0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)}], 0x1}, 0x4040040) 03:44:23 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0xf]}, 0x48) 03:44:23 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:44:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0xf000000}, 0x0) [ 2781.528144] net_ratelimit: 14 callbacks suppressed [ 2781.528151] protocol 88fb is buggy, dev hsr_slave_0 [ 2781.528171] protocol 88fb is buggy, dev hsr_slave_0 [ 2781.533183] protocol 88fb is buggy, dev hsr_slave_1 [ 2781.538274] protocol 88fb is buggy, dev hsr_slave_1 [ 2781.543326] protocol 88fb is buggy, dev hsr_slave_0 [ 2781.548448] protocol 88fb is buggy, dev hsr_slave_0 [ 2781.553316] protocol 88fb is buggy, dev hsr_slave_1 [ 2781.558385] protocol 88fb is buggy, dev hsr_slave_1 [ 2781.573507] protocol 88fb is buggy, dev hsr_slave_0 [ 2781.578606] protocol 88fb is buggy, dev hsr_slave_1 03:44:24 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x0, 0x0) exit(0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000340)=""/208, 0xd0}], 0x1, 0x1) getpeername$netrom(r1, &(0x7f00000000c0)={{0x3, @default}, [@remote, @bcast, @remote, @remote, @null, @rose, @remote, @rose]}, &(0x7f0000000140)=0x48) 03:44:24 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)}], 0x1}, 0x4040040) 03:44:24 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x1fff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000080)={0x5, r3}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r4, 0xc0505510, &(0x7f0000000380)={0x7, 0x7, 0x3, 0x6, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}]}) fcntl$setsig(r5, 0xa, 0x36) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 03:44:24 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x10]}, 0x48) 03:44:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x10000000}, 0x0) 03:44:24 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB]) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:44:24 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x2e]}, 0x48) 03:44:24 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x0) 03:44:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x3f000000}, 0x0) 03:44:24 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x3c]}, 0x48) 03:44:24 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB]) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:44:24 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x84940, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000040)=0x8000, 0x1fe) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x101000, 0x0) listen(r0, 0x1fff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f00000000c0)={0x5, 0x4, 0x8, 0x100000001}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x4) 03:44:25 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') exit(0x0) creat(&(0x7f0000000080)='./file0\x00', 0x42) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000480)={&(0x7f00000000c0), 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x58, r1, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="00b070c2ea33cfdaa5a9a5cfdd7a4b765b711ef9d9b46cecf8be7a79def081265c427560e2a4699405d47b371c49ea4675799b9c7ef94a8370303440d4e511cce499", @ANYRES16=r2, @ANYBLOB="06022bbd7000fcdbdf25110000000800040003000000080004000500000008000400940000000800050020000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000005}, 0x1) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000340)=""/208, 0xd0}], 0x1, 0x1) 03:44:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x9effffff}, 0x0) 03:44:25 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x3d]}, 0x48) 03:44:25 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @rand_addr, 0x1}, 0x1c) listen(r0, 0x1fff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$vcsn(&(0x7f0000000e00)='/dev/vcs#\x00', 0x8, 0x80c0) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000e40)=0x13f2, &(0x7f0000000e80)=0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000000d40)=[{{&(0x7f0000000040)=@nl, 0x80, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/237, 0xed}, {&(0x7f00000002c0)=""/79, 0x4f}, {&(0x7f00000000c0)=""/44, 0x2c}, {&(0x7f0000000340)=""/167, 0xa7}], 0x4, &(0x7f0000000400)=""/252, 0xfc}, 0xdd}, {{&(0x7f0000000500)=@xdp, 0x80, &(0x7f0000000840)=[{&(0x7f0000000580)=""/116, 0x74}, {&(0x7f0000000600)=""/97, 0x61}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/171, 0xab}, {&(0x7f00000007c0)=""/114, 0x72}], 0x5, &(0x7f00000008c0)=""/205, 0xcd}, 0x1}, {{&(0x7f00000009c0)=@tipc, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/131, 0x83}], 0x2, &(0x7f0000000c40)=""/243, 0xf3}, 0x20}], 0x3, 0x101, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x81, 0x8041) 03:44:25 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB]) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:44:25 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x0) 03:44:25 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x48]}, 0x48) 03:44:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0xc00e0000}, 0x0) 03:44:25 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:44:25 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x1fff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001680)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f00000014c0)={&(0x7f0000000000)=@l2={0x1f, 0x8000, {0x2, 0x2, 0x4, 0x4, 0xff, 0x5}, 0x7d, 0x80}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)="7878f69b2ae480b539384b77d97fd92362578a949d7112ab9a1f4960aa9ec5e8fdd38f6690824780cefc37931db6d06e7b83d5ce6a5bc47a879d1ceedd8dfd909de5cf8ef7d448e37fd93b62a7abe39374ce13e6cdf339f455d4cf75", 0x5c}], 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x12e0}, 0x4000000) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) set_robust_list(&(0x7f0000001580)={0x0, 0x6, &(0x7f0000001540)={&(0x7f0000001500)}}, 0x18) prctl$PR_GET_TSC(0x19, &(0x7f0000001640)) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000001700)={{{@in=@initdev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@loopback}}, &(0x7f0000001800)=0xe8) lstat(&(0x7f0000001840)='./file0\x00', &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000001900)='./file0\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000019c0)='./file0\x00', &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) accept$alg(r0, 0x0, 0x0) r7 = getgid() getresgid(&(0x7f0000001a80), &(0x7f0000001ac0)=0x0, &(0x7f0000001b00)) lstat(&(0x7f0000001b40)='./file0\x00', &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = getegid() getresgid(&(0x7f0000001c00), &(0x7f0000001c40)=0x0, &(0x7f0000001c80)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001cc0)={0x0, 0x0, 0x0}, &(0x7f0000001d00)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000016c0)='system.posix_acl_access\x00', &(0x7f0000001d40)={{}, {0x1, 0x4}, [{0x2, 0x4, r3}], {0x4, 0x1}, [{0x8, 0x5, r4}, {0x8, 0x2, r5}, {0x8, 0x2, r6}, {0x8, 0x4, r7}, {0x8, 0x5, r8}, {0x8, 0x0, r9}, {0x8, 0x7, r10}, {0x8, 0x4, r11}, {0x8, 0x0, r12}], {0x10, 0x1}, {0x20, 0x2}}, 0x74, 0x0) ftruncate(r2, 0xfffffffffffffe00) write(r0, &(0x7f00000015c0)="d7c422ebe4079ce0cf6af8bd9f03b8cc66c3c6f34a62efcafbe8cd9596349f2011af1d80e681f7c0c60418109ba238f6f76ee80cfbf00cce61834423435d3d78b46938373b2d6f68cf6e46a6d7e94f22990807721fa06839e0bb55849e2dc19e664212ca", 0x64) 03:44:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0xf0ffffff}, 0x0) 03:44:25 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x4c]}, 0x48) 03:44:26 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') exit(0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000340)=""/208, 0xd0}], 0x1, 0x1) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$get_keyring_id(0x0, r1, 0x9) ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f0000000180)) 03:44:26 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:44:26 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x61]}, 0x48) 03:44:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0xfffff000}, 0x0) 03:44:26 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) getpeername$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, &(0x7f0000000080)=0x10) prctl$PR_SET_FPEMU(0xa, 0x3) listen(r0, 0x1fff) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x230ca93e}}}, 0x0, 0xc4c, 0x0, "3ad6d3332a1b21de1e8438ce6b53351852d985d73dfe55a3d01d52ab5f63976b414268cfa4f4dc2305dc1354c6c363a75c22a75fc46085d7039aa7acf67e2b7953029d728aee9330b0d2c3ac119fb678"}, 0xd8) r2 = socket$inet6_sctp(0xa, 0xfffffffffffffffd, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000740)='/dev/ppp\x00', 0x648000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000006c0)=[{&(0x7f0000000340)="4ca253135aed301f9708f65f4fb17d998a9fa1d5f3eb16d3076308a1fdca85ea5cbd2d92bdc3a7c821e25b645e577eb4b1db13c4b1207ba4e4d2412e08d8dbc679ea7b6daaea3d56526f13ce9321b1f06dfc43c6e43245f4d101e8106218883bb39b114cf2e95220ecd3422c8b6c439704cdc6", 0x73}, {&(0x7f00000003c0)="6bef056de702b12ab902faa90f752099b25a20bb670730cc0375a5efa6459d4ae811f47a2b8504b069b4b43999935173641d81a8750ac9a310aee5724eec65bc09b3f837f2c92b7ad61df08ff48b4c59d3773835676936a0ba68a930332fb7c52620410a5664f9533e72bb0395bda502af572b52d1", 0x75}, {&(0x7f0000000440)="245d126e5f407a610ac217afbe3abd5341a853d4c5b0f8e0f1f277e7eec6bf466f54d595f67d72a4ce5b04831e1f568d9feec58db410fbae37c0e1cb335bd76877e591d1b20a3b4e4e1e46", 0x4b}, {&(0x7f0000000140)="7ae7d14490797a5912e7b633687252a3c5c496bef8b627e0b05c7d28cdcc162392094ffbbdbb8ba17f474daaa88b4b7a", 0x30}, {&(0x7f00000004c0)="100107c821640c8b8292a5f1a5a80e0bc1e501ec008ef0ff7eeb28853cc6a46759e42461673ed0bd9dcd7b76e31a153a1f78dc7bdfd3c4298a9f15eba85c41701520519efdb53a016bc8fd29340b23afbe9c8a43ff3569dd6ffe1a18b28a70d57b749a49ca77b22f2cee746a4b9f16af756fcebbcefa48d31e54064802b59d6cd5d3585d9a3ab68867c066baf1e2bbed396f851fb212f71e1445780bcac9346ce74dbb87167cfdf886f1a63cd32ba35272c666e57991c8ee733b58b80d64067367d2506b94b20099c6086dfa7a09060b23d4e523bfca262c155aa4dcf2ed3526770bc44c311a8bb64b4f48", 0xeb}, {&(0x7f00000005c0)="8b37e3614bca82cde07c1530c32b66d50fa2d99a5e907e8c951b550eb02c4945fa4347ce2f9a85e50bd4ac64ed0950fd26c2bc9df8c69d210a95e3512c578e14a16be14360910c527c27100ce1490a05cb06a81bbba35f1119b8fa8c88254ec1e57d24b0319e90e6085bee3e0a29b4a14fbab48c6294eb75a058e3dce51ccadd4473cf24831069632a0d50e8567c9b18a38b556416135918e35ac898808b4db21e52210f6cecaf0e9ed30a1035718495f369d3acbe71", 0xb6}, {&(0x7f0000000680)="ab164b374237449f525d774247d470507430bb59107273e50bfba2", 0x1b}], 0x7, 0xa) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x80000001, 0x6, 0x4, 0x6, 0x8}, &(0x7f00000000c0)=0x98) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={r4, @in6={{0xa, 0x4e21, 0x1, @ipv4={[], [], @multicast1}, 0x1}}, 0xfff, 0xfffffffffffffd7c, 0x7, 0xaed, 0xb58546a609073546}, 0x98) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 03:44:26 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x0) 03:44:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0xffffff7f}, 0x0) 03:44:26 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x1fff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x8800, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000340)={0x0, 0xd6, "3f0600d63cfa8102d3eacd0b47e4a4113e4fa945fe48a631ee0acc62f93e68f1db33474630678f4d2ec7111cea3f4a082b70e994f065ba21c0bc531579bf90ddb7e07440db70bdc2134691a2ef88b8737811e79a2bda4d9d576059508613911435555440553465fd082848200f8d6e7da75941b73b4dc8e5e28420cf3b3a9f09fb1113ed468d089802bceb02964738c7e37b84e38ba339ed4682446eda72e9e0da60dae5420d9d9e97163a97d891498dc75c79e26a55ca56d937ad88970619779e13ab5e677d239a8a7d4fea1e95b0917f52ac0fbfd4"}, &(0x7f0000000440)=0xde) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000480)={r4, 0x3}, &(0x7f00000004c0)=0x8) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x11010040}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14c, r5, 0xb09, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_NET={0x38, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100000000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xd0d2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x400}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x800}]}, @TIPC_NLA_MEDIA={0x78, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0x74, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x1}, 0x80) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:44:26 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x63]}, 0x48) 03:44:26 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:44:26 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x68]}, 0x48) 03:44:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0xffffff9e}, 0x0) 03:44:27 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x6c]}, 0x48) 03:44:27 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') bind$ax25(r0, &(0x7f0000000080)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) exit(0xa9) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000340)=""/208, 0xd0}], 0x1000010b, 0x1) 03:44:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0xfffffff0}, 0x0) 03:44:27 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0xffffffff, @mcast1}, 0x36b) listen(r0, 0x1fff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:44:27 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:44:27 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x71]}, 0x48) 03:44:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x40030000000000}, 0x0) 03:44:27 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="2e00000028008100e00f80ecda4cb90402c8650407000700000000fb120001000e00da1b40d819a9060015000000", 0x2e}], 0x1}, 0x0) 03:44:27 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:44:27 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0xfffffffffffffdbb) listen(r0, 0x1fff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000000)={0xdd57, 0x10000, 0x4, 0x8, 0x1, [{0x861, 0x1, 0x3, 0x0, 0x0, 0x500}]}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:44:27 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x73]}, 0x48) [ 2784.796952] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 2784.820790] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:44:27 executing program 2: 03:44:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0xf0ffffffffffff}, 0x0) 03:44:28 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') exit(0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000340)=""/208, 0xd0}], 0x1, 0x1) r1 = msgget(0x0, 0x4) msgctl$MSG_INFO(r1, 0xc, &(0x7f0000000080)=""/41) 03:44:28 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x74]}, 0x48) 03:44:28 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:44:28 executing program 2: 03:44:28 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x1fff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r2 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x6, 0x430000) setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f00000001c0)=0x9, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={0xffffffffffffff9c, 0x10, &(0x7f0000000040)={&(0x7f0000000000)=""/34, 0x22, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=r4, 0x4) 03:44:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x100000000000000}, 0x0) 03:44:28 executing program 2: 03:44:28 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x7a]}, 0x48) 