x7f0000000200)=""/250, 0xfa) sendfile(r1, r2, 0x0, 0x80003) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000003c0)={0x0}, &(0x7f0000000400)=0xc) syz_open_procfs(r4, &(0x7f0000000380)='envh&on\x00') 05:37:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x10, 0x11, [@generic="e2abb4ec7645192056d52f"]}]}, 0x24}, 0x1, 0x300}, 0x0) 05:37:47 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000000c0), 0x14) preadv(r1, &(0x7f0000000480)=[{&(0x7f0000000340)=""/226, 0xe2}], 0x1, 0x0) 05:37:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x3003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:37:47 executing program 3: r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x80, 0x0}, 0x20000005) sendmsg$kcm(r0, &(0x7f0000000700)={&(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @dev, 0x2}, 0x80, 0x0}, 0x20004040) 05:37:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x0) 05:37:47 executing program 4: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)="bdd403daa7650300000097e40223221ae14b0574c3e8f5909e1140b7487a4530ea64", 0x22}], 0x1, 0x6) 05:37:47 executing program 5: r0 = socket$kcm(0xa, 0x400000005, 0x0) sendmsg$kcm(r0, &(0x7f0000000e80)={&(0x7f0000000980)=@generic={0x2, "60fbc6ffc91ab403697f8e54d43a79763d51a4cb8f9905bf07ee494001843b228bfec79e91c0949d1d38ac97b712183250c0bf00af192d5d137a522ff0bfc5262c2616e39ea91476e7051eddcbfc9f96c0463b95523fe9152755fe72b4e6ba72ebde89dd127cd703f308120ec83e5b5b15860828ee9fa52aaf7f765e1365"}, 0x80, 0x0, 0x0, &(0x7f0000000d80)=[{0x50, 0x1, 0xfffffffffffff265, "17480c66156b122a1bd47ceb553e3553e03d51b60446b2b371908421a30f86d97ad8bbda276dd8255a33e8fd1bc1a2e857ee363dbd8296d7bff0"}], 0x50}, 0x4) 05:37:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x0) 05:37:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x3003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:37:48 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000f40)='cgroup\x00controC\x12\x12\x98\xd1l\x06\x00\x00\x00H=\xc10U\xa0\x8b\x15\xb4\x8a\x7f{CgLN\x109\x13\xc3\xd6\xcf\xa5\xf5K\x04\xb2\xf3\x997 \xff\x05\x81\x19&Y[\x8f]\x9c\xfa\x84e\\\xd4\xe9L\x04@4\x84\xd8\xf8\xde\x9f\xbd\xc8;\x94\xad\xd2\x8c\v\xc6I6#\xa0\xcbB7/\x1e\x14WT\xf8\xcd\x94\xb0N\x89\x85\xb2S\xffE\x14q\xc2\x1c\xf4\rp;}\xdd\x86\x04u\xa1R\xae+\x8d\x81\x98d\x1e0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000600)=ANY=[@ANYBLOB="66696c7465720000030000000000000000ce3c27e0000000000000000000000000000000710000003ea122a15239eb55ca05a2684d7174b2368abb167fcdd50cc3d45cd9f5d891a77db220c37ae0b7734d5c631853c8d0a8f31c33e08f75c7c4a29f64ea7840725b5c1f30e784ced9ae3e210fb564bc2e4e0d5bdaf157c1bfaf419479c55c5447b94a08f9f9a9bb4515bbfbfe01d7"], 0x0) read(r0, &(0x7f0000000200)=""/250, 0xfa) sendfile(r1, r2, 0x0, 0x80003) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000003c0)={0x0}, &(0x7f0000000400)=0xc) syz_open_procfs(r4, &(0x7f0000000380)='envh&on\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) 05:37:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x0) 05:37:48 executing program 5: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000300)=0x72, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e22, @multicast2}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000040), 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r2 = memfd_create(&(0x7f0000000140)='}#*nodevem0\xb7,\x00', 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x360) fcntl$setstatus(r0, 0x4, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000600)=ANY=[@ANYBLOB="66696c7465720000030000000000000000ce3c27e0000000000000000000000000000000710000003ea122a15239eb55ca05a2684d7174b2368abb167fcdd50cc3d45cd9f5d891a77db220c37ae0b7734d5c631853c8d0a8f31c33e08f75c7c4a29f64ea7840725b5c1f30e784ced9ae3e210fb564bc2e4e0d5bdaf157c1bfaf419479c55c5447b94a08f9f9a9bb4515bbfbfe01d7"], 0x0) read(r0, &(0x7f0000000200)=""/250, 0xfa) sendfile(r1, r2, 0x0, 0x80003) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000003c0)={0x0}, &(0x7f0000000400)=0xc) syz_open_procfs(r4, &(0x7f0000000380)='envh&on\x00') 05:37:48 executing program 2: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x10006, 0x0, 0x0, 0xffffffff}]}) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x3) 05:37:48 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x101, 0x2}) 05:37:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x3003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:37:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x300}, 0x0) 05:37:48 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu\x00\xa4-X\x8a\xa8V8)\xdc\xe4\x18\x00&\xe1?k\x19P\x13\xb0o\xde\xca%\x1a\xca7\xa1\x1e\xd1\x1e\x84\xa0\xeb\x93bS\x1a\xeeC{\b\xeb\xa5\xf5\xbe\xf16\xe2h\xbcW{\xd9\x1cP\xc5q\x99\x83\xd6ntl\x99\xf2y\x01\xdd\x7f\x81\x91%\x00\xdb\xc6\t5\\\x84u\xc0W\x01\x97}\x97I\x81\xc2\x19\xb6a\x8a\r\xea= \x15\x90\x93&\xfc\xa5J\xd3o\x1fI#t', 0x200002, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x44000) syz_genetlink_get_family_id$tipc(&(0x7f0000000900)='TIPC\x00') fchdir(r0) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x8000000000000) write$P9_RREMOVE(r1, &(0x7f0000000280)={0x7}, 0xbb35e999) r2 = open(&(0x7f0000000000)='./file0\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) fdatasync(r1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, 0x0, 0x0) ioctl$TIOCGSOFTCAR(r2, 0x5419, 0x0) [ 395.619637] audit: type=1326 audit(1547617068.660:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15708 comm="syz-executor2" exe="/root/syz-executor2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ad2a code=0xffff0000 05:37:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x3003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x0, 0x104000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:37:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x300}, 0x0) 05:37:48 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x10006, 0x0, 0x0, 0xffffffff}]}) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000001c0)='ramfs\x00T\xa0\xdc\x9d\x83\x8a\x86_U,\xfa^\x19$F\x9eZV\x98\x008\xe9\xc5\xf6#\x13\xfa\xb15u?\x16g\xe28\xe0\xc3\x91R\x15\xa2\xdfXM;\xbfnv \xd9A\xd8)\xaa\xae\x9f,5\xc8\x18\xc9x\x9b\x12(x\t\xfb(\xd4^hJ\x19\x06\xfbq\xb7\xc6=\x9d\xc2\x81d\xe2\x15A\xea\xf3C8\x81z\x00\xd5rH\xd1\xaa\x19\xb4R\x8a\x995\xd1\xe1\x91\xa6\x15}\xcd\xf6\xb0\xad!