03:44:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x200000000000000}, 0x0) 03:44:28 executing program 2: 03:44:28 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:44:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x300000000000000}, 0x0) 03:44:29 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0xfa]}, 0x48) 03:44:29 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:44:29 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x1fff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x10100, 0x0) r4 = gettid() ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f0000000040)=r4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:44:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x800000000000000}, 0x0) 03:44:29 executing program 2: 03:44:29 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') exit(0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x1000000004e23, @local}, 0x10) sendto$inet(r1, &(0x7f0000000b40)="762d013abf428f831f537d10987f3f009e134c11cb6b5d479d61fac22b7c399e31904cab65dc1f2efc95ac1348db76ab634cf0fbde36acede0e45438773d28036919fd3c82e3622eb6f09975594f6bda43d29d0021a06e309383d903c1c4fd79f21eb35886e667dbe7", 0x69, 0x4008000, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000002c0)=0xda8, 0x4) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x400000, 0x0) accept4$alg(r2, 0x0, 0x0, 0x800) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@local, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@ipv4={[], [], @initdev}}}, &(0x7f0000000080)=0xe8) sendmsg$can_raw(r2, &(0x7f00000004c0)={&(0x7f00000000c0)={0x1d, r3}, 0x10, &(0x7f0000000480)={&(0x7f0000000440)=@can={{0x1, 0x4, 0x1, 0x213b}, 0x3, 0x1, 0x0, 0x0, "e04577542ed527ee"}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000340)=""/208, 0xd0}], 0x1, 0x1) 03:44:29 executing program 2: 03:44:29 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x300]}, 0x48) 03:44:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0xe32000000000000}, 0x0) 03:44:29 executing program 2: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000240)={r0}) bind(0xffffffffffffffff, &(0x7f0000000540)=@l2={0x1f, 0x0, {0x0, 0x3}, 0x0, 0x8000}, 0x80) getitimer(0x2, &(0x7f0000000380)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000340)='lp\x00', 0x3) getsockopt$inet6_tcp_int(r0, 0x6, 0x17, 0x0, &(0x7f0000000440)) sendto$inet6(r1, &(0x7f0000000280), 0x0, 0x20000004, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000340), 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r2, 0x401104000000016) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000180), &(0x7f0000000300)=0x8) 03:44:29 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:44:29 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x500]}, 0x48) [ 2786.898132] net_ratelimit: 23 callbacks suppressed [ 2786.898140] protocol 88fb is buggy, dev hsr_slave_0 [ 2786.908261] protocol 88fb is buggy, dev hsr_slave_1 03:44:30 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') exit(0x0) write$sndseq(r0, &(0x7f0000000080)=[{0x20, 0x0, 0x6dcd, 0x401, @time, {0x7, 0x2}, {0x649, 0x1}, @queue={0x800, {0x101, 0x9}}}, {0x4, 0x4, 0x0, 0x734, @tick=0x1, {0x8, 0x1000}, {0x6, 0x401}, @raw8={"fdf08ce877684a9935b0fd65"}}, {0x800, 0x6, 0x75, 0x7, @time, {0x1f, 0x81}, {0xfff, 0x4}, @connect={{0x1, 0x7ff}, {0x800, 0x1}}}, {0x7f, 0x5, 0x9, 0x10000, @tick=0xe3b1, {0x20, 0x4}, {0xd029, 0x3}, @raw32={[0x1efa, 0x6]}}, {0x7, 0x7, 0x8cc, 0xfff, @time={0x0, 0x989680}, {0x8, 0x7}, {0x200, 0x561}, @queue={0x7, {0x5, 0x8}}}], 0xf0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000340)=""/208, 0xd0}], 0x1, 0x1) 03:44:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0xf00000000000000}, 0x0) 03:44:30 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x600]}, 0x48) 03:44:30 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x1fff) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x4, 0x0) connect$rose(r1, &(0x7f0000000040)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x40) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 03:44:30 executing program 2: pipe(&(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x1) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 03:44:30 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:44:30 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x700]}, 0x48) 03:44:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x1000000000000000}, 0x0) 03:44:30 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:44:30 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0xa00]}, 0x48) 03:44:30 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x1fff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) socketpair$unix(0x1, 0x53d99ee1bf2f5cae, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:44:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x3f00000000000000}, 0x0) [ 2787.768078] protocol 88fb is buggy, dev hsr_slave_0 [ 2787.768090] protocol 88fb is buggy, dev hsr_slave_0 [ 2787.773217] protocol 88fb is buggy, dev hsr_slave_1 [ 2787.778267] protocol 88fb is buggy, dev hsr_slave_1 [ 2787.783327] protocol 88fb is buggy, dev hsr_slave_0 [ 2787.788413] protocol 88fb is buggy, dev hsr_slave_0 [ 2787.793344] protocol 88fb is buggy, dev hsr_slave_1 [ 2787.798433] protocol 88fb is buggy, dev hsr_slave_1 03:44:31 executing program 3: exit(0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000340)=""/208, 0xd0}], 0x1, 0x1) 03:44:31 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0xf00]}, 0x48) 03:44:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x9effffff00000000}, 0x0) 03:44:31 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) r1 = syz_open_dev$sndpcmp(&(0x7f0000000280)='/dev/snd/pcmC#D#p\x00', 0xfffffffffffffffe, 0x4) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x201882}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r2, 0x108, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x440, 0x0) listen(r0, 0x1fff) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socket$caif_stream(0x25, 0x1, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 03:44:31 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) epoll_create1(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/4\x00') preadv(r0, &(0x7f0000000700)=[{&(0x7f0000000600)=""/246, 0x2b7}], 0x1, 0x0) 03:44:31 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:44:31 executing program 2: r0 = socket$packet(0x11, 0x100000000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000004500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="32cae4783d32"}, 0x14) sendto$inet6(r0, &(0x7f0000000040)="050300000300000000000000c52c", 0xe, 0x0, 0x0, 0x0) 03:44:31 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x1018]}, 0x48) 03:44:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0xc00e000000000000}, 0x0) 03:44:31 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x1810]}, 0x48) 03:44:31 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:44:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0xf0ffffff00000000}, 0x0) 03:44:32 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}, 0x0, 0x7, 0x0, "4877bb1f56d48eb1fa5fac76a792a929a57f6062b013ec6b7a9ee231ea85a1c7f5c8fdf3bcaf6c5bb203dab4011d7c6096609012d3e979295204ae936681b23832f302a5020f3f6af0b1d2fb5a00eb09"}, 0xd8) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 03:44:32 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000085) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x0, 0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/mls\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x2008, 0x1) listen(r0, 0x1fff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='trusted.overlay.redirect\x00', &(0x7f00000000c0)=""/54, 0x36) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x9a8) 03:44:32 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x2000]}, 0x48) 03:44:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0xffffff7f00000000}, 0x0) 03:44:32 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') exit(0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000003440)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000003480)={{{@in=@empty, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6}}, &(0x7f0000003580)=0xe8) fstat(r0, &(0x7f00000035c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003680)={0xffffffffffffffff, r0, 0x0, 0x24, &(0x7f0000003640)='-bdev)em0bdevkeyringmd5sum$vboxnet1\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000036c0)={{{@in=@multicast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@multicast2}}, &(0x7f00000037c0)=0xe8) r6 = getegid() ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000003800)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000003840)={{{@in6=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in6=@local}}, &(0x7f0000003940)=0xe8) stat(&(0x7f0000003980)='./file0\x00', &(0x7f00000039c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r0, &(0x7f0000003b40)={&(0x7f0000000080)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000000100)="33b52e2cd8763e05bb909416a3344436562efb164e186297aefdf77c75e74c0a3c5aab9814c169622d633ba42e0e805c5e157716b670ebfe7ef3a0a73aaa835826b608d98b3a8ba3bad23b", 0x4b}, {&(0x7f0000000180)="81acacfa5613ad9f89c50bd9f509a5086641650966", 0x15}, {&(0x7f0000001440)="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", 0x1000}, {&(0x7f00000001c0)="08ce665400d6cc721b17ea01870e7f3015f756aab131f1ce3db7eab05e14359576ce2771b4eba16c8d563423251d93fa428fbbefa4ecbc8fa6c90382a59689686033cdd31837539bd4514280d263bb5f4405883275f81d7d7e95caeb7540a3b0d5600202a386edd4e5d88a3715f153ea964dfa0a6327ee8078be98ec398c200791f3d0d64d0284b39442a2beeb536c015424cb1825e12aa11fd6dc4b3196b13c9e51358bc568aab0295db67b", 0xac}, {&(0x7f0000002440)="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", 0x1000}, {0xfffffffffffffffd}, {&(0x7f0000000280)="271ddfc6d43ab25bfe3a2ff3dc76f61279d5ab800cbc73b400443059e9233122c276947f0837fafa9d9aed2c1818", 0x2e}], 0x8, &(0x7f0000003a40)=[@cred={0x20, 0x1, 0x2, r1, r2, r3}, @cred={0x20, 0x1, 0x2, r4, r5, r6}, @rights={0x10}, @cred={0x20, 0x1, 0x2, r7, r8, r9}, @rights={0x38, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0, r0]}, @rights={0x20, 0x1, 0x1, [r0, r0, r0]}], 0xc8, 0x20000001}, 0x4048000) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000340)=""/208, 0xd0}], 0x1, 0x1) 03:44:32 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:44:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0xfffffffffffff000}, 0x0) 03:44:32 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x2e00]}, 0x48) 03:44:32 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:44:32 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:44:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x0) 03:44:32 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x3c00]}, 0x48) 03:44:32 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) socket$inet6(0xa, 0x4, 0x1) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x1fff) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x20000, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000280)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2a}}, @in6={0xa, 0x4e22, 0x8001, @rand_addr="7de37492858b9113a0db323a7c933500", 0x5366}, @in6={0xa, 0x4e24, 0x4, @empty, 0x7}, @in6={0xa, 0x4e23, 0x9, @remote, 0x4f6}], 0x64) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x804850}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r2, @ANYBLOB="000825bd7000fbdbdf25160000005400090008000100630000000800010007000000ff5018265f8e132ccd433f03e0670800020012a80000080002000500000008000200070000000800010002000000080001000200000008000100b865a465080001001200000008000100001900000c00090008000100010000803c00010038000400200001000a004e200000000500000000000000000000ffffe0000002000204001400020002004e24e00000020000000000000000"], 0xb0}, 0x1, 0x0, 0x0, 0x4000004}, 0x4044841) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 03:44:32 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:44:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x0, 0x3}, 0x0) 03:44:32 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x3d00]}, 0x48) 03:44:33 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:44:33 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') exit(0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000080)) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000340)=""/208, 0xd0}], 0x1, 0x1) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000140)={0x1, 0x0, 0x1, 0x6}) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f0000000180)={r1, 0x4}) 03:44:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) 03:44:33 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x3f00]}, 0x48) 03:44:33 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x1fff) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000340)=""/163) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000300)={0x2, &(0x7f00000002c0)=[{0xb5f, 0x1f, 0x8001, 0x4}, {0x0, 0x60, 0x3f, 0x1}]}, 0x10) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.controllers\x00', 0x0, 0x0) getresuid(&(0x7f0000000140)=0x0, &(0x7f00000001c0), &(0x7f0000000200)) r4 = getegid() fchownat(r2, &(0x7f00000000c0)='./file0\x00', r3, r4, 0x1400) getsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 03:44:33 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:44:33 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x4000]}, 0x48) 03:44:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x0, 0xf}, 0x0) 03:44:33 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:44:33 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x4800]}, 0x48) 03:44:33 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:44:33 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:44:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0) 03:44:33 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x4c00]}, 0x48) 03:44:34 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') exit(0x401) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20020}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x8c, r1, 0x200, 0x6, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x58, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x3f}}, @IPVS_SVC_ATTR_PROTOCOL={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x20}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x6}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4040000}, 0x10) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000340)=""/208, 0xd0}], 0x1, 0x1) 03:44:34 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x1fff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x8000, 0x0) acct(&(0x7f0000000140)='./file0\x00') sendto$ax25(r3, &(0x7f0000000040)="ccbdc3d7ac15d5151cc014e5fa023ad4ed141372123442559f", 0x19, 0x40000, &(0x7f0000000080)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x5}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @default, @default, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) fcntl$notify(r0, 0x402, 0x80000030) 03:44:34 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:44:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x0, 0xf0}, 0x0) 03:44:34 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x6100]}, 0x48) 03:44:34 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:44:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x0, 0x300}, 0x0) 03:44:34 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x6300]}, 0x48) 03:44:34 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB]) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:44:34 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:44:34 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x6800]}, 0x48) 03:44:34 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x8010000000000080) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x1fff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 2791.928100] net_ratelimit: 16 callbacks suppressed [ 2791.928108] protocol 88fb is buggy, dev hsr_slave_0 [ 2791.928152] protocol 88fb is buggy, dev hsr_slave_1 [ 2791.933146] protocol 88fb is buggy, dev hsr_slave_1 [ 2791.938288] protocol 88fb is buggy, dev hsr_slave_0 [ 2791.943277] protocol 88fb is buggy, dev hsr_slave_0 [ 2791.948324] protocol 88fb is buggy, dev hsr_slave_1 [ 2791.953269] protocol 88fb is buggy, dev hsr_slave_1 [ 2791.958403] protocol 88fb is buggy, dev hsr_slave_0 [ 2791.973351] protocol 88fb is buggy, dev hsr_slave_1 03:44:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x0, 0xe32}, 0x0) 03:44:34 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x6c00]}, 0x48) 03:44:34 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB]) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:44:34 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='pagemap\xd4J\x14`Rs\xa2\xb7\x9c\x00\xb7dK\xe2Rk\xe3\xc7\x99D\xb5op\x85\xbdy\xa1\xf7ax\xdd\xb3\xb8\xc4u8?D\xb4F\xef\xdb\xf4$\x1f\xd0\xb8\xad&\xc6\xce\x03p\x00') exit(0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000340)=""/208, 0xd0}], 0x1, 0x1) 03:44:34 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:44:34 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x1fff) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:44:35 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x7100]}, 0x48) 03:44:35 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB]) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:44:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x0, 0xec0}, 0x0) 03:44:35 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:44:35 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x7300]}, 0x48) 03:44:35 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[]) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:44:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x0, 0xf00}, 0x0) 03:44:35 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0xfffffffffffffdd7) listen(r0, 0x404000000001ffb) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getpeername$packet(r1, &(0x7f0000000000), &(0x7f0000000040)=0x14) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xa8c, 0x101000) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f00000000c0)={0x0, 0x52, &(0x7f00000001c0)="bb0730a626fb06548616c431168c7a43a5eea42ef342f3428fe5aec0da7874170cace81f1d4397d0f9eb8db96dee351cee1fd1b4e8a767c955d030dcf416d4d71f74b32d329f135301673e90fe01925e5304"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 03:44:35 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x7400]}, 0x48) 03:44:35 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') exit(0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000340)=""/208, 0xd0}], 0x1, 0x1) getrlimit(0x5, &(0x7f0000000080)) 03:44:35 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="61c3"]) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r0}, 0x68) 03:44:35 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:44:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x0, 0x320e}, 0x0) 03:44:35 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x7a00]}, 0x48) 03:44:35 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x1fff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000040)={0xe970e73, 0x7, 0x4, 0x100, {r2, r3/1000+30000}, {0x0, 0xe, 0x0, 0x1, 0x2, 0x4, "9da291cf"}, 0x3, 0x2, @userptr=0x7, 0x4}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$sock_void(r1, 0x1, 0x3f, 0x0, 0x0) [ 2793.128168] protocol 88fb is buggy, dev hsr_slave_0 03:44:36 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0xfa00]}, 0x48) 03:44:36 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="61c3"]) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:44:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x0, 0x3f00}, 0x0) 03:44:36 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:44:36 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0xff00]}, 0x48) 03:44:36 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="61c3"]) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:44:36 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') exit(0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)=0x8, 0x4) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x6, 0x2, 0x3, 0x401, 0x3f}) preadv(r0, &(0x7f0000000040), 0x10000000000002b6, 0x1) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x201, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)=0x3) 03:44:36 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x1fff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r2 = open(&(0x7f0000000000)='./file0\x00', 0x8400, 0x8) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000040)={0x8, 0x7f}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:44:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x0, 0xc00e}, 0x0) 03:44:36 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="61c3"]) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:44:36 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x50c1b]}, 0x48) 03:44:36 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:44:37 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x8e686]}, 0x48) 03:44:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x0, 0xf000}, 0x0) 03:44:37 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0xc00e000000000000}, 0x0) 03:44:37 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:44:37 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x100000]}, 0x48) 03:44:37 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[@cred={0x20}, @cred={0x20}], 0x40}, 0x0) dup2(r0, r0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001cc0)={0xffffffffffffff9c}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r1, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) 03:44:37 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') r1 = semget$private(0x0, 0x3, 0x40) r2 = geteuid() fstat(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000100)={{{@in6=@mcast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}}}, &(0x7f0000000200)=0xe8) getresgid(&(0x7f0000000800)=0x0, &(0x7f00000008c0), &(0x7f0000000700)) semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f0000000440)={{0x40, r2, r3, r4, r5, 0x0, 0x101}, 0x4, 0x5, 0x1}) exit(0x2) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000340)=""/208, 0xd0}], 0x1, 0x1) 03:44:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x0, 0x34000}, 0x0) 03:44:37 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/hwrng\x00', 0x1, 0x0) sendto$x25(r0, &(0x7f0000000300)="b543d374cdc20532ed6fbbcaa733a6141f288a544c42a3a2c38bc7156487ba664cea34f5150ea9f969", 0x29, 0x4001, &(0x7f0000000340)={0x9, @remote={[], 0x1}}, 0x12) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) ioctl(r0, 0x9, &(0x7f0000000380)="9f18077f0124c263022e09d18520c16a5e4a1735d09562fdbb613f3d313e2f0898b63608f11a6e783369857f592646b0d600e1d20fcd96e1f63a954ad4afe62909bf919cdbef50ed178444d9f2") bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r1, 0x1fff) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x400, 0x0) sendmsg$alg(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="918fa4771874339ca140fce0ae60ad7bd84e8f157ac2aaf5e26ddd33368f7baf12", 0x21}, {&(0x7f00000001c0)="701ecad34860490e1b3c69c5f0436fb77b838e47cc1f46ac4100d7e24186014502e62be69712bd5cf5e2e91253fe57dbd2462ea79c241c221b40fc4fecc73697305aa71fd1256ad252d739e58a373bd5062f125a3a4b179f417126c0d1a3db045381a96d8827cc4f4c22c30e816d3051b40244206222b2ad68390158f31bef2544cc7cb3e7666b227290a5e292b1cbd76100f0956c8702e41113f0b5e6154f59a616c2cb9226227db017c3b239c377da5847d336e120fbcc0fe1cde7e77242824c84cc85f8eeb50bd68c001c765a59e680f8e52d10177400836959e330f6253a2f5f1fa54bae35cd3efcf163fce1cc673d2ee6e3120a097d", 0xf8}], 0x2, &(0x7f00000000c0)=[@assoc={0x18}], 0x18, 0x20000800}, 0x4040041) 03:44:37 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x200000]}, 0x48) 03:44:37 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:44:37 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000400)=0xe8) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x40, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="a61c0000000100"], 0x7) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="61c3"]) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r3}, 0x68) 03:44:37 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x1000000]}, 0x48) 03:44:37 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000400)=0xe8) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x40, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="a61c0000000100"], 0x7) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="61c3"]) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r3}, 0x68) 03:44:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x0, 0x400300}, 0x0) 03:44:38 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x400000, 0x0) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000000040)) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0xfffffffffffffffd) listen(r0, 0x1fff) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 03:44:38 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x2000000]}, 0x48) 03:44:38 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:44:38 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') exit(0x0) ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f0000000140)={0x80000000, 0x1, 0x0, [{0xfe, 0x0, 0xfffffffffffff001, 0x66b, 0x0, 0xfffffffffffffffc, 0x9}]}) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000100)) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000340)=""/208, 0xd0}], 0x1, 0x1) getsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000080)=0x7, &(0x7f00000000c0)=0x4) 03:44:38 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000400)=0xe8) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x40, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="a61c0000000100"], 0x7) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="61c3"]) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r3}, 0x68) 03:44:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x0, 0xf0ffff}, 0x0) 03:44:38 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:44:38 executing program 5: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000380)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0)="7ddf3d93a2645a94e7f2b59f78fe04908759500675bd3ceee5bdf336035db2a3e4bbd6cb07db8c18b002dec345ee83ccf350ed7a23a5497b7111014b55c169a32aa6bf8715ac2c03fbaad8ffbba1008f6bbaa747ddabcc964edef647aabdb3932ce2141cb3d30796d536078d44fdd80dbbe64bccd1ff756adcab2a54e0a887ca09", 0x81, r0}, 0x68) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0xd8, &(0x7f00000001c0)=[@in6={0xa, 0x4e21, 0x8001, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3c54}, @in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x4e22, 0x6bb7, @local, 0xffffffff}, @in6={0xa, 0x4e24, 0xfffffffffffffffe, @mcast1, 0xb18}, @in6={0xa, 0x4e23, 0x81, @loopback, 0x8}, @in6={0xa, 0x4e23, 0x3, @local, 0xf9}, @in6={0xa, 0x4e21, 0x5, @rand_addr="e4ce624c2bb4f63357dee1a40f63c32c", 0x240}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={r1, 0x10000, 0x2400000000, 0x6, 0xfffffffffffffff9, 0x3}, 0x14) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r2, 0x1fff) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 03:44:38 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x3000000]}, 0x48) 03:44:38 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x4000000]}, 0x48) 03:44:38 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000400)=0xe8) syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x40, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="a61c0000000100"], 0x7) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="61c3"]) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r3}, 0x68) 03:44:38 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='environ\x00') ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000080)={0x15, 0xffffffffffffff4e, &(0x7f00000002c0)="132dffb6c7ec9d5c9b16d1ca32db1f0f965afa3d8c0e08e5e972a1db44b57719f467d213e4413c9ee94496e1932d6b6a8c1ae26618e1e41c7559e4d0f8101e2148b978128fb7fa96792994279d523ebc38b047a547f370c0c56f3a309da39391c77f7003250ca1a12ab29221de7b54d9054cd2d277ee8d588b5d2d4b06f0ba8024f60563bedc9d22d660161ca3e2a6b100cbe5f9f525bea7686ee10044cfd1fa64f485001f9a9b0a2f6613d661b29f27479aeb162ae84f3f52ccde55b90a2ae51192a457d13c854d1e061013baf9839054aa56f33047db43b22b09d30d0f49e532588644eee0b406138977f9164ad6eec8394592f8577397"}) listen(r0, 0x1fff) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) 03:44:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x0, 0x1000000}, 0x0) 03:44:39 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:44:39 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000400)=0xe8) syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x40, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="a61c0000000100"], 0x7) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="61c3"]) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r3}, 0x68) 03:44:39 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') exit(0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000340)=""/208, 0xd0}], 0x1, 0x1) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000080), &(0x7f00000000c0)=0x40) 03:44:39 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x5000000]}, 0x48) 03:44:39 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) 03:44:39 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000400)=0xe8) syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x40, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="a61c0000000100"], 0x7) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="61c3"]) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r3}, 0x68) 03:44:39 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:44:39 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x1fff) getpeername(r0, &(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @initdev}}, &(0x7f0000000080)=0x80) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r2 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x3, 0x2) write$FUSE_WRITE(r2, &(0x7f0000000140)={0x18, 0x0, 0x1, {0xba92}}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 03:44:39 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x0, 0x3000000}, 0x0) 03:44:39 executing program 2: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x61000000]}, 0x48) 03:44:39 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x6000000]}, 0x48) 03:44:39 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:44:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) 03:44:40 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[@cred={0x20}, @cred={0x20}], 