^\xe6H\x98E\xda-|9\xda\xc4\x7f\x9d\x9al\xc0\xcf<\x10F\xa4s\xa0n\xec\xa8v\x98\xbb\xd1.\xf9C\xc0\xd8\x13N\xf1\x05<\x86\xef\xef\xae\xac\x1du\x9d\aU\x161$\xe6\xba\xd1(\x80\\\b\x95G\t\x1et\xb9\x11Z\x99o\xfa&\fW\x10\x8ea\x13\xa3;\x11\x8bz\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00]s\xa32\xa5mZ\x01t\x1e\x19^%\x1fg\x8b\xeb\x15kZs&*\x9e\x18UuB\n\x9d9\x83\xa7v \xc6SuJ`\b_\xd7\x85\xd0\xb9{\xab\xae\xe7b\x9a\xef>\xe6e\x8b\xe5wz\xd9<\a\x8f\r\xacH\xcf\xedb\xa7\xd82\x81\xaf\x7f\t\xc1\x99\xeb\xc0\x88\xb6\x1fv\x19O\x17\x16F\xa4s \xe3j\xe5w1\a', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') symlink(&(0x7f0000000100)='.\x00', &(0x7f0000000540)='./file0\x00') umount2(&(0x7f0000000300)='./file0/../file0/file0\x00', 0x2) 05:37:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x3003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x0, 0x104000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 396.058637] audit: type=1326 audit(1547617069.100:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15729 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ad2a code=0xffff0000 05:37:49 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0x11}, 0x0) recvmsg$kcm(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000340)=""/88, 0x58}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f00000002c0)={0x3, 0x0, [0x0, 0x0, 0x0]}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)=@vsock, 0xfffffffffffffef2, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/154, 0xfffffffffffffe95}], 0x1, &(0x7f0000000240)=""/105, 0x69}, 0x0) sendmsg(r2, &(0x7f00000001c0)={0x0, 0x16c, &(0x7f0000000100), 0x28a, &(0x7f0000000540), 0x5b}, 0x0) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) close(r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x4) socket$kcm(0xa, 0x4000000000080002, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x50, &(0x7f0000000440)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000003c0)=r4, 0x4) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x8941, &(0x7f0000000240)=0x1) 05:37:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x300}, 0x0) 05:37:49 executing program 5: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000300)=0x72, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e22, @multicast2}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000040), 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x101, 0x105082) r2 = memfd_create(&(0x7f0000000140)='}#*nodevem0\xb7,\x00', 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x360) fcntl$setstatus(r0, 0x4, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000600)=ANY=[@ANYBLOB="66696c7465720000030000000000000000ce3c27e0000000000000000000000000000000710000003ea122a15239eb55ca05a2684d7174b2368abb167fcdd50cc3d45cd9f5d891a77db220c37ae0b7734d5c631853c8d0a8f31c33e08f75c7c4a29f64ea7840725b5c1f30e784ced9ae3e210fb564bc2e4e0d5bdaf157c1bfaf419479c55c5447b94a08f9f9a9bb4515bbfbfe01d7"], 0x0) read(r0, &(0x7f0000000200)=""/250, 0xfa) sendfile(r1, r2, 0x0, 0x80003) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000003c0)={0x0}, &(0x7f0000000400)=0xc) syz_open_procfs(r4, &(0x7f0000000380)='envh&on\x00') [ 396.412907] audit: type=1326 audit(1547617069.460:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15708 comm="syz-executor2" exe="/root/syz-executor2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ad2a code=0xffff0000 05:37:49 executing program 2: openat$cgroup(0xffffffffffffff9c, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) socketpair(0xa, 0x1, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuset.effective_mems\x00', 0x0, 0x0) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000005c0)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={r0, 0x3, 0x1, 0x8, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9}, 0x20) socket$kcm(0x29, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x20000000000001, 0x6, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f00000004c0)=ANY=[]) r4 = socket$kcm(0x2, 0x5, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000840)=ANY=[@ANYBLOB="2a14ad671823fa25807e280d3b0a8aa09e7c4b63585178c0dc4e6d993490c6336a9b66845de6a3d40b9374520cb55348212a7baa263d267efbf8c87af5127340b621a1d05e54db282b3476053187a81d9f88fa740cb491447320287687db52daa3bbb010b4448118c8dbb2b4769f49e85c34fc295cc3c2538c9b4dc144a9dd4f3a3f4bdedea688281fd6630e516b2d974d97fa8290f7263fd0b9c7138b4c61c027dd7cba2489bed60bcee388d5832dd8e3f693cdfe586b47d7ba53b61b0bdfe40ddeb40ee57cd4f779931bbb3fa969bc734b0519e8feb0bf367317997c7a4ee0b5b6fd5d99ecaf219ef1390a22ebdac292750f78"]) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000040)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000940)=ANY=[@ANYBLOB="332d63b7032e2c6d000000000000000000000000d75dc123d315f5fb3065786ed0ffca259c870db3b223ed9c7a58913ec4f3542c7888dac6f729426dc464fa6881e42997bdd920f6b98eb48cbba26f3f3ec475f4bf8c80aab4fafcfb4c9f512a7cc0fb"], 0x63) openat$cgroup_ro(r2, &(0x7f0000000480)='cgroup.controllers\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GP\x1a\x00\xf9\xd3\xc4q\xb4\xa5C\v\x11i\x1d\x81\xfbK\x9cI\x10j\xb3\xa0\x1e\xaan\x14\x94\xe1\x01\x12\xf6\xe5\'\xa7F\x96\x1b-\xa6a\xbc\x05\x17\xd1\xfe\xd1$\xf6\xef\xb4)-\xc4\xc6\xdfR\xa2\xc0b<\xdc\x1a\x18v}\x96\x1c&\xd3\xaa\x8cc:#Ig\xdf\xe0G\xb1Y\x97\xef\xc5\xa3\xbbR,\xb098F\xdc\xc3\xf6\xe7j(\x865i|d+<\xc7\xb3\xb3k=\x13T\xddP\x87\x12\xa1\xf1^;T-\x8a\f\f\x9as\xd1\x9d\x95+\xce\xf7\xd7\xd5\xcbp;D\xc4\xf1~_v\xe7\xa2\xf9\xc4N\ao\xb1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2, 0xab93031f99fda67f, &(0x7f0000000080)=""/251}, 0x48) sendmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000000)=@nfc={0x27, 0x0, 0x2}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000700)="bdc3f5c47317ab4ca2fb53056600a58c67b1ffc57c5428c2fd378b4b911dc474760a340235932635476a0c92e7ce56b7e9b27f312e0a656966d91c9f5a537a66377bbc", 