0x40}, 0x0) dup2(r0, r0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001cc0)={0xffffffffffffff9c}) sendmsg$kcm(r1, &(0x7f0000001e40)={&(0x7f0000001d00)=@ipx={0x4, 0x80000001, 0x2, "861edb1b796d"}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x48000}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(r2, &(0x7f0000000700)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r3, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) [ 2797.298143] net_ratelimit: 23 callbacks suppressed [ 2797.298151] protocol 88fb is buggy, dev hsr_slave_0 [ 2797.308217] protocol 88fb is buggy, dev hsr_slave_1 03:44:40 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') exit(0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000340)=""/208, 0xd0}], 0x1, 0x1) 03:44:40 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x7000000]}, 0x48) 03:44:40 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:44:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x0, 0xe320000}, 0x0) 03:44:40 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x1fff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x0, 0x3c) write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14, 0x13, 0x2, {0x8, 0x1, 0x7}}, 0x14) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000000)={'team_slave_1\x00', {0x2, 0x4e20, @multicast2}}) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x200, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f00000001c0)={0xd138, 0x1, {0xffffffffffffffff, 0x2, 0x33d7, 0x2, 0x6}}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fcntl$getown(r0, 0x9) 03:44:40 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[@cred={0x20}, @cred={0x20}], 0x40}, 0x0) dup2(r0, r0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001cc0)={0xffffffffffffff9c}) sendmsg$kcm(r1, &(0x7f0000001e40)={&(0x7f0000001d00)=@ipx={0x4, 0x80000001, 0x2, "861edb1b796d"}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x48000}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(r2, &(0x7f0000000700)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r3, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) 03:44:40 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:44:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x0, 0xf000000}, 0x0) 03:44:40 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0xa000000]}, 0x48) [ 2798.168092] protocol 88fb is buggy, dev hsr_slave_0 [ 2798.168107] protocol 88fb is buggy, dev hsr_slave_0 [ 2798.173242] protocol 88fb is buggy, dev hsr_slave_1 [ 2798.178294] protocol 88fb is buggy, dev hsr_slave_1 [ 2798.183402] protocol 88fb is buggy, dev hsr_slave_0 [ 2798.188458] protocol 88fb is buggy, dev hsr_slave_0 [ 2798.193396] protocol 88fb is buggy, dev hsr_slave_1 [ 2798.198474] protocol 88fb is buggy, dev hsr_slave_1 03:44:41 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0xf000000]}, 0x48) 03:44:41 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x1fff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x99}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={r3, 0x0, 0x20}, 0xc) 03:44:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) 03:44:41 executing program 3: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) write$P9_RWSTAT(r0, &(0x7f0000000080)={0x7, 0x7f, 0x1}, 0x7) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x1, 0x4) preadv(r1, &(0x7f0000000080), 0x0, 0x1) 03:44:41 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x10000000]}, 0x48) 03:44:41 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:44:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x0, 0x3f000000}, 0x0) 03:44:41 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[@cred={0x20}, @cred={0x20}], 0x40}, 0x0) dup2(r0, r0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001cc0)={0xffffffffffffff9c}) sendmsg$kcm(r1, &(0x7f0000001e40)={&(0x7f0000001d00)=@ipx={0x4, 0x80000001, 0x2, "861edb1b796d"}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x48000}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(r2, &(0x7f0000000700)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r3, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) 03:44:41 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @rand_addr, 0xbb0}, 0x247) listen(r0, 0x1fff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x4001fa) 03:44:41 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x18100000]}, 0x48) 03:44:41 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) write$P9_ROPEN(r1, &(0x7f0000000040)={0x18, 0x71, 0x1, {{0x2, 0x2, 0x2}, 0x4}}, 0x18) listen(r0, 0x1fff) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 03:44:41 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') exit(0x0) syz_init_net_socket$ax25(0x3, 0x3, 0xc4) getsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000080), &(0x7f00000000c0)=0x4) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000340)=""/208, 0xd0}], 0x1, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) 03:44:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x0, 0x9effffff}, 0x0) 03:44:41 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:44:41 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x1b0c0500]}, 0x48) 03:44:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x0, 0xc00e0000}, 0x0) 03:44:42 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x20000000]}, 0x48) 03:44:42 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:44:42 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[@cred={0x20}, @cred={0x20}], 0x40}, 0x0) dup2(r0, r0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001cc0)={0xffffffffffffff9c}) sendmsg$kcm(r1, &(0x7f0000001e40)={&(0x7f0000001d00)=@ipx={0x4, 0x80000001, 0x2, "861edb1b796d"}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x48000}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000700)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000200)=@in, 0x80, 0x0}, 0x0) sendmsg(r4, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="964a5c4f0f00fe000030492a768b88daa04797623745e000"], 0x0}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x3b, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x0}, 0x48) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)={&(0x7f0000000380)='./file0\x00', 0x0, 0x18}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001f00)={&(0x7f0000001ec0)='/*cgroup\x00', r3}, 0x10) recvmsg$kcm(r3, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000440)=""/49, 0x31}, {&(0x7f0000000780)=""/123, 0x7b}, {&(0x7f0000001880)=""/198, 0xc6}, {&(0x7f0000000800)=""/59, 0x3b}, {&(0x7f0000001980)=""/76, 0x4c}, {&(0x7f0000000840)=""/57, 0x39}, {&(0x7f0000001b00)=""/23, 0x17}, {0x0}], 0x8, &(0x7f0000001c40)=""/38, 0x26, 0x3f}, 0x40012022) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r5, 0x18000000000002a0, 0x34, 0x0, &(0x7f0000000280)="b90703e6680d698cb89e40f02cead5dc57ee41dea43e63a377fb8a977c3f1d1788e8ad30d84648a27f11c72be0000e01e1977d48", 0x0, 0x100}, 0x28) 03:44:42 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x7, 0x4) listen(r0, 0x1fff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x1, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) getpeername$packet(0xffffffffffffff9c, &(0x7f0000002900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002940)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000007bc0)={{{@in=@broadcast, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@initdev}}, &(0x7f0000007cc0)=0xe8) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000007ec0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000007e80)={&(0x7f0000007d00)={0x180, r3, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8, 0x1, r4}, {0xc0, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0xc, 0x4, [{0x9, 0x0, 0x7a, 0x1}]}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x7ff}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r6}, {0x4}}, {{0x8, 0x1, r7}, {0x90, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x180}, 0x1, 0x0, 0x0, 0x8000}, 0x20000890) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) 03:44:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0) 03:44:42 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x2e000000]}, 0x48) 03:44:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x0, 0xfffff000}, 0x0) 03:44:42 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x80000, 0x0) sendmmsg$nfc_llcp(r0, &(0x7f0000000540)=[{&(0x7f0000000140)={0x27, 0x0, 0x0, 0x7, 0x3, 0x0, "5f166b45bfb929869d50595ff9759f6da55174d3a0204f0f8ee801677a294098530605e43e4677d6d2a2aa260f8a9432cdaf65157e11a896f36d51629ee726"}, 0x60, &(0x7f0000000300)=[{&(0x7f00000001c0)="9643316b59311947ab77f320fd4a8e586c943a4183773a86342989e22e27d56616b9a06c927fd5768512e8547df5a3a25020841a5970ee69b88597dd16c4ff5cb8b592fdec22092be3705e4eaac235349b61cb92b75bfb2000f5f234860133739df34283d7acbc4359", 0x69}, {&(0x7f0000000240)="e83f5daa8b8278ade35df55ac38ecdb0fc839bf4af4a57", 0x17}, {&(0x7f0000000280)="2ef63feb8889709ce209481368080e5da001fe59d45b9b9278ae76879b50cc6ed22ce474542c4194bcce66bf51ade60f3d6bb07c4db062a76251a4b7e5bc7e41c27b722b65363d5ff3e540d75963e579fe3764bd503791d08190d3ed3e0fd01b9e49c0330a28", 0x66}], 0x3, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0xd8, 0x40010}], 0x1, 0x90) setxattr$trusted_overlay_redirect(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='trusted.overlay.redirect\x00', &(0x7f0000000600)='./file0\x00', 0x8, 0x1) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000640)) fcntl$getownex(r0, 0x10, &(0x7f00000006c0)) fcntl$getownex(r0, 0x10, &(0x7f0000000700)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000008c0)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000900)='\x00\x00\x00\x00\x00#\xadOZ\xf2\xb9\xc4\x96\xf6/\xd7{W\xd5)S\x0e\xae\xe6\xd8x{\xd5,\xbb#P#@\xcf\x00\x12/F\xec\xa7\xa0\xc5B\xac\xf9Ax<\xdcL\xbfl\xa6.\xf4\x1d\xe4\xf7+d3\xfb\xf0s\xaf\xa8\xf0P\x01\xdb\x85\xa0|\xae~\xcb\bua\xfeH\xeaT\r\"\x90|=)\xb6\xc6\x1c}\x98\x8e\x9cDH\xfb\xb5M\x7f\xa9\xa3\x00\b\x00n\x06\xb6D\x02\xaa\xc6\x05Wd!*\x06\xa8\xean\xe7\xf8JJ\x16\xafT\x17\f&\xf7\xbar\xc3\xecrR\x97\xff8d_P\xeb\x95\x8c\x84\xc2aiI\xe7ta\x832X\x0f\xf2\x84\xa6\xf8\xa5>B\xb9b') exit(0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000340)=""/208, 0xd0}], 0x1, 0x1) getsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x8) 03:44:42 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x3c000000]}, 0x48) 03:44:42 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:44:42 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[@cred={0x20}, @cred={0x20}], 0x40}, 0x0) dup2(r0, r0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001cc0)={0xffffffffffffff9c}) sendmsg$kcm(r1, &(0x7f0000001e40)={&(0x7f0000001d00)=@ipx={0x4, 0x80000001, 0x2, "861edb1b796d"}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x48000}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000700)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000200)=@in, 0x80, 0x0}, 0x0) sendmsg(r4, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="964a5c4f0f00fe000030492a768b88daa04797623745e000"], 0x0}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x3b, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000003000000bfa300000000000007ff7a0af0fff8ffffff79a4f0ff00000000b7060097d322ed102b22a0cbfb00ffffffff2d6405000000000065040400010000010404000001007d60b7030000000000006a0a00fe000000008500eb000d000000b70000000000000095000000000000000992856eb30101de1c9c8b2e2f258262eb2c8000000000f32829400618da282b85522f31d2a7af6fc3af42e3aaf9bad0849f1465c7296fd7ca860b7d570b10459acb1c7eb4231c595b80f9292d6c6e2058e012d51a7bea5d5de98e8bba4756d518b81bf697658d311b4887d8d4b8a6c193e7b61e70985e92ef9a4f3c1b9018479a510fe1ba9d8a10dd9f5ed3b9fd6fef0a7f000000837cbf0231c0dc3c57721cca8bcbaf706febc7d680757a9a1bb692e7cf7f2668f1b4e1f2e8f2e18b8a638b0a9117f640ee3861c0ba4354beea9aacf60f1592916987671999c32cd9eb022c39af2e98983e74e3c98add3ee749f3655cab923bb5aa2f2b031d093539b3120749815ffd139a5d6c562dae59b50ffe6d3a2b5b33008d09ea8931855aec84ffe1b1ab7f6df75fd11516477294fea3836da7275d9dda4e3a28c0d5c8e950ed337a10dada6313b04265473c5bf61a4d34e144bb950ba90839bf610e5896d1537527ab2939ea1df0e740"], 0x0}, 0x48) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)={&(0x7f0000000380)='./file0\x00', 0x0, 0x18}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001f00)={&(0x7f0000001ec0)='/*cgroup\x00', r3}, 0x10) recvmsg$kcm(r3, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000440)=""/49, 0x31}, {&(0x7f0000000780)=""/123, 0x7b}, {&(0x7f0000001880)=""/198, 0xc6}, {&(0x7f0000000800)=""/59, 0x3b}, {&(0x7f0000001980)=""/76, 0x4c}, {&(0x7f0000000840)=""/57, 0x39}, {&(0x7f0000001b00)=""/23, 0x17}, {0x0}], 0x8, &(0x7f0000001c40)=""/38, 0x26, 0x3f}, 0x40012022) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r5, 0x18000000000002a0, 0x34, 0x0, &(0x7f0000000280)="b90703e6680d698cb89e40f02cead5dc57ee41dea43e63a377fb8a977c3f1d1788e8ad30d84648a27f11c72be0000e01e1977d48", 0x0, 0x100}, 0x28) 03:44:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0) 03:44:42 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x1fff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x3c, 0x280000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@ipv4={[], [], @empty}, 0x5, 0x2, 0x0, 0x8, 0x200, 0x8}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 03:44:43 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x3d000000]}, 0x48) 03:44:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x0, 0xffffff9e}, 0x0) 03:44:43 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:44:43 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x3f000000]}, 0x48) 03:44:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x0, 0xfffffff0}, 0x0) 03:44:43 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:44:43 executing program 3: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000001c0)=0x0) syz_open_procfs(r0, &(0x7f0000000140)='smaps_rollup\x00O\x85\xb1\x96/\x9c\xf9\x99\xc5\x18p`\f\xfc\xa1IJ(d\xbc\xb3\xdfI#\x93lD\x883\x86\x03\xd4\xda}\xd2\x0e\xa6\xcb\xe2\x81Ek\x02\xbb\xb6S\x9eW(\xefdy\x97+\xa9\xec\xc8\xa2\xed\xc2\xd5\xfb\xb6\x8f+t\xee~c\x87\xf9j&\xd0\xd8\n\xc2H\x06P\x9fA\xee\x1f 1\xbd') exit(0x0) syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x8000) 03:44:43 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x40000000]}, 0x48) 03:44:43 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x1fff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup2(r1, r2) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0xffffffffffffbbe5, 0x8}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000080)={r4, 0xea}, 0x8) 03:44:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x0, 0x40030000000000}, 0x0) 03:44:43 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[@cred={0x20}, @cred={0x20}], 0x40}, 0x0) dup2(r0, r0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001cc0)={0xffffffffffffff9c}) sendmsg$kcm(r1, &(0x7f0000001e40)={&(0x7f0000001d00)=@ipx={0x4, 0x80000001, 0x2, "861edb1b796d"}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x48000}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000700)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000200)=@in, 0x80, 0x0}, 0x0) sendmsg(r4, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="964a5c4f0f00fe000030492a768b88daa04797623745e000"], 0x0}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x3b, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x0}, 0x48) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)={&(0x7f0000000380)='./file0\x00', 0x0, 0x18}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001f00)={&(0x7f0000001ec0)='/*cgroup\x00', r3}, 0x10) recvmsg$kcm(r3, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000440)=""/49, 0x31}, {&(0x7f0000000780)=""/123, 0x7b}, {&(0x7f0000001880)=""/198, 0xc6}, {&(0x7f0000000800)=""/59, 0x3b}, {&(0x7f0000001980)=""/76, 0x4c}, {&(0x7f0000000840)=""/57, 0x39}, {&(0x7f0000001b00)=""/23, 0x17}, {0x0}], 0x8, &(0x7f0000001c40)=""/38, 0x26, 0x3f}, 0x40012022) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r5, 0x18000000000002a0, 0x34, 0x0, &(0x7f0000000280)="b90703e6680d698cb89e40f02cead5dc57ee41dea43e63a377fb8a977c3f1d1788e8ad30d84648a27f11c72be0000e01e1977d48", 0x0, 0x100}, 0x28) 03:44:43 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:44:43 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x48000000]}, 0x48) 03:44:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x0, 0xf0ffffffffffff}, 0x0) 03:44:44 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x4c000000]}, 0x48) 03:44:44 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:44:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x0, 0x100000000000000}, 0x0) 03:44:44 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000088) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x1fff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:44:44 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) 03:44:44 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x61000000]}, 0x48) 03:44:44 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @mcast1}, 0x1c) listen(r0, 0x1fff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:44:44 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') exit(0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000340)=""/208, 0xd0}], 0x1, 0x1) openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000000c0)={0x0, @reserved}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x8000}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r1, 0x10001, 0x3, 0x9, 0x59, 0x8}, 0x14) ioctl$KVM_SMI(r0, 0xaeb7) 03:44:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x0, 0x200000000000000}, 0x0) 03:44:44 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:44:45 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:44:45 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x63000000]}, 0x48) 03:44:45 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x81, 0x80c00) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000002c0), &(0x7f0000000300)=0x8) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r1, 0x1fff) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="080826bd7000fddbdf2501000000000020000c410000000c001473797a3100000000"], 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x8041) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r5 = semget(0x1, 0x1, 0x4bd) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0x0, r3, 0x0, 0x5, &(0x7f0000000380)='TIPC\x00', 0xffffffffffffffff}, 0x30) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r6, 0x10, &(0x7f0000000400)={0xaea5}) semctl$IPC_STAT(r5, 0x0, 0x2, &(0x7f00000000c0)=""/49) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x200}, &(0x7f0000000040)=0x8) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x64) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000080)=r7, 0x4) 03:44:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x0, 0x300000000000000}, 0x0) [ 2802.328106] net_ratelimit: 16 callbacks suppressed [ 2802.328114] protocol 88fb is buggy, dev hsr_slave_0 [ 2802.328209] protocol 88fb is buggy, dev hsr_slave_0 [ 2802.333177] protocol 88fb is buggy, dev hsr_slave_1 [ 2802.338196] protocol 88fb is buggy, dev hsr_slave_1 [ 2802.343260] protocol 88fb is buggy, dev hsr_slave_0 [ 2802.348302] protocol 88fb is buggy, dev hsr_slave_0 [ 2802.353240] protocol 88fb is buggy, dev hsr_slave_1 [ 2802.358289] protocol 88fb is buggy, dev hsr_slave_1 [ 2802.373439] protocol 88fb is buggy, dev hsr_slave_0 03:44:45 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) [ 2802.378610] protocol 88fb is buggy, dev hsr_slave_1 03:44:45 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x68000000]}, 0x48) 03:44:45 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) 03:44:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x0, 0x800000000000000}, 0x0) 03:44:45 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[@cred={0x20}, @cred={0x20}], 0x40}, 0x0) dup2(r0, r0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001cc0)={0xffffffffffffff9c}) sendmsg$kcm(r1, &(0x7f0000001e40)={&(0x7f0000001d00)=@ipx={0x4, 0x80000001, 0x2, "861edb1b796d"}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x48000}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000700)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000200)=@in, 0x80, 0x0}, 0x0) sendmsg(r4, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="964a5c4f0f00fe000030492a768b88daa04797623745e000"], 0x0}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x3b, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000003000000bfa300000000000007ff7a0af0fff8ffffff79a4f0ff00000000b7060097d322ed102b22a0cbfb00ffffffff2d6405000000000065040400010000010404000001007d60b7030000000000006a0a00fe000000008500eb000d000000b70000000000000095000000000000000992856eb30101de1c9c8b2e2f258262eb2c8000000000f32829400618da282b85522f31d2a7af6fc3af42e3aaf9bad0849f1465c7296fd7ca860b7d570b10459acb1c7eb4231c595b80f9292d6c6e2058e012d51a7bea5d5de98e8bba4756d518b81bf697658d311b4887d8d4b8a6c193e7b61e70985e92ef9a4f3c1b9018479a510fe1ba9d8a10dd9f5ed3b9fd6fef0a7f000000837cbf0231c0dc3c57721cca8bcbaf706febc7d680757a9a1bb692e7cf7f2668f1b4e1f2e8f2e18b8a638b0a9117f640ee3861c0ba4354beea9aacf60f1592916987671999c32cd9eb022c39af2e98983e74e3c98add3ee749f3655cab923bb5aa2f2b031d093539b3120749815ffd139a5d6c562dae59b50ffe6d3a2b5b33008d09ea8931855aec84ffe1b1ab7f6df75fd11516477294fea3836da7275d9dda4e3a28c0d5c8e950ed337a10dada6313b04265473c5bf61a4d34e144bb950ba90839bf610e5896d1537527ab2939ea1df0e740"], 0x0}, 0x48) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)={&(0x7f0000000380)='./file0\x00', 0x0, 0x18}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001f00)={&(0x7f0000001ec0)='/*cgroup\x00', r3}, 0x10) recvmsg$kcm(r3, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000440)=""/49, 0x31}, {&(0x7f0000000780)=""/123, 0x7b}, {&(0x7f0000001880)=""/198, 0xc6}, {&(0x7f0000000800)=""/59, 0x3b}, {&(0x7f0000001980)=""/76, 0x4c}, {&(0x7f0000000840)=""/57, 0x39}, {&(0x7f0000001b00)=""/23, 0x17}, {0x0}], 0x8, &(0x7f0000001c40)=""/38, 0x26, 0x3f}, 0x40012022) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r5, 0x18000000000002a0, 0x34, 0x0, &(0x7f0000000280)="b90703e6680d698cb89e40f02cead5dc57ee41dea43e63a377fb8a977c3f1d1788e8ad30d84648a27f11c72be0000e01e1977d48", 0x0, 0x100}, 0x28) socketpair(0xb, 0x8, 0x800, &(0x7f0000000600)) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000500)) socketpair(0x4, 0x0, 0x7f, &(0x7f0000000680)) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001000)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0xfffffffffffffe0f) socketpair(0x1, 0x2000000001, 0x0, &(0x7f0000000740)) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x1ed1, 0x4, 0xffff, 0x4, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100100000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, r2, 0x10000002) 03:44:45 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') r1 = gettid() perf_event_open(&(0x7f00000000c0)={0x7, 0x70, 0x8000, 0x7, 0x3, 0x1, 0x0, 0xff, 0x8800, 0x6, 0x0, 0x8000, 0x6, 0xdc5f, 0x7, 0x7fff, 0x8, 0x3, 0x8, 0xfff, 0x9, 0xbc, 0x7, 0x0, 0x1000, 0x1e, 0xb4, 0x6, 0x5, 0xffffffff, 0x8, 0x0, 0xff, 0xfd8, 0x6c, 0xfffffffffffff000, 0x8, 0x2, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000080), 0x2}, 0x0, 0x2, 0x9, 0x3, 0xffffffffffffff7f, 0x1ff, 0x47c}, r1, 0x4, r0, 0x8) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x311}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x200080c5}, 0x4) r3 = socket$key(0xf, 0x3, 0x2) unshare(0x400) sendmmsg(r3, 0x0, 0x0, 0x0) exit(0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000440)=""/208, 0xd0}], 0x1, 0x1) 03:44:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x0, 0xe32000000000000}, 0x0) 03:44:45 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x6c000000]}, 0x48) 03:44:45 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) 03:44:45 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0xfffffffffffffffd, 0x0, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000380)={0x3, 0x83, &(0x7f00000002c0)="0773ec0d3e134bad4ca6334320ce7de3505ffbfaf6d93b75e0b6610611ffe9ad57607ea43aabcf09d95e075b08887fd654c451fb3a803766784dd79daa3fcdbcd196dfb942b1da9652e7dd013670c65c16819ab748c7b5125e96b4c7badf2f1a18c56bd958acb525b085bf9b39c351ce46ed34e8f2b82821d347c17c5cd3327252cb27"}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x400, 0x0) sendmsg$alg(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="1256729155a3df05ce81f91943a97e502f85a5468768f77796bc38e37b008825b2badf172cfe065bde2de904b7f0e849090ddfca0cabb21da0ac51669ba840c4bb7369d987563a5fabeb57c1e912a2ef51745ae0f7a6a26ba45034abea6ad95e063549d4a78c2be1abbfabd8ddab0c378f83034d057acfd1670bea5dbdf8f2aa5563e41627f43db5aafb7d3e807ddd6bbf08ea0d66eb0f442596e79c867021e389867554155154978f55cbd7cbda304c874598b04d4292998e589fff125c93711c48d92caaeb5a90bb6b928a9185141aa579bc45a44b9d30cde4f7d7d0cfee7d7d2de5a3b2f77374", 0xe8}, {&(0x7f0000000040)="74f92d83dcf8964875ea31a2f0a80b5f5a6040382d895cf59d0ae523712c03061fe72e9969a98dccc664a4c4530f27acbcb7509807da98cc816a9b723ede6b53ae137ce6b6802645a5014d699cb1141b7adda534d82359b822c5950e87791bf9c26da38165d722e1f632caf59f52", 0x6e}], 0x2, 0x0, 0x0, 0x20000000}, 0x80) listen(r0, 0x1fff) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 03:44:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x0, 0xf00000000000000}, 0x0) 03:44:45 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x71000000]}, 0x48) 03:44:46 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, 0x0, 0x0, r1}, 0x68) 03:44:46 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x73000000]}, 0x48) 03:44:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x0, 0x1000000000000000}, 0x0) 03:44:46 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x1fff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x800, 0x0) accept$packet(0xffffffffffffff9c, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) sendmsg$can_raw(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x1d, r3}, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=@can={{0x2, 0x7, 0x8, 0xffffffffffffffe1}, 0x3, 0x3, 0x0, 0x0, "ea1b9ed0f5638ec4"}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x40000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 03:44:46 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[@cred={0x20}, @cred={0x20}], 0x40}, 0x0) dup2(r0, r0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001cc0)={0xffffffffffffff9c}) sendmsg$kcm(r1, &(0x7f0000001e40)={&(0x7f0000001d00)=@ipx={0x4, 0x80000001, 0x2, "861edb1b796d"}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x48000}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000700)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000200)=@in, 0x80, 0x0}, 0x0) sendmsg(r4, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="964a5c4f0f00fe000030492a768b88daa04797623745e000"], 0x0}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x3b, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x0}, 0x48) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)={&(0x7f0000000380)='./file0\x00', 0x0, 0x18}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001f00)={&(0x7f0000001ec0)='/*cgroup\x00', r3}, 0x10) recvmsg$kcm(r3, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000440)=""/49, 0x31}, {&(0x7f0000000780)=""/123, 0x7b}, {&(0x7f0000001880)=""/198, 0xc6}, {&(0x7f0000000800)=""/59, 0x3b}, {&(0x7f0000001980)=""/76, 0x4c}, {&(0x7f0000000840)=""/57, 0x39}, {&(0x7f0000001b00)=""/23, 0x17}, {0x0}], 0x8, &(0x7f0000001c40)=""/38, 0x26, 0x3f}, 0x40012022) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r5, 0x18000000000002a0, 0x34, 0x0, &(0x7f0000000280)="b90703e6680d698cb89e40f02cead5dc57ee41dea43e63a377fb8a977c3f1d1788e8ad30d84648a27f11c72be0000e01e1977d48", 0x0, 0x100}, 0x28) socketpair(0xb, 0x8, 0x800, &(0x7f0000000600)) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000500)) socketpair(0x4, 0x0, 0x7f, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001000)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0xfffffffffffffe0f) socketpair(0x1, 0x2000000001, 0x0, &(0x7f0000000740)) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x1ed1, 0x4, 0xffff, 0x4, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100100000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, r2, 0x10000002) openat$cgroup_ro(r6, &(0x7f0000001f80)='cpuacct.usage_all\x00', 0x0, 0x0) 03:44:46 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x40000, 0x0) recvfrom$llc(r0, &(0x7f0000000200)=""/12, 0xc, 0x20, &(0x7f0000000240)={0x1a, 0x102, 0x9, 0x1, 0x3, 0x0, @local}, 0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') exit(0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000440)={0x9, 0x108, 0xfa00, {r3, 0x17, "38fc4d", "7ca78e57ebaefae1bd3c5bb062afeadffee22819479ff07684c0e3c16b31dcaa09f490d90925c06bd7c5b5a22d04fd28940bcefb925ad8adc1f7210075d351b53f90a99f35e9782bcc5c08fdbe5be2a51450ebada489eb60af3d6612e38de8b9d28b6a7ae64e7860f8e9390011b173b8976ba0925863b56c401854fbfcdcb80e7c9070e65d1dd972b0831f35d3ef087564a0778d99b24325a177b27a965228b58f8eaaa8b72eb707d74da2c102f507cd530b28a4c582d898b4443e4213a24569a85519e3199d9cc47061fd89136a91eea89dc562e1a2721769a54dbd02f62386ba51e84ae32281d955a46eb14965fb5e7243479f831daa0987d38a9550cbb8c4"}}, 0x110) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10002008000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, r2, 0x4, 0x70bd25, 0x25dfdbfd, {{}, 0x0, 0x4107, 0x0, {0x4c, 0x18, {0x7ff, @media='ib\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x40040) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r1, 0xc0045520, &(0x7f0000000180)=0x4) preadv(r1, &(0x7f0000000040), 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000040)={'syz0', "a1fc4cc5b78b07bf314e21c29dbc12787bb5949c3af943a63549b35caff7501249"}, 0x25) write$selinux_validatetrans(r1, &(0x7f0000000080)={'system_u:object_r:iptables_conf_t:s0', 0x20, 'system_u:object_r:cert_t:s0', 0x20, 0x6e5, 0x20, 'unconfined_u:system_r:insmod_t:s0-s0:c0.c1023\x00'}, 0x84) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) 03:44:46 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x74000000]}, 0x48) 03:44:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x0, 0x3f00000000000000}, 0x0) 03:44:46 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, 0x0, 0x0, r1}, 0x68) 03:44:46 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@timestamp, @timestamp, @window={0x3, 0x1ff, 0x8}], 0x3) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x1fff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:44:46 