0x43}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x890c, &(0x7f00000007c0)={r3}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b00)={r2, &(0x7f0000000a00)="a2d0dde5562e9c132f8a49169af39dd70bfd7820c84a244295c98e385e4ca7cac3c9b8e034c981eda51b8ca8d23b64369f1624c006e0003560d5531bfd40169ad38d84742b64418a46a699046079ad9ea8d6313ca874f676c699c86af068474f24e912789c27f27f7e5f03f6ac39e72bdbf049c5d21e33db051ce772fec5872a199638217de0a99438123bec6b2efb0c1d018ab7e12a", 0x0, 0x3}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000680)=ANY=[@ANYBLOB="0180791b26aefc8df1c084104336db0a000000000300000000000000"]) openat$cgroup_type(r2, &(0x7f0000000300)='cgroup.type\x00', 0x2, 0x0) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000380)={'bond_slave_1\x00', 0x600}) openat$cgroup_ro(r2, &(0x7f00000006c0)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={r2, 0x3, 0x1, 0x80, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}, 0x12) gettid() sendmsg(r3, &(0x7f00000002c0)={&(0x7f0000000200)=@ax25, 0xfffffffffffffe92, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x8080) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) 05:37:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x3003}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x0, 0x104000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:37:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x300}, 0x0) 05:37:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x300}, 0x0) 05:37:49 executing program 2: r0 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={r0, 0x3, 0x1, 0x1, &(0x7f0000000180)=[0x0, 0x0], 0x2}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x28) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd'}, 0x48) r4 = socket$kcm(0x2, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)=@nfc={0x27, 0x0, 0x2}, 0x80, 0x0}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f00000000c0)='cgroup.subtree_control\x00', 0x2, 0x0) getpid() bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffff9c, 0x50, &(0x7f0000000280)}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) write$cgroup_subtree(r6, &(0x7f0000000080)={[{0x2b, 'pids'}]}, 0x6) sendmsg(r4, &(0x7f00000008c0)={&(0x7f00000003c0)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e23, 0x4, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1}}, 0x80, &(0x7f0000000840)=[{&(0x7f00000007c0)="7a10575db595f6b4465805e9d6ed624ab6ebb249dc07e3c10012e0d2148d5dd4229620fbdb2fd1c1f67933d8c6de89521007a0fcbd2c354363fcb7dffe888e0f1233c4821bbb379eca431329", 0x4c}], 0x1}, 0x4) write$cgroup_subtree(r6, &(0x7f0000000100)={[{0x2d, 'pids'}]}, 0x6) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x100000000200000, 0x0) ioctl$TUNSETPERSIST(r7, 0x400454cb, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x10, &(0x7f0000000000), 0x4) write$cgroup_subtree(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="2f696f202d706955ed202f63707520"], 0xf) 05:37:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x300}, 0x0) 05:37:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x0, 0x104000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 396.801938] audit: type=1326 audit(1547617069.840:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15729 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ad2a code=0xffff0000 05:37:50 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x10006, 0x0, 0x0, 0xffffffff}]}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) poll(&(0x7f0000000180)=[{r0}], 0x1, 0x0) 05:37:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x0, 0x104000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 397.127478] audit: type=1326 audit(1547617070.170:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15787 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ad2a code=0xffff0000 05:37:50 executing program 3: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x10006, 0x0, 0x0, 0xffffffff}]}) getrlimit(0x0, 0x0) 05:37:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x0, 0x1, 0x0, 0x0, {0x4}, [@nested={0x10, 0x11, [@generic="e2abb4ec7645192056d52f"]}]}, 0x24}, 0x1, 0x300}, 0x0) [ 397.379605] audit: type=1326 audit(1547617070.420:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15801 comm="syz-executor3" exe="/root/syz-executor3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ad2a code=0xffff0000 05:37:50 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x10006, 0x0, 0x0, 0xffffffff}]}) lgetxattr(0x0, 0x0, 0x0, 0x0) 05:37:50 executing program 2: perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c62, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 05:37:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x0, 0x1, 0x0, 0x0, {0x4}, [@nested={0x10, 0x11, [@generic="e2abb4ec7645192056d52f"]}]}, 0x24}, 0x1, 0x300}, 0x0) 05:37:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x0, 0x104000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:37:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x0, 0x1, 0x0, 0x0, {0x4}, [@nested={0x10, 0x11, [@generic="e2abb4ec7645192056d52f"]}]}, 0x24}, 0x1, 0x300}, 0x0) [ 397.596166] audit: type=1326 audit(1547617070.640:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15814 comm="syz-executor5" exe="/root/syz-executor5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ad2a code=0xffff0000 05:37:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x3003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x0, 0x104000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 05:37:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x22, 0x0, 0x0, 0x0, {0x4}, [@nested={0x10, 0x11, [@generic="e2abb4ec7645192056d52f"]}]}, 0x24}, 0x1, 0x300}, 0x0) 05:37:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x3003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x0, 0x104000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 397.904639] audit: type=1326 audit(1547617070.950:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15787 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ad2a code=0xffff0000 05:37:51 executing program 4: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x10006, 0x0, 0x0, 0xffffffff}]}) fsync(0xffffffffffffffff) pwritev(r0, 0x0, 0x0, 0x0) 05:37:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x22, 0x0, 0x0, 0x0, {0x4}, [@nested={0x10, 0x11, [@generic="e2abb4ec7645192056d52f"]}]}, 0x24}, 0x1, 0x300}, 0x0) [ 