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, 0x0, 0x0, r1}, 0x68) 03:44:47 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x7a000000]}, 0x48) 03:44:47 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, 0x0, 0x0, r1}, 0x68) 03:44:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x0, 0x9effffff00000000}, 0x0) 03:44:47 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x85ffffff]}, 0x48) 03:44:47 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, 0x0, 0x0, r1}, 0x68) 03:44:47 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, 0x0, 0x0, r1}, 0x68) 03:44:47 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x1fff) r1 = socket$inet6_sctp(0xa, 0x800000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:44:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x0, 0xc00e000000000000}, 0x0) 03:44:47 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x86e60800]}, 0x48) 03:44:47 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') pread64(r0, &(0x7f0000000080)=""/213, 0xd5, 0x0) exit(0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000340)=""/208, 0xd0}], 0x1, 0x1) 03:44:47 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[@cred={0x20}, @cred={0x20}], 0x40}, 0x0) dup2(r0, r0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001cc0)={0xffffffffffffff9c}) sendmsg$kcm(r1, &(0x7f0000001e40)={&(0x7f0000001d00)=@ipx={0x4, 0x80000001, 0x2, "861edb1b796d"}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x48000}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000700)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000200)=@in, 0x80, 0x0}, 0x0) sendmsg(r4, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="964a5c4f0f00fe000030492a768b88daa04797623745e000"], 0x0}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x3b, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000003000000bfa300000000000007ff7a0af0fff8ffffff79a4f0ff00000000b7060097d322ed102b22a0cbfb00ffffffff2d6405000000000065040400010000010404000001007d60b7030000000000006a0a00fe000000008500eb000d000000b70000000000000095000000000000000992856eb30101de1c9c8b2e2f258262eb2c8000000000f32829400618da282b85522f31d2a7af6fc3af42e3aaf9bad0849f1465c7296fd7ca860b7d570b10459acb1c7eb4231c595b80f9292d6c6e2058e012d51a7bea5d5de98e8bba4756d518b81bf697658d311b4887d8d4b8a6c193e7b61e70985e92ef9a4f3c1b9018479a510fe1ba9d8a10dd9f5ed3b9fd6fef0a7f000000837cbf0231c0dc3c57721cca8bcbaf706febc7d680757a9a1bb692e7cf7f2668f1b4e1f2e8f2e18b8a638b0a9117f640ee3861c0ba4354beea9aacf60f1592916987671999c32cd9eb022c39af2e98983e74e3c98add3ee749f3655cab923bb5aa2f2b031d093539b3120749815ffd139a5d6c562dae59b50ffe6d3a2b5b33008d09ea8931855aec84ffe1b1ab7f6df75fd11516477294fea3836da7275d9dda4e3a28c0d5c8e950ed337a10dada6313b04265473c5bf61a4d34e144bb950ba90839bf610e5896d1537527ab2939ea1df0e740"], 0x0}, 0x48) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)={&(0x7f0000000380)='./file0\x00', 0x0, 0x18}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001f00)={&(0x7f0000001ec0)='/*cgroup\x00', r3}, 0x10) recvmsg$kcm(r3, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000440)=""/49, 0x31}, {&(0x7f0000000780)=""/123, 0x7b}, {&(0x7f0000001880)=""/198, 0xc6}, {&(0x7f0000000800)=""/59, 0x3b}, {&(0x7f0000001980)=""/76, 0x4c}, {&(0x7f0000000840)=""/57, 0x39}, {&(0x7f0000001b00)=""/23, 0x17}, {0x0}], 0x8, &(0x7f0000001c40)=""/38, 0x26, 0x3f}, 0x40012022) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r5, 0x18000000000002a0, 0x34, 0x0, &(0x7f0000000280)="b90703e6680d698cb89e40f02cead5dc57ee41dea43e63a377fb8a977c3f1d1788e8ad30d84648a27f11c72be0000e01e1977d48", 0x0, 0x100}, 0x28) socketpair(0xb, 0x8, 0x800, &(0x7f0000000600)) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000500)) socketpair(0x4, 0x0, 0x7f, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001000)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0xfffffffffffffe0f) socketpair(0x1, 0x2000000001, 0x0, &(0x7f0000000740)) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x1ed1, 0x4, 0xffff, 0x4, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100100000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, r2, 0x10000002) openat$cgroup_ro(r6, &(0x7f0000001f80)='cpuacct.usage_all\x00', 0x0, 0x0) 03:44:47 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500)}, 0x68) 03:44:47 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x9cffffff]}, 0x48) 03:44:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x0, 0xf0ffffff00000000}, 0x0) 03:44:48 executing program 5: r0 = socket$inet6(0xa, 0x8, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x1fff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x80282, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r3, 0x25, 0x70bd2a, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x20040884) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000)={0x0, 0xaf2}, &(0x7f0000000040)=0x8) syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000640)={0x0, 0x0}, &(0x7f0000000680)=0xc) syz_mount_image$xfs(&(0x7f0000000300)='xfs\x00', &(0x7f0000000340)='./file0\x00', 0x57, 0x2, &(0x7f0000000540)=[{&(0x7f0000000380)="a0fa7db651d2457bdf0923ecebb95293c0f254d5ff670488277ebb3521891118dc5d65dfeacd08cd88557b8bb8e82c7f52075d4252aa9e8b23585eaba377524dbd842715663572216f716eb90af945b171371de71aa20ecb17651c7b94b6661d51348709075e0ff1f5d243cd7fabe30f6c751477fccda005716cb7a489500402efcdd4c080b1b1c7db2cd5cd982f8267c7a028e1df7fdd1c6564660ffd17947e5e84d672aa1226a005910b774d51051d7e012f864d4b06f5b7e71a547a87bf6cba1aa6a39d2e0fd6ac30449e8f94bb3f857748a3bf26a2db9be3218c9b6dfc4dfe0ca0a088eeedaf5fec30", 0xeb, 0x7fff}, {&(0x7f0000000480)="592c757db5461c168a974624cf31cf91d249c210e3ca2031f98407c33e8901ca807bc21ed0a44e16f326142dc934caf9d41c4860e49dc384771651a8a375ecbb63fbfd75e938ebaa9983576033e53143a6ec765c84f1246adea4e7a9d9cbca990081d44216d2ff326e93d415941a327eccbb9bf31ca4f9d9c648edff2f20f8a8551d95cc66a5f35f779462782ecf5c6b67737412ac9de9e950d5c1208c5220efb7c47ced", 0xa4, 0x3}], 0x8e6864, &(0x7f00000007c0)=ANY=[@ANYBLOB="6e6f67727069642c716e6f656e666f7263652c73756e69743d3078303030303030303030303030303030312c646f6e745f686173682c61656469742c666f776e65723e73e86c0fc06c1663083a80caecb98d4cc712", @ANYRESDEC=r5, @ANYBLOB=',obj_type=vboxnet1vboxnet1,obj_type=/dev/snapshot\x00,dont_measure,func=MMAP_CHECK,fowner<', @ANYRESDEC=r6, @ANYBLOB=',fsname=TIPC\x00,\x00']) lstat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={r4, 0xdd06, 0x9, 0x7, 0x100000001, 0x81}, &(0x7f00000000c0)=0x14) 03:44:48 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x9fffffff]}, 0x48) 03:44:48 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500)}, 0x68) 03:44:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x0, 0xffffff7f00000000}, 0x0) 03:44:48 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0xe4ffffff]}, 0x48) 03:44:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x0, 0xfffffffffffff000}, 0x0) 03:44:48 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0xfa000000]}, 0x48) 03:44:48 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[@cred={0x20}, @cred={0x20}], 0x40}, 0x0) dup2(r0, r0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001cc0)={0xffffffffffffff9c}) sendmsg$kcm(r1, &(0x7f0000001e40)={&(0x7f0000001d00)=@ipx={0x4, 0x80000001, 0x2, "861edb1b796d"}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x48000}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000700)='memory.events\x00', 0x7a05, 0x1700) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000200)=@in, 0x80, 0x0}, 0x0) sendmsg(r5, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="964a5c4f0f00fe000030492a768b88daa04797623745e000"], 0x0}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x3b, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000003000000bfa300000000000007ff7a0af0fff8ffffff79a4f0ff00000000b7060097d322ed102b22a0cbfb00ffffffff2d6405000000000065040400010000010404000001007d60b7030000000000006a0a00fe000000008500eb000d000000b70000000000000095000000000000000992856eb30101de1c9c8b2e2f258262eb2c8000000000f32829400618da282b85522f31d2a7af6fc3af42e3aaf9bad0849f1465c7296fd7ca860b7d570b10459acb1c7eb4231c595b80f9292d6c6e2058e012d51a7bea5d5de98e8bba4756d518b81bf697658d311b4887d8d4b8a6c193e7b61e70985e92ef9a4f3c1b9018479a510fe1ba9d8a10dd9f5ed3b9fd6fef0a7f000000837cbf0231c0dc3c57721cca8bcbaf706febc7d680757a9a1bb692e7cf7f2668f1b4e1f2e8f2e18b8a638b0a9117f640ee3861c0ba4354beea9aacf60f1592916987671999c32cd9eb022c39af2e98983e74e3c98add3ee749f3655cab923bb5aa2f2b031d093539b3120749815ffd139a5d6c562dae59b50ffe6d3a2b5b33008d09ea8931855aec84ffe1b1ab7f6df75fd11516477294fea3836da7275d9dda4e3a28c0d5c8e950ed337a10dada6313b04265473c5bf61a4d34e144bb950ba90839bf610e5896d1537527ab2939ea1df0e740"], 0x0}, 0x48) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)={&(0x7f0000000380)='./file0\x00', 0x0, 0x18}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001f00)={&(0x7f0000001ec0)='/*cgroup\x00', r3}, 0x10) recvmsg$kcm(r3, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000440)=""/49, 0x31}, {&(0x7f0000000780)=""/123, 0x7b}, {&(0x7f0000001880)=""/198, 0xc6}, {&(0x7f0000000800)=""/59, 0x3b}, {&(0x7f0000001980)=""/76, 0x4c}, {&(0x7f0000000840)=""/57, 0x39}, {&(0x7f0000001b00)=""/23, 0x17}, {0x0}], 0x8, &(0x7f0000001c40)=""/38, 0x26, 0x3f}, 0x40012022) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r6, 0x18000000000002a0, 0x34, 0x0, &(0x7f0000000280)="b90703e6680d698cb89e40f02cead5dc57ee41dea43e63a377fb8a977c3f1d1788e8ad30d84648a27f11c72be0000e01e1977d48", 0x0, 0x100}, 0x28) socketpair(0xb, 0x8, 0x800, &(0x7f0000000600)) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000500)) socketpair(0x4, 0x0, 0x7f, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001000)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0xfffffffffffffe0f) socketpair(0x1, 0x2000000001, 0x0, &(0x7f0000000740)) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x1ed1, 0x4, 0xffff, 0x4, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100100000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, r2, 0x10000002) openat$cgroup_ro(r7, &(0x7f0000001f80)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000004c0)=0x800) 03:44:48 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x100, 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f00000000c0)={0x80, 0x10001, 0x86, 0x3}, 0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') exit(0x3fffffffffffffe) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000340)=""/208, 0xd0}], 0x1, 0x1) 03:44:48 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x1fff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x2, 0x7}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000140)={r4, @in={{0x2, 0x4e23, @loopback}}, [0xeb, 0xff, 0x3c7, 0x8, 0x5, 0xca, 0xffff, 0x1f, 0x7ff, 0x5ecf2d09, 0x1000, 0x40, 0x1f, 0x6, 0x7]}, &(0x7f0000000240)=0x100) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x3f) 03:44:48 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500)}, 0x68) 03:44:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) 03:44:48 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0xff000000]}, 0x48) 03:44:48 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0xffffff85]}, 0x48) 03:44:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) 03:44:49 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[@cred={0x20}, @cred={0x20}], 0x40}, 0x0) dup2(r0, r0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001cc0)={0xffffffffffffff9c}) sendmsg$kcm(r1, &(0x7f0000001e40)={&(0x7f0000001d00)=@ipx={0x4, 0x80000001, 0x2, "861edb1b796d"}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x48000}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000700)='memory.events\x00', 0x7a05, 0x1700) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000200)=@in, 0x80, 0x0}, 0x0) sendmsg(r5, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="964a5c4f0f00fe000030492a768b88daa04797623745e000"], 0x0}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x3b, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x0}, 0x48) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)={&(0x7f0000000380)='./file0\x00', 0x0, 0x18}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001f00)={&(0x7f0000001ec0)='/*cgroup\x00', r3}, 0x10) recvmsg$kcm(r3, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000440)=""/49, 0x31}, {&(0x7f0000000780)=""/123, 0x7b}, {&(0x7f0000001880)=""/198, 0xc6}, {&(0x7f0000000800)=""/59, 0x3b}, {&(0x7f0000001980)=""/76, 0x4c}, {&(0x7f0000000840)=""/57, 0x39}, {&(0x7f0000001b00)=""/23, 0x17}, {0x0}], 0x8, &(0x7f0000001c40)=""/38, 0x26, 0x3f}, 0x40012022) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r6, 0x18000000000002a0, 0x34, 0x0, &(0x7f0000000280)="b90703e6680d698cb89e40f02cead5dc57ee41dea43e63a377fb8a977c3f1d1788e8ad30d84648a27f11c72be0000e01e1977d48", 0x0, 0x100}, 0x28) socketpair(0xb, 0x8, 0x800, &(0x7f0000000600)) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000500)) socketpair(0x4, 0x0, 0x7f, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001000)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0xfffffffffffffe0f) socketpair(0x1, 0x2000000001, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x1ed1, 0x4, 0xffff, 0x4, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100100000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, r2, 0x10000002) openat$cgroup_ro(r7, &(0x7f0000001f80)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000004c0)=0x800) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') 03:44:49 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x2002) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x100000000}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r1, 0x8}, &(0x7f00000000c0)=0x8) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGPROP(r5, 0x80404509, &(0x7f0000000200)=""/135) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000002c0)={r5, 0x9, 0x7ff, r4}) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x40, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 03:44:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) 03:44:49 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0xffffff9c]}, 0x48) 03:44:49 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[@cred={0x20}, @cred={0x20}], 0x40}, 0x0) dup2(r0, r0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001cc0)={0xffffffffffffff9c}) sendmsg$kcm(r1, &(0x7f0000001e40)={&(0x7f0000001d00)=@ipx={0x4, 0x80000001, 0x2, "861edb1b796d"}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x48000}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000700)='memory.events\x00', 0x7a05, 0x1700) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000200)=@in, 0x80, 0x0}, 0x0) sendmsg(r5, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="964a5c4f0f00fe000030492a768b88daa04797623745e000"], 0x0}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x3b, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x0}, 0x48) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)={&(0x7f0000000380)='./file0\x00', 0x0, 0x18}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001f00)={&(0x7f0000001ec0)='/*cgroup\x00', r3}, 0x10) recvmsg$kcm(r3, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000440)=""/49, 0x31}, {&(0x7f0000000780)=""/123, 0x7b}, {&(0x7f0000001880)=""/198, 0xc6}, {&(0x7f0000000800)=""/59, 0x3b}, {&(0x7f0000001980)=""/76, 0x4c}, {&(0x7f0000000840)=""/57, 0x39}, {&(0x7f0000001b00)=""/23, 0x17}, {0x0}], 0x8, &(0x7f0000001c40)=""/38, 0x26, 0x3f}, 0x40012022) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r6, 0x18000000000002a0, 0x34, 0x0, &(0x7f0000000280)="b90703e6680d698cb89e40f02cead5dc57ee41dea43e63a377fb8a977c3f1d1788e8ad30d84648a27f11c72be0000e01e1977d48", 0x0, 0x100}, 0x28) socketpair(0xb, 0x8, 0x800, &(0x7f0000000600)) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000500)) socketpair(0x4, 0x0, 0x7f, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001000)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0xfffffffffffffe0f) socketpair(0x1, 0x2000000001, 0x0, &(0x7f0000000740)) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x1ed1, 0x4, 0xffff, 0x4, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100100000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, r2, 0x10000002) openat$cgroup_ro(r7, &(0x7f0000001f80)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000004c0)=0x800) [ 2806.320008] sctp: [Deprecated]: syz-executor.5 (pid 15810) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2806.320008] Use struct sctp_sack_info instead [ 2806.535272] sctp: [Deprecated]: syz-executor.5 (pid 15823) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2806.535272] Use struct sctp_sack_info instead 03:44:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) 03:44:49 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smapoIlup\x00\x00\x00\x00') exit(0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x2) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x5, 0x4) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000340)=""/208, 0xd0}], 0x10000041, 0x1) write$P9_RRENAME(r0, &(0x7f0000000140)={0x7, 0x15, 0x1}, 0xfffffffffffffdd4) rt_sigtimedwait(&(0x7f0000000080)={0x2}, 0x0, &(0x7f00000000c0), 0x8) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000100)={0xf57, 0x7, 0x3}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000005c0)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@multicast1}}, &(0x7f00000006c0)=0xe8) syz_mount_image$btrfs(&(0x7f0000000180)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x7, 0x4, &(0x7f0000000540)=[{&(0x7f0000000200)="3b052c851a4e47e290bfa3b04ed4956c1ab8b33768bca99eda64ddb323a86c2144ac1c77264cdb81efa41921444f11acf11afc61ce681696b00282eba532fd86648f5f7f7fb5454e1f54c56f76eaff0a926a9833dcf28cb88a622732aef2cf3400", 0x61, 0x1}, {&(0x7f0000000440)="6453276d87d9ff99e8e4a2070ef0eac0d4aae8bb3ec54be70af0ca76d8d2289d99c8fcee173c5e238acdd531e2ee361cfe58b49fc8b283a64dde30925aed4a3a9d55e7e64c824df3c17613cce10faebb281dff1af94129bca030cb9ecaee3b3ab445552f57addce3bf10ee0405758fc829481918190a7e3918cea55abaa86b742d7aadf01b306bec789948018088f9d434b87fbf9e5e817699285dbbfbe4bfb80f53fd43c816d0645743d27f9042f20c65685857f48d17a80e5f215b8c81a0c23c76294e1420317f8cd69bc415ebafbd2461bb82c6920d13a214a1b7b2b7b2f9b932dbd79014e447ec60eed2c3c754c9", 0xf0}, {&(0x7f0000000280)="50d64b2f225655e1e73da9bf4d7e3b2de28cde0e3d991b75fcd5a32ffc11be3467d487ba8b694ec2107d0c96e31e661921840bcc7a5e31c04eaed6044f7c8d862243dfdda87bea8c890f454e6e72afb549e6e17a02355ea3a2804e9f663484bc47b6caa2dc9d5944682e5f9ce2a576193ddc0d130ded5e6243cacb97ddeb4d", 0x7f, 0x200}, {&(0x7f0000000300)="0ecf0719aa9b4a850bb46b97e805bf5c4730466b273f5196ff", 0x19, 0x7}], 0x400, &(0x7f0000000700)={[{@ref_verify='ref_verify'}, {@datasum='datasum'}, {@skip_balance='skip_balance'}, {@inode_cache='inode_cache'}, {@ssd='ssd'}, {@subvolid={'subvolid', 0x3d, 0x3ff}}, {@noinode_cache='noinode_cache'}], [{@obj_type={'obj_type', 0x3d, 'smapoIlup\x00'}}, {@euid_eq={'euid', 0x3d, r1}}, {@permit_directio='permit_directio'}]}) 03:44:49 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0xffffff9f]}, 0x48) 03:44:49 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r0, 0x1fff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = shmget(0x2, 0x1000, 0x800, &(0x7f0000ffd000/0x1000)=nil) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000000)={{{@in=@initdev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@local}}, &(0x7f0000000100)=0xe8) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = geteuid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000002c0)=0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000300)=0x0) shmctl$IPC_SET(r4, 0x1, &(0x7f0000000340)={{0x73c, r5, r6, r7, r8, 0xc, 0x3}, 0x100000000, 0x47, 0x3, 0x5, r9, r10, 0x7ff}) 03:44:49 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[@cred={0x20}, @cred={0x20}], 0x40}, 0x0) dup2(r0, r0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001cc0)={0xffffffffffffff9c}) sendmsg$kcm(r1, &(0x7f0000001e40)={&(0x7f0000001d00)=@ipx={0x4, 0x80000001, 0x2, "861edb1b796d"}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x48000}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000700)='memory.events\x00', 0x7a05, 0x1700) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000200)=@in, 0x80, 0x0}, 0x0) sendmsg(r5, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="964a5c4f0f00fe000030492a768b88daa04797623745e000"], 0x0}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x3b, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x0}, 0x48) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)={&(0x7f0000000380)='./file0\x00', 0x0, 0x18}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001f00)={&(0x7f0000001ec0)='/*cgroup\x00', r3}, 0x10) recvmsg$kcm(r3, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000440)=""/49, 0x31}, {&(0x7f0000000780)=""/123, 0x7b}, {&(0x7f0000001880)=""/198, 0xc6}, {&(0x7f0000000800)=""/59, 0x3b}, {&(0x7f0000001980)=""/76, 0x4c}, {&(0x7f0000000840)=""/57, 0x39}, {&(0x7f0000001b00)=""/23, 0x17}, {0x0}], 0x8, &(0x7f0000001c40)=""/38, 0x26, 0x3f}, 0x40012022) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r6, 0x18000000000002a0, 0x34, 0x0, &(0x7f0000000280)="b90703e6680d698cb89e40f02cead5dc57ee41dea43e63a377fb8a977c3f1d1788e8ad30d84648a27f11c72be0000e01e1977d48", 0x0, 0x100}, 0x28) socketpair(0xb, 0x8, 0x800, &(0x7f0000000600)) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000500)) socketpair(0x4, 0x0, 0x7f, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001000)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0xfffffffffffffe0f) socketpair(0x1, 0x2000000001, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x1ed1, 0x4, 0xffff, 0x4, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100100000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, r2, 0x10000002) openat$cgroup_ro(r7, &(0x7f0000001f80)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000004c0)=0x800) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 03:44:49 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[@cred={0x20}, @cred={0x20}], 0x40}, 0x0) dup2(r0, r0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001cc0)={0xffffffffffffff9c}) sendmsg$kcm(r1, &(0x7f0000001e40)={&(0x7f0000001d00)=@ipx={0x4, 0x80000001, 0x2, "861edb1b796d"}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x48000}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000700)='memory.events\x00', 0x7a05, 0x1700) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000200)=@in, 0x80, 0x0}, 0x0) sendmsg(r5, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="964a5c4f0f00fe000030492a768b88daa04797623745e000"], 0x0}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x3b, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000003000000bfa300000000000007ff7a0af0fff8ffffff79a4f0ff00000000b7060097d322ed102b22a0cbfb00ffffffff2d6405000000000065040400010000010404000001007d60b7030000000000006a0a00fe000000008500eb000d000000b70000000000000095000000000000000992856eb30101de1c9c8b2e2f258262eb2c8000000000f32829400618da282b85522f31d2a7af6fc3af42e3aaf9bad0849f1465c7296fd7ca860b7d570b10459acb1c7eb4231c595b80f9292d6c6e2058e012d51a7bea5d5de98e8bba4756d518b81bf697658d311b4887d8d4b8a6c193e7b61e70985e92ef9a4f3c1b9018479a510fe1ba9d8a10dd9f5ed3b9fd6fef0a7f000000837cbf0231c0dc3c57721cca8bcbaf706febc7d680757a9a1bb692e7cf7f2668f1b4e1f2e8f2e18b8a638b0a9117f640ee3861c0ba4354beea9aacf60f1592916987671999c32cd9eb022c39af2e98983e74e3c98add3ee749f3655cab923bb5aa2f2b031d093539b3120749815ffd139a5d6c562dae59b50ffe6d3a2b5b33008d09ea8931855aec84ffe1b1ab7f6df75fd11516477294fea3836da7275d9dda4e3a28c0d5c8e950ed337a10dada6313b04265473c5bf61a4d34e144bb950ba90839bf610e5896d1537527ab2939ea1df0e740"], 0x0}, 0x48) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)={&(0x7f0000000380)='./file0\x00', 0x0, 0x18}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001f00)={&(0x7f0000001ec0)='/*cgroup\x00', r3}, 0x10) recvmsg$kcm(r3, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000440)=""/49, 0x31}, {&(0x7f0000000780)=""/123, 0x7b}, {&(0x7f0000001880)=""/198, 0xc6}, {&(0x7f0000000800)=""/59, 0x3b}, {&(0x7f0000001980)=""/76, 0x4c}, {&(0x7f0000000840)=""/57, 0x39}, {&(0x7f0000001b00)=""/23, 0x17}, {0x0}], 0x8, &(0x7f0000001c40)=""/38, 0x26, 0x3f}, 0x40012022) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r6, 0x18000000000002a0, 0x34, 0x0, &(0x7f0000000280)="b90703e6680d698cb89e40f02cead5dc57ee41dea43e63a377fb8a977c3f1d1788e8ad30d84648a27f11c72be0000e01e1977d48", 0x0, 0x100}, 0x28) socketpair(0xb, 0x8, 0x800, &(0x7f0000000600)) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000500)) socketpair(0x4, 0x0, 0x7f, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001000)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0xfffffffffffffe0f) socketpair(0x1, 0x2000000001, 0x0, &(0x7f0000000740)) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x1ed1, 0x4, 0xffff, 0x4, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100100000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, r2, 0x10000002) openat$cgroup_ro(r7, &(0x7f0000001f80)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000004c0)=0x800) 03:44:49 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0xffffffe4]}, 0x48) 03:44:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) 03:44:50 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x1fff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$mouse(&(0x7f0000000400)='/dev/input/mouse#\x00', 0x0, 0x400) r2 = syz_open_dev$midi(&(0x7f0000000240)='/dev/midi#\x00', 0x100, 0x4800) ioctl$TIOCMBIS(r2, 0x5416, &(0x7f00000002c0)=0x7fff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0xefb, 0x200000) ioctl$TIOCLINUX7(r4, 0x541c, &(0x7f00000003c0)={0x7, 0x5}) ioctl$KVM_SET_XCRS(r4, 0x4188aea7, &(0x7f0000000280)=ANY=[@ANYBLOB="010000005d02b38e00c4bbf7100100000009000000000000000300000000000000"]) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x14001, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') getsockopt$inet_udp_int(r2, 0x11, 0xb, &(0x7f0000000300), &(0x7f0000000340)=0x4) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000380)={0x7, 0x0, 0x6, 0x3}, 0x8) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, r6, 0x300, 0x70bd29, 0x25dfdbfb, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x6, 0x6, 0x1f, 0x401}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4004}, 0x80) 03:44:50 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x1000000000000]}, 0x48) 03:44:50 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[@cred={0x20}, @cred={0x20}], 0x40}, 0x0) dup2(r0, r0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001cc0)={0xffffffffffffff9c}) sendmsg$kcm(r1, &(0x7f0000001e40)={&(0x7f0000001d00)=@ipx={0x4, 0x80000001, 0x2, "861edb1b796d"}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x48000}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000700)='memory.events\x00', 0x7a05, 0x1700) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000200)=@in, 0x80, 0x0}, 0x0) sendmsg(r5, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="964a5c4f0f00fe000030492a768b88daa04797623745e000"], 0x0}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x3b, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000003000000bfa300000000000007ff7a0af0fff8ffffff79a4f0ff00000000b7060097d322ed102b22a0cbfb00ffffffff2d6405000000000065040400010000010404000001007d60b7030000000000006a0a00fe000000008500eb000d000000b70000000000000095000000000000000992856eb30101de1c9c8b2e2f258262eb2c8000000000f32829400618da282b85522f31d2a7af6fc3af42e3aaf9bad0849f1465c7296fd7ca860b7d570b10459acb1c7eb4231c595b80f9292d6c6e2058e012d51a7bea5d5de98e8bba4756d518b81bf697658d311b4887d8d4b8a6c193e7b61e70985e92ef9a4f3c1b9018479a510fe1ba9d8a10dd9f5ed3b9fd6fef0a7f000000837cbf0231c0dc3c57721cca8bcbaf706febc7d680757a9a1bb692e7cf7f2668f1b4e1f2e8f2e18b8a638b0a9117f640ee3861c0ba4354beea9aacf60f1592916987671999c32cd9eb022c39af2e98983e74e3c98add3ee749f3655cab923bb5aa2f2b031d093539b3120749815ffd139a5d6c562dae59b50ffe6d3a2b5b33008d09ea8931855aec84ffe1b1ab7f6df75fd11516477294fea3836da7275d9dda4e3a28c0d5c8e950ed337a10dada6313b04265473c5bf61a4d34e144bb950ba90839bf610e5896d1537527ab2939ea1df0e740"], 0x0}, 0x48) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)={&(0x7f0000000380)='./file0\x00', 0x0, 0x18}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001f00)={&(0x7f0000001ec0)='/*cgroup\x00', r3}, 0x10) recvmsg$kcm(r3, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000440)=""/49, 0x31}, {&(0x7f0000000780)=""/123, 0x7b}, {&(0x7f0000001880)=""/198, 0xc6}, {&(0x7f0000000800)=""/59, 0x3b}, {&(0x7f0000001980)=""/76, 0x4c}, {&(0x7f0000000840)=""/57, 0x39}, {&(0x7f0000001b00)=""/23, 0x17}, {0x0}], 0x8, &(0x7f0000001c40)=""/38, 0x26, 0x3f}, 0x40012022) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r6, 0x18000000000002a0, 0x34, 0x0, &(0x7f0000000280)="b90703e6680d698cb89e40f02cead5dc57ee41dea43e63a377fb8a977c3f1d1788e8ad30d84648a27f11c72be0000e01e1977d48", 0x0, 0x100}, 0x28) socketpair(0xb, 0x8, 0x800, &(0x7f0000000600)) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000500)) socketpair(0x4, 0x0, 0x7f, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001000)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0xfffffffffffffe0f) socketpair(0x1, 0x2000000001, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x1ed1, 0x4, 0xffff, 0x4, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100100000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, r2, 0x10000002) openat$cgroup_ro(r7, &(0x7f0000001f80)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000004c0)=0x800) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 03:44:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) 03:44:50 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x10000000000000]}, 0x48) [ 2807.698117] net_ratelimit: 24 callbacks suppressed [ 2807.698123] protocol 88fb is buggy, dev hsr_slave_0 [ 2807.703207] protocol 88fb is buggy, dev hsr_slave_1 03:44:50 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x20000000000000]}, 0x48) 03:44:50 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x1fff) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r2 = dup(r0) ioctl$SCSI_IOCTL_START_UNIT(r2, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 03:44:50 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r0, &(0x7f0000000080)="241742886689a6d90dbbce81dbceb3984eef25ad4fe6f175204d18e508200aa9e4880f7aac22d86d9909898297df00f4bc4b1b5ce2f6ea5d728ea855348a749c64a0eec5744c236a2682d0e989f47fe57312fff73b161bed7eb0e38a4c30a480dfa374467b397b98198cdc12b9", 0x6d, 