398.151630] audit: type=1326 audit(1547617071.190:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15837 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ad2a code=0xffff0000 05:37:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x3003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x0, 0x104000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 05:37:51 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ftruncate(r4, 0x8200) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x800002, 0x4002011, r5, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r6, 0xae80, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x100002000000105, &(0x7f0000000080)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 398.186959] audit: type=1326 audit(1547617071.230:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15801 comm="syz-executor3" exe="/root/syz-executor3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ad2a code=0xffff0000 05:37:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x22, 0x0, 0x0, 0x0, {0x4}, [@nested={0x10, 0x11, [@generic="e2abb4ec7645192056d52f"]}]}, 0x24}, 0x1, 0x300}, 0x0) 05:37:51 executing program 5: perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c61, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_destroy(r0) 05:37:51 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000000)={0x3003}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000080)={0x0, 0x104000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 05:37:51 executing program 2: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x10006, 0x0, 0x0, 0xffffffff}]}) r0 = gettid() rt_sigqueueinfo(r0, 0x0, 0x0) 05:37:51 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000000)={0x3003}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000080)={0x0, 0x104000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 05:37:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x22, 0x1, 0x0, 0x0, {}, [@nested={0x10, 0x11, [@generic="e2abb4ec7645192056d52f"]}]}, 0x24}, 0x1, 0x300}, 0x0) 05:37:51 executing program 3: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x10006, 0x0, 0x0, 0xffffffff}]}) sysinfo(&(0x7f0000000040)=""/27) 05:37:51 executing program 5: ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x3, 0x0) readahead(r0, 0x8, 0x0) 05:37:52 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x10006, 0x0, 0x0, 0xffffffff}]}) getrandom(0x0, 0x0, 0x0) 05:37:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x22, 0x1, 0x0, 0x0, {}, [@nested={0x10, 0x11, [@generic="e2abb4ec7645192056d52f"]}]}, 0x24}, 0x1, 0x300}, 0x0) 05:37:52 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000000)={0x3003}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000080)={0x0, 0x104000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 05:37:52 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x10006, 0x0, 0x0, 0xffffffff}]}) r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x3, 0x0) flock(r0, 0x8) 05:37:52 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000000)={0x3003}) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000080)={0x0, 0x104000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 05:37:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x22, 0x1, 0x0, 0x0, {}, [@nested={0x10, 0x11, [@generic="e2abb4ec7645192056d52f"]}]}, 0x24}, 0x1, 0x300}, 0x0) 05:37:52 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000000)={0x3003}) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000080)={0x0, 0x104000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 05:37:52 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sysinfo(&(0x7f0000000000)=""/51) 05:37:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x300}, 0x0) 05:37:52 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000000)={0x3003}) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000080)={0x0, 0x104000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 05:37:52 executing program 3: r0 = socket$inet6(0xa, 0x100000002, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f0000000300), 0x0, 0x400806e, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bc070") poll(&(0x7f0000000000)=[{r0}], 0x1, 0x9) 05:37:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x300}, 0x0) 05:37:53 executing program 4: mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000001c0)='ramfs\x00T\xa0\xdc\x9d\x83\x8a\x86_U,\xfa^\x19$F\x9eZV\x98\x008\xe9\xc5\xf6#\x13\xfa\xb15u?\x16g\xe28\xe0\xc3\x91R\x15\xa2\xdfXM;\xbfnv \xd9A\xd8)\xaa\xae\x9f,5\xc8\x18\xc9x\x9b\x12(x\t\xfb(\xd4^hJ\x19\x06\xfbq\xb7\xc6=\x9d\xc2\x81d\xe2\x15A\xea\xf3C8\x81z\x00\xd5rH\xd1\xaa\x19\xb4R\x8a\x995\xd1\xe1\x91\xa6\x15}\xcd\xf6\xb0\xad!^\xe6H\x98E\xda-|9\xda\xc4\x7f\x9d\x9al\xc0\xcf<\x10F\xa4s\xa0n\xec\xa8v\x98\xbb\xd1.\xf9C\xc0\xd8\x13N\xf1\x05<\x86\xef\xef\xae\xac\x1du\x9d\aU\x161$\xe6\xba\xd1(\x80\\\b\x95G\t\x1et\xb9\x11Z\x99o\xfa&\fW\x10\x8ea\x13\xa3;\x11\x8bz\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00]s\xa32\xa5mZ\x01t\x1e\x19^%\x1fg\x8b\xeb\x15kZs&*\x9e\x18UuB\n\x9d9\x83\xa7v \xc6SuJ`\b_\xd7\x85\xd0\xb9{\xab\xae\xe7b\x9a\xef>\xe6e\x8b\xe5wz\xd9<\a\x8f\r\xacH\xcf\xedb\xa7\xd82\x81\xaf\x7f\t\xc1\x99\xeb\xc0\x88\xb6\x1fv\x19O\x17\x16F\xa4s \xe3j\xe5w1\a', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') symlink(&(0x7f0000000100)='.\x00', &(0x7f0000000540)='./file0\x00') umount2(&(0x7f0000000300)='./file0/../file0/file0\x00', 0x0) 05:37:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x3003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x0, 0x104000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:37:53 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000616ff8)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r1) sendmsg$unix(r2, &(0x7f0000e4ffc8)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}, 0x0) 05:37:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x300}, 0x0) 05:37:53 executing program 3: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x10006, 0x0, 0x0, 0xffffffff}]}) lookup_dcookie(0x0, 0x0, 0x0) 05:37:53 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x10006, 0x0, 0x0, 0xffffffff}]}) waitid(0x0, 0x0, 0x0, 0x0, 0x0) 05:37:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x3003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x0, 0x104000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:37:53 executing program 2: 05:37:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x10, 0x0, [@generic="e2abb4ec7645192056d52f"]}]}, 0x24}, 0x1, 0x300}, 0x0) 05:37:53 executing program 4: 05:37:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x3003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x0, 0x104000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:37:53 executing program 2: 05:37:53 executing program 2: 05:37:53 executing program 4: 05:37:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x10, 0x0, [@generic="e2abb4ec7645192056d52f"]}]}, 0x24}, 0x1, 0x300}, 0x0) 05:37:53 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000000)={0x3003}) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000080)={0x0, 0x104000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 400.834495] kauditd_printk_skb: 11 callbacks suppressed [ 400.834527] audit: type=1326 audit(1547617073.880:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15935 comm="syz-executor3" exe="/root/syz-executor3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ad2a code=0xffff0000 05:37:53 executing program 3: [ 400.863881] audit: type=1326 audit(1547617073.910:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15929 comm="syz-executor5" exe="/root/syz-executor5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ad2a code=0xffff0000 05:37:54 executing program 5: 05:37:54 executing program 4: 05:37:54 executing program 2: 05:37:54 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000000)={0x3003}) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000080)={0x0, 0x104000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 05:37:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x10, 0x0, [@generic="e2abb4ec7645192056d52f"]}]}, 0x24}, 0x1, 0x300}, 0x0) 05:37:54 executing program 3: 05:37:54 executing program 2: 05:37:54 executing program 4: 05:37:54 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000000)={0x3003}) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000080)={0x0, 0x104000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 05:37:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0x11}]}, 0x18}, 0x1, 0x300}, 0x0) 05:37:54 executing program 5: 05:37:54 executing program 2: 05:37:54 executing program 3: 05:37:54 executing program 5: 05:37:54 executing program 4: 05:37:54 executing program 2: 05:37:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0x11}]}, 0x18}, 0x1, 0x300}, 0x0) 05:37:54 executing program 3: 05:37:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x3003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x0, 0x104000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:37:54 executing program 5: 05:37:54 executing program 4: 05:37:54 executing program 2: 05:37:54 executing program 3: 05:37:55 executing program 5: 05:37:55 executing program 4: 05:37:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0x11}]}, 0x18}, 0x1, 0x300}, 0x0) 05:37:55 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x3003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x0, 0x104000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:37:55 executing program 2: 05:37:55 executing program 4: 05:37:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0x11, [@generic]}]}, 0x18}, 0x1, 0x300}, 0x0) 05:37:55 executing program 5: 05:37:55 executing program 3: 05:37:55 executing program 2: 05:37:55 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x3003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x0, 0x104000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:37:55 executing program 4: 05:37:55 executing program 5: 05:37:55 executing program 3: 05:37:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0x11, [@generic]}]}, 0x18}, 0x1, 0x300}, 0x0) 05:37:55 executing program 2: 05:37:55 executing program 4: 05:37:55 executing program 3: 05:37:55 executing program 5: 05:37:55 executing program 4: 05:37:55 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000000)={0x3003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x0, 0x104000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:37:56 executing program 2: 05:37:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0x11, [@generic]}]}, 0x18}, 0x1, 0x300}, 0x0) 05:37:56 executing program 5: 05:37:56 executing program 4: 05:37:56 executing program 3: 05:37:56 executing program 2: 05:37:56 executing program 5: 05:37:56 executing program 3: 05:37:56 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000000)={0x3003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x0, 0x104000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:37:56 executing program 4: 05:37:56 executing program 5: 05:37:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x11, [@generic="e2abb4ec7645"]}]}, 0x20}, 0x1, 0x300}, 0x0) 05:37:56 executing program 2: 05:37:56 executing program 3: 05:37:56 executing program 4: 05:37:56 executing program 5: 05:37:56 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000000)={0x3003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x0, 0x104000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:37:56 executing program 2: 05:37:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x11, [@generic="e2abb4ec7645"]}]}, 0x20}, 0x1, 0x300}, 0x0) 05:37:57 executing program 4: 05:37:57 executing program 3: 05:37:57 executing program 4: 05:37:57 executing program 5: 05:37:57 executing program 3: 05:37:57 executing program 4: 05:37:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x0, 0x104000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:37:57 executing program 5: 05:37:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x11, [@generic="e2abb4ec7645"]}]}, 0x20}, 0x1, 0x300}, 0x0) 05:37:57 executing program 2: 05:37:57 executing program 3: 05:37:57 executing program 5: 05:37:57 executing program 4: 05:37:57 executing program 3: 05:37:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x0, 0x104000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:37:57 executing program 2: 05:37:57 executing program 3: 05:37:57 executing program 5: 05:37:57 executing program 4: 05:37:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x10, 0x11, [@generic="e2abb4ec7645192056"]}]}, 0x24}, 0x1, 0x300}, 0x0) 05:37:58 executing program 2: 05:37:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x0, 0x104000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:37:58 executing program 4: 05:37:58 executing program 5: 05:37:58 executing program 3: 05:37:58 executing program 2: 05:37:58 executing program 4: 05:37:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x10, 0x11, [@generic="e2abb4ec7645192056"]}]}, 0x24}, 0x1, 0x300}, 0x0) 05:37:58 executing program 3: 05:37:58 executing program 5: 05:37:58 executing program 2: 05:37:58 executing program 3: 05:37:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x0, 0x104000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:37:58 executing program 4: 05:37:58 executing program 2: 05:37:58 executing program 5: 05:37:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x10, 0x11, [@generic="e2abb4ec7645192056"]}]}, 0x24}, 0x1, 0x300}, 0x0) 05:37:58 executing program 3: 05:37:58 executing program 4: 05:37:59 executing program 2: 05:37:59 executing program 5: 05:37:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x0, 0x104000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:37:59 executing program 3: 05:37:59 executing program 4: 05:37:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x10, 0x11, [@generic="e2abb4ec7645192056d5"]}]}, 0x24}, 0x1, 0x300}, 0x0) 05:37:59 executing program 2: 05:37:59 executing program 5: 05:37:59 executing program 3: 05:37:59 executing program 5: 05:37:59 executing program 4: 05:37:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x0, 0x104000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:37:59 executing program 2: 05:37:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x10, 0x11, [@generic="e2abb4ec7645192056d5"]}]}, 0x24}, 0x1, 0x300}, 0x0) 05:37:59 executing program 3: 05:37:59 executing program 5: 05:37:59 executing program 4: 05:37:59 executing program 2: 05:38:00 executing program 5: 05:38:00 executing program 4: 05:38:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x3003}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x0, 0x104000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:38:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x10, 0x11, [@generic="e2abb4ec7645192056d5"]}]}, 0x24}, 0x1, 0x300}, 0x0) 05:38:00 executing program 3: 05:38:00 executing program 2: 05:38:00 executing program 4: 05:38:00 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x10000, 0x81) 05:38:00 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x4, 0x4, 0x400000000004, 0x9}, 0x2c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r0, &(0x7f0000000000), 0x0}, 0x18) 05:38:00 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fchdir(r0) mkdir(&(0x7f0000000100)='./control\x00', 0x0) 05:38:00 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x4, 0x4, 0x400000000004, 0x9}, 0x2c) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), 0x0}, 0x20) 05:38:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x3003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x0, 0x104000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:38:00 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x4, 0x4, 0x400000000004, 0x9}, 0x2c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r0, &(0x7f0000000000)=';', 0x0}, 0x18) 05:38:00 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x4, 0x4, 0x400000000004, 0x9}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000000c0), 0x0, 0x2}, 0x20) 05:38:00 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e0000001800810fe00f80ecdb4cb904014865160b00030020000000000009000e00da1b40d819a9060015000500", 0x2e}], 0x1}, 0x0) 05:38:00 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in=@multicast1, @in6=@ipv4={[], [], @initdev}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa0}}, {{@in6=@dev}, 0x0, @in=@multicast1}}, 0xe8) 05:38:00 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair(0x0, 0x2, 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x0, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, 0x0, 0x0) dup2(r1, r2) setitimer(0x2, &(0x7f0000000040)={{}, {0x0, 0x2710}}, &(0x7f0000000100)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 05:38:00 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c40)={0x14, 0x10, 0x701, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 05:38:00 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) [ 407.865753] validate_nla: 2 callbacks suppressed [ 407.865982] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 407.905315] netlink: 'syz-executor5': attribute type 3 has an invalid length. 05:38:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x3003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000080)={0x0, 0x104000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:38:01 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000182000)={&(0x7f0000000200)={0x2, 0x4000000000000d, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@multicast1}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}}]}, 0x80}}, 0x0) 05:38:01 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x10, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_attach_bpf(r1, 0x6, 0x7, &(0x7f0000000200)=r0, 0x4) 05:38:01 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$sock_attach_bpf(r0, 0x6, 0x9, &(0x7f0000000200), 0x4) [ 408.102108] protocol 88fb is buggy, dev hsr_slave_0 [ 408.107587] protocol 88fb is buggy, dev hsr_slave_1 [ 408.113329] protocol 88fb is buggy, dev hsr_slave_0 [ 408.118788] protocol 88fb is buggy, dev hsr_slave_1 [ 408.172219] protocol 88fb is buggy, dev hsr_slave_0 [ 408.172261] protocol 88fb is buggy, dev hsr_slave_0 [ 408.177594] protocol 88fb is buggy, dev hsr_slave_1 [ 408.182777] protocol 88fb is buggy, dev hsr_slave_1 05:38:01 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0x7, 0x3, &(0x7f0000008000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x44}}, 0x0, 0x2, 0x1000, &(0x7f0000014000)=""/4096}, 0x48) 05:38:01 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$sock_attach_bpf(r0, 0x6, 0x3, &(0x7f0000000200), 0x4) 05:38:01 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000bc0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) socket$kcm(0x10, 0x3, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400), 0x4) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\xff', 0x200000000000017e, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x10) write$cgroup_type(r0, &(0x7f0000000000)='threade\xff\xff', 0x11ffffee7) 05:38:01 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) r1 = openat$cgroup_procs(r0, &(0x7f0000000740)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000780), 0x12) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) 05:38:01 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair(0x0, 0x2, 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x0, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, 0x0, 0x0) dup2(r1, r2) setitimer(0x2, &(0x7f0000000040)={{}, {0x0, 0x2710}}, &(0x7f0000000100)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 05:38:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x3003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000080)={0x0, 0x104000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:38:01 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/fib_trie\x00') ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000300)=""/69) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000040)=""/8, &(0x7f0000000080)=0x8) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x7e0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x0, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000f59ffc)=0x5, 0x4) r3 = socket$inet6(0xa, 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000280), &(0x7f00000002c0)=0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f00000000c0)=0x6, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev}}, 0x1c) getpid() mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6001, 0xffffffffffffffff) creat(&(0x7f00000007c0)='./file0\x00', 0x0) unlink(&(0x7f0000000000)='./file0\x00') sendto$inet(r1, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0xfffffffffffffecf) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000140)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc18f}}, {0x0, 0x7}}}, 0xa0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='ip6tnl0\x00', 0x10) sendto$inet(r1, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) shutdown(r1, 0x1) 05:38:01 executing program 1: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x19) 05:38:01 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000012d6405000000000065040400010000000704000001000000b7040000080000006a0a00fe00000000850000001a000000b7000000000000009500000000000000"], 0x0}, 0x48) 05:38:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x3003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000080)={0x0, 0x104000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:38:01 executing program 1: socket$kcm(0x10, 0x800000000002, 0x0) r0 = gettid() perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_type(r1, &(0x7f0000000580)='cgroup.type\x00', 0x2, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000740)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000780)=r0, 0x12) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000280)="52d00ab421806d43be9f57c051a958ae06fdb81b2401ac40b0c019bc49175f83dcb0196f5dd79bf4bb4bda35b59990fa035f57d14157b87b6c0578da6a27764be828ccdcdeaf8c1780a485f1b6f2d56e61172081d933ea97cf344ad1e9f3098b9c8c6a2c0f34b0c2dbb560", 0x0}, 0x18) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000440)) write$cgroup_subtree(r4, &(0x7f0000000640)=ANY=[@ANYBLOB="2d706964732000000000a3e818eef6a040b60ff85d37dd7637d11e3ebee88df75d024e4e1475229d7e63f7cd573750b65c2054f25883a9d399fa2af963a1c945a7dacdc333cd36c578f4962b10e5bc0efa2f6183b7f20aae644b11de8e0d7a1f7bfc22b199997f160eb2c989802ab4518f98ccc8d659e8b160fcc4d6b50000b16a7112cc7eeffb489b3aad7a5552c4e7d95dfe04f56ab6a4d923e1398ad7a3a5bada74971b8fc9798454ceee48041e6ae0eb68672c1bb5064d575e2f51b9b2bfea602416ceed5def257280b81fbc"], 0xce) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000540)=r0, 0x12) 05:38:02 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair(0x0, 0x2, 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x0, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, 0x0, 0x0) dup2(r1, r2) setitimer(0x2, &(0x7f0000000040)={{}, {0x0, 0x2710}}, &(0x7f0000000100)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 05:38:02 executing program 5: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_attach_bpf(r1, 0x6, 0x4, &(0x7f0000000200)=r0, 0x4) 05:38:02 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000740)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000780), 0x12) [ 409.292124] protocol 88fb is buggy, dev hsr_slave_0 [ 409.297706] protocol 88fb is buggy, dev hsr_slave_1 05:38:02 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x10006, 0x0, 0x0, 0xffffffff}]}) setpgid(0x0, 0x0) 05:38:02 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x10006, 0x0, 0x0, 0xffffffff}]}) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 05:38:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x3003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:38:02 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair(0x0, 0x2, 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x0, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, 0x0, 0x0) dup2(r1, r2) setitimer(0x2, &(0x7f0000000040)={{}, {0x0, 0x2710}}, &(0x7f0000000100)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 05:38:02 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x10006, 0x0, 0x0, 0xffffffff}]}) fsync(r0) 05:38:02 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000f40)='cgroup\x00controC\x12\x12\x98\xd1l\x06\x00\x00\x00H=\xc10U\xa0\x8b\x15\xb4\x8a\x7f{CgLN\x109\x13\xc3\xd6\xcf\xa5\xf5K\x04\xb2\xf3\x997 \xff\x05\x81\x19&Y[\x8f]\x9c\xfa\x84e\\\xd4\xe9L\x04@4\x84\xd8\xf8\xde\x9f\xbd\xc8;\x94\xad\xd2\x8c\v\xc6I6#\xa0\xcbB7/\x1e\x14WT\xf8\xcd\x94\xb0N\x89\x85\xb2S\xffE\x14q\xc2\x1c\xf4\rp;}\xdd\x86\x04u\xa1R\xae+\x8d\x81\x98d\x1e0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000f40)='cgroup\x00controC\x12\x12\x98\xd1l\x06\x00\x00\x00H=\xc10U\xa0\x8b\x15\xb4\x8a\x7f{CgLN\x109\x13\xc3\xd6\xcf\xa5\xf5K\x04\xb2\xf3\x997 \xff\x05\x81\x19&Y[\x8f]\x9c\xfa\x84e\\\xd4\xe9L\x04@4\x84\xd8\xf8\xde\x9f\xbd\xc8;\x94\xad\xd2\x8c\v\xc6I6#\xa0\xcbB7/\x1e\x14WT\xf8\xcd\x94\xb0N\x89\x85\xb2S\xffE\x14q\xc2\x1c\xf4\rp;}\xdd\x86\x04u\xa1R\xae+\x8d\x81\x98d\x1e0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x0, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, 0x0, 0x0) dup2(r1, r2) setitimer(0x2, &(0x7f0000000040)={{}, {0x0, 0x2710}}, &(0x7f0000000100)) [ 409.999967] audit: type=1326 audit(1547617083.040:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16400 comm="syz-executor3" exe="/root/syz-executor3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ad2a code=0xffff0000 05:38:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x3003}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:38:03 executing program 1: r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f00000001c0)=@nfc={0x27, 0x3}, 0x80, &(0x7f0000000140)=[{&(0x7f00000003c0)="050000002300000000018900ac14140de0", 0x11}], 0x1, 0x0, 0x0, 0x50}, 0x0) [ 410.263598] ================================================================== [ 410.271008] BUG: KMSAN: uninit-value in ___neigh_create+0x20cc/0x2890 [ 410.277600] CPU: 1 PID: 16428 Comm: syz-executor1 Not tainted 5.0.0-rc1+ #7 [ 410.284704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 410.294065] Call Trace: [ 410.296675] dump_stack+0x173/0x1d0 [ 410.300329] kmsan_report+0x12e/0x2a0 [ 410.304160] __msan_warning+0x82/0xf0 [ 410.307981] ___neigh_create+0x20cc/0x2890 [ 410.312267] __neigh_create+0xbd/0xd0 [ 410.316085] ip_finish_output2+0xa0f/0x1820 [ 410.320427] ip_finish_output+0xd2b/0xfd0 [ 410.324578] ip_output+0x53f/0x610 [ 410.328137] ? ip_mc_finish_output+0x3b0/0x3b0 [ 410.332736] ? ip_finish_output+0xfd0/0xfd0 [ 410.337050] ip_local_out+0x164/0x1d0 [ 410.340848] iptunnel_xmit+0x8a7/0xde0 [ 410.344751] ip_tunnel_xmit+0x35b9/0x3980 [ 410.348921] ipgre_xmit+0x1098/0x11c0 [ 410.352728] ? ipgre_close+0x230/0x230 [ 410.356608] dev_hard_start_xmit+0x604/0xc40 [ 410.361030] __dev_queue_xmit+0x2e48/0x3b80 [ 410.365366] dev_queue_xmit+0x4b/0x60 [ 410.369164] ? __netdev_pick_tx+0x1260/0x1260 [ 410.373745] packet_sendmsg+0x79bb/0x9760 [ 410.377911] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 410.383359] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 410.388544] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 410.393955] ___sys_sendmsg+0xdb9/0x11b0 [ 410.398014] ? compat_packet_setsockopt+0x360/0x360 [ 410.403030] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 410.408219] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 410.413575] ? __fget_light+0x6e1/0x750 [ 410.417556] __se_sys_sendmsg+0x305/0x460 [ 410.421714] __x64_sys_sendmsg+0x4a/0x70 [ 410.425774] do_syscall_64+0xbc/0xf0 [ 410.429483] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 410.434662] RIP: 0033:0x457ec9 [ 410.437845] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 410.456736] RSP: 002b:00007f17c2a63c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 410.464432] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457ec9 [ 410.471691] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 410.478951] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 410.486213] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f17c2a646d4 [ 410.493486] R13: 00000000004c53b0 R14: 00000000004d8fc0 R15: 00000000ffffffff [ 410.500753] [ 410.502367] Uninit was created at: [ 410.505890] No stack [ 410.508202] ================================================================== [ 410.515545] Disabling lock debugging due to kernel taint [ 410.520981] Kernel panic - not syncing: panic_on_warn set ... [ 410.526861] CPU: 1 PID: 16428 Comm: syz-executor1 Tainted: G B 5.0.0-rc1+ #7 [ 410.535341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 410.544682] Call Trace: [ 410.547266] dump_stack+0x173/0x1d0 [ 410.550890] panic+0x3d1/0xb01 [ 410.554104] kmsan_report+0x293/0x2a0 [ 410.557905] __msan_warning+0x82/0xf0 [ 410.561703] ___neigh_create+0x20cc/0x2890 [ 410.565971] __neigh_create+0xbd/0xd0 [ 410.569770] ip_finish_output2+0xa0f/0x1820 [ 410.574103] ip_finish_output+0xd2b/0xfd0 [ 410.578256] ip_output+0x53f/0x610 [ 410.581798] ? ip_mc_finish_output+0x3b0/0x3b0 [ 410.586369] ? ip_finish_output+0xfd0/0xfd0 [ 410.590683] ip_local_out+0x164/0x1d0 [ 410.594480] iptunnel_xmit+0x8a7/0xde0 [ 410.598380] ip_tunnel_xmit+0x35b9/0x3980 [ 410.602547] ipgre_xmit+0x1098/0x11c0 [ 410.606358] ? ipgre_close+0x230/0x230 [ 410.610249] dev_hard_start_xmit+0x604/0xc40 [ 410.614665] __dev_queue_xmit+0x2e48/0x3b80 [ 410.619021] dev_queue_xmit+0x4b/0x60 [ 410.622816] ? __netdev_pick_tx+0x1260/0x1260 [ 410.627302] packet_sendmsg+0x79bb/0x9760 [ 410.631452] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 410.636901] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 410.642089] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 410.647484] ___sys_sendmsg+0xdb9/0x11b0 [ 410.651547] ? compat_packet_setsockopt+0x360/0x360 [ 410.656560] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 410.661748] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 410.667111] ? __fget_light+0x6e1/0x750 [ 410.671098] __se_sys_sendmsg+0x305/0x460 [ 410.675255] __x64_sys_sendmsg+0x4a/0x70 [ 410.679307] do_syscall_64+0xbc/0xf0 [ 410.683015] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 410.688193] RIP: 0033:0x457ec9 [ 410.691373] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 410.710263] RSP: 002b:00007f17c2a63c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 410.717958] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457ec9 [ 410.725217] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 410.732476] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 410.739737] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f17c2a646d4 [ 410.746994] R13: 00000000004c53b0 R14: 00000000004d8fc0 R15: 00000000ffffffff [ 410.755336] Kernel Offset: disabled [ 410.758957] Rebooting in 86400 seconds..