0x20008080, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e21, @local}}}, &(0x7f0000000240)=0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r2, 0x8a7}, 0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000100)={r2, 0x4, 0x10, 0x6, 0x4}, &(0x7f0000000280)=0x18) exit(0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000340)=""/208, 0xd0}], 0x1, 0x1) 03:44:50 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000400)=0xe8) syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') r2 = open(&(0x7f0000000280)='./bus\x00', 0x141042, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x40, 0x0) write$P9_RLERRORu(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="a61c0000000100"], 0x7) write$P9_RRENAME(r2, 0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f00000000c0)={'IDLETIMER\x00'}, &(0x7f0000000140)=0x1e) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r4}, 0x68) 03:44:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) 03:44:50 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[@cred={0x20}, @cred={0x20}], 0x40}, 0x0) dup2(r0, r0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001cc0)={0xffffffffffffff9c}) sendmsg$kcm(r1, &(0x7f0000001e40)={&(0x7f0000001d00)=@ipx={0x4, 0x80000001, 0x2, "861edb1b796d"}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x48000}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000700)='memory.events\x00', 0x7a05, 0x1700) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000200)=@in, 0x80, 0x0}, 0x0) sendmsg(r5, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="964a5c4f0f00fe000030492a768b88daa04797623745e000"], 0x0}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x3b, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x0}, 0x48) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)={&(0x7f0000000380)='./file0\x00', 0x0, 0x18}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001f00)={&(0x7f0000001ec0)='/*cgroup\x00', r3}, 0x10) recvmsg$kcm(r3, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000440)=""/49, 0x31}, {&(0x7f0000000780)=""/123, 0x7b}, {&(0x7f0000001880)=""/198, 0xc6}, {&(0x7f0000000800)=""/59, 0x3b}, {&(0x7f0000001980)=""/76, 0x4c}, {&(0x7f0000000840)=""/57, 0x39}, {&(0x7f0000001b00)=""/23, 0x17}, {0x0}], 0x8, &(0x7f0000001c40)=""/38, 0x26, 0x3f}, 0x40012022) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r6, 0x18000000000002a0, 0x34, 0x0, &(0x7f0000000280)="b90703e6680d698cb89e40f02cead5dc57ee41dea43e63a377fb8a977c3f1d1788e8ad30d84648a27f11c72be0000e01e1977d48", 0x0, 0x100}, 0x28) socketpair(0xb, 0x8, 0x800, &(0x7f0000000600)) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000500)) socketpair(0x4, 0x0, 0x7f, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001000)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0xfffffffffffffe0f) socketpair(0x1, 0x2000000001, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x1ed1, 0x4, 0xffff, 0x4, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100100000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, r2, 0x10000002) openat$cgroup_ro(r7, &(0x7f0000001f80)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000004c0)=0x800) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 03:44:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) 03:44:50 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x100000000000000]}, 0x48) 03:44:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) 03:44:51 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x200000000000000]}, 0x48) 03:44:51 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x1fff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4), 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x8081, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000240)=@buf={0x68, &(0x7f00000001c0)="5338d86050b193f2ae055286fe4ce4920bd2c1c97e36bf6af423faf88ee09674cf22e711d4045486315bea48944126944995aeebe232d659db6ae0a219e98d1b73c280a674a9786d3fa9d8bcb4e6b9ced648b6835c33636536bc8073b90374898097377b821e66a8"}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x4001ff) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000040), &(0x7f0000000080)=0x4) 03:44:51 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[@cred={0x20}, @cred={0x20}], 0x40}, 0x0) dup2(r0, r0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001cc0)={0xffffffffffffff9c}) sendmsg$kcm(r1, &(0x7f0000001e40)={&(0x7f0000001d00)=@ipx={0x4, 0x80000001, 0x2, "861edb1b796d"}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x48000}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000700)='memory.events\x00', 0x7a05, 0x1700) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000200)=@in, 0x80, 0x0}, 0x0) sendmsg(r5, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="964a5c4f0f00fe000030492a768b88daa04797623745e000"], 0x0}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x3b, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x0}, 0x48) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)={&(0x7f0000000380)='./file0\x00', 0x0, 0x18}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001f00)={&(0x7f0000001ec0)='/*cgroup\x00', r3}, 0x10) recvmsg$kcm(r3, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000440)=""/49, 0x31}, {&(0x7f0000000780)=""/123, 0x7b}, {&(0x7f0000001880)=""/198, 0xc6}, {&(0x7f0000000800)=""/59, 0x3b}, {&(0x7f0000001980)=""/76, 0x4c}, {&(0x7f0000000840)=""/57, 0x39}, {&(0x7f0000001b00)=""/23, 0x17}, {0x0}], 0x8, &(0x7f0000001c40)=""/38, 0x26, 0x3f}, 0x40012022) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r6, 0x18000000000002a0, 0x34, 0x0, &(0x7f0000000280)="b90703e6680d698cb89e40f02cead5dc57ee41dea43e63a377fb8a977c3f1d1788e8ad30d84648a27f11c72be0000e01e1977d48", 0x0, 0x100}, 0x28) socketpair(0xb, 0x8, 0x800, &(0x7f0000000600)) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000500)) socketpair(0x4, 0x0, 0x7f, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001000)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0xfffffffffffffe0f) socketpair(0x1, 0x2000000001, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x1ed1, 0x4, 0xffff, 0x4, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100100000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, r2, 0x10000002) openat$cgroup_ro(r7, &(0x7f0000001f80)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000004c0)=0x800) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x1, 0x0) 03:44:51 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[@cred={0x20}, @cred={0x20}], 0x40}, 0x0) dup2(r0, r0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001cc0)={0xffffffffffffff9c}) sendmsg$kcm(r1, &(0x7f0000001e40)={&(0x7f0000001d00)=@ipx={0x4, 0x80000001, 0x2, "861edb1b796d"}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x48000}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000700)='memory.events\x00', 0x7a05, 0x1700) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000200)=@in, 0x80, 0x0}, 0x0) sendmsg(r5, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="964a5c4f0f00fe000030492a768b88daa04797623745e000"], 0x0}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x3b, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000003000000bfa300000000000007ff7a0af0fff8ffffff79a4f0ff00000000b7060097d322ed102b22a0cbfb00ffffffff2d6405000000000065040400010000010404000001007d60b7030000000000006a0a00fe000000008500eb000d000000b70000000000000095000000000000000992856eb30101de1c9c8b2e2f258262eb2c8000000000f32829400618da282b85522f31d2a7af6fc3af42e3aaf9bad0849f1465c7296fd7ca860b7d570b10459acb1c7eb4231c595b80f9292d6c6e2058e012d51a7bea5d5de98e8bba4756d518b81bf697658d311b4887d8d4b8a6c193e7b61e70985e92ef9a4f3c1b9018479a510fe1ba9d8a10dd9f5ed3b9fd6fef0a7f000000837cbf0231c0dc3c57721cca8bcbaf706febc7d680757a9a1bb692e7cf7f2668f1b4e1f2e8f2e18b8a638b0a9117f640ee3861c0ba4354beea9aacf60f1592916987671999c32cd9eb022c39af2e98983e74e3c98add3ee749f3655cab923bb5aa2f2b031d093539b3120749815ffd139a5d6c562dae59b50ffe6d3a2b5b33008d09ea8931855aec84ffe1b1ab7f6df75fd11516477294fea3836da7275d9dda4e3a28c0d5c8e950ed337a10dada6313b04265473c5bf61a4d34e144bb950ba90839bf610e5896d1537527ab2939ea1df0e740"], 0x0}, 0x48) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)={&(0x7f0000000380)='./file0\x00', 0x0, 0x18}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001f00)={&(0x7f0000001ec0)='/*cgroup\x00', r3}, 0x10) recvmsg$kcm(r3, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000440)=""/49, 0x31}, {&(0x7f0000000780)=""/123, 0x7b}, {&(0x7f0000001880)=""/198, 0xc6}, {&(0x7f0000000800)=""/59, 0x3b}, {&(0x7f0000001980)=""/76, 0x4c}, {&(0x7f0000000840)=""/57, 0x39}, {&(0x7f0000001b00)=""/23, 0x17}, {0x0}], 0x8, &(0x7f0000001c40)=""/38, 0x26, 0x3f}, 0x40012022) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r6, 0x18000000000002a0, 0x34, 0x0, &(0x7f0000000280)="b90703e6680d698cb89e40f02cead5dc57ee41dea43e63a377fb8a977c3f1d1788e8ad30d84648a27f11c72be0000e01e1977d48", 0x0, 0x100}, 0x28) socketpair(0xb, 0x8, 0x800, &(0x7f0000000600)) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000500)) socketpair(0x4, 0x0, 0x7f, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001000)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0xfffffffffffffe0f) socketpair(0x1, 0x2000000001, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x1ed1, 0x4, 0xffff, 0x4, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100100000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, r2, 0x10000002) openat$cgroup_ro(r7, &(0x7f0000001f80)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000004c0)=0x800) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 2808.568176] protocol 88fb is buggy, dev hsr_slave_0 [ 2808.573334] protocol 88fb is buggy, dev hsr_slave_1 [ 2808.578241] protocol 88fb is buggy, dev hsr_slave_0 [ 2808.578543] protocol 88fb is buggy, dev hsr_slave_0 [ 2808.584443] protocol 88fb is buggy, dev hsr_slave_1 [ 2808.588540] protocol 88fb is buggy, dev hsr_slave_1 [ 2808.594526] protocol 88fb is buggy, dev hsr_slave_0 [ 2808.603897] protocol 88fb is buggy, dev hsr_slave_1 03:44:51 executing program 3: r0 = open(&(0x7f0000000080)='./file0\x00', 0x240000, 0x80) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="540000001d8e730227bd7000fbdbdf252c00130000000000000000000000000000000000ff020000000000000000000000000001000000000a00000010000a002cbd700029bd70000500000008000b0005000000"], 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x850) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') exit(0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000340)=""/208, 0xd0}], 0x1, 0x1) 03:44:51 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x300000000000000]}, 0x48) 03:44:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) 03:44:51 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x1fff) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 03:44:51 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000400)=0xe8) syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') r2 = open(&(0x7f0000000280)='./bus\x00', 0x141042, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x40, 0x0) write$P9_RLERRORu(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="a61c0000000100"], 0x7) write$P9_RRENAME(r2, 0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f00000000c0)={'IDLETIMER\x00'}, &(0x7f0000000140)=0x1e) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="61c3"]) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r4}, 0x68) 03:44:51 executing program 2 (fault-call:12 fault-nth:0): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:44:51 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x1fff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f00000001c0)={r4, @in6={{0xa, 0x4e20, 0x2, @mcast2}}, [0x9, 0x1, 0x100, 0x1, 0xffffffffffffffe1, 0x3920000000000000, 0xfffffffffffffffd, 0x3, 0x0, 0x1ff, 0x5, 0x7, 0x1, 0x7851531a, 0x9]}, &(0x7f00000000c0)=0x100) 03:44:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) 03:44:51 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x400000000000000]}, 0x48) 03:44:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) 03:44:52 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x500000000000000]}, 0x48) 03:44:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) 03:44:52 executing program 3: syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0xa, &(0x7f0000001800)=[{&(0x7f0000000100)="f6388e246f941d138cd9d82c24ab25a4cde6749bf22de6e43cfe8f989725a9fa3941c112e22ffa22e21da064aad21016353ca16cb49b560f09b488ffba5db5f118901269d6b464e733507af27b483d7f613c66d5fb2217499b65c01a81afe4565fe3b43e12200c61f09032fb53ca6be0626551a8104065970773361a993ae67ef0cd9e63", 0x84, 0xfffffffffffffffb}, {&(0x7f00000001c0)="490528d2ab7c00ef755186072cce5a559a4151f1d9a037d3a5d89efb05cb0a1b19ee625e88108923f19141c614765498d04bb7ef41a00266c0698385c6b2abc1bfac41aeefa0abeabd13fed49dbb8d5e48034fc2fa31e067f3dbbcfe554fd9f568c4533dbd7ac61ab0f2c3a7d658bc69f5fd24ade361ea52d5f7e753de6903393afb1d8d7be19500b218e9529d01763dcd137099", 0x94, 0x2}, {&(0x7f0000000440)="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", 0x1000, 0x49c1644a}, {&(0x7f0000000280)="159831a60e1a053b05f0dea7b2dab6b5ae76b509e679fe46ea60605b83970aa2685a429fa1d72f93ff273bb0957b1f606d3739c68e467b7eb83ec79d7531507d8375f5620295faac9e7d03c738c33e1c309edb7fd4377279f0faeec11a312df758814df326877079686a9ffa821f60daa4863ff121df15", 0x77, 0x3}, {&(0x7f0000001440)="6a7a0b057607c44c22c7e7ec94ae6b9d8134ec7b1416a690eb63f16697d08f94c79c01cca9a9134ebea11f7c3bbadf7eaa28eaf461ecd8fde53976867916e5368b6ead9c1d81ac876484e62bbca11f3d64741a381f17aebde4cffeef8b40149ee3880e7ba7b0d7098bb6779ec0c2b2c1a821829de2d0f13e496b65cc7c2c1edacbf44884e2d63c248b770872a1818b07a6e8aebf0e7bda43074a7963f868b7d5b74f1ca096d7059b6058a77550b172bb829dd61fb50979ef89fa5e11c4b41ad628ff78cd1d9054c1aaafa87b288739327afebe5be129844e90c914e2893c7a04010b63a9c968452c740674fa9c3e0a8658eb9ed2c793eff1", 0xf8, 0x10001}, {&(0x7f0000001540)="74cf0a6be2148b3a719c141efb16405592f3e3bfb4928f3cd8957d6c6af32ee6d23273548648d19175276781449c64aebfb38ea842b89860518dd09dce96363d32c914f0a7c74c94b197efda5e2e2083c30e2b778f5a0a5cafa2df05cc719a", 0x5f}, {&(0x7f0000000300)="1705a19919cf611545c60511", 0xc, 0xf3}, {&(0x7f00000015c0)="86f22663f1e9764a129ac8190d62201915f6bdb915195257060b0c46f7f6190bc93ff27171550afdceac262b2039ca15681317a5c6d0a6411a2ac5699eae57db5289678abad742d345c6186aa20ba4ee37487e2f351102d76714b6280eadb941a482a98f97ef02ef438a8a96baf3893b1631baaf8218b2afe243725f67d55620d61429c145e072696a1e842061780adb439fa9cdac08d0f9288f09f3b063b1932c", 0xa1, 0x1}, {&(0x7f0000001a00)="4a8d3bda559944a42e324b16710ef229beba4b817015299c76c95b06400182cfc92912c8bb2ccb1feef611e1b808051186dd8a9acd8160ef57989a8fc884323cdb7cd2439b368d7069f2ce9b5abe1a10220f85fe7d9d7128ae97fe161170af257d2ddb6b3d734e0620301a105752d64e48f8d33ea08678064fa0656a56339bfedf6b90f371b49839482db40da9916cb8bab27b241aab7adfb44c9c25216d817e4ba5e13c075e71099dfaabea279ca833118e317d371f37c3c9033dc7b318e73efc", 0xc1, 0x7}, {&(0x7f0000001780)="484b6b584fa56adc334ad403f9b35b4111cd80d65018f0b74b429c1ad4b787c9dc59b200e0fbeaeb59f318e232262d25b26b9f229ac99825bbd33fb26ed8ebebc6a7657c34", 0x45, 0x100000000}], 0x4010, &(0x7f0000001900)={[{@nolazytime='nolazytime'}, {@wsync='wsync'}, {@noquota='noquota'}, {@usrquota='usrquota'}, {@uqnoenforce='uqnoenforce'}, {@nodiscard='nodiscard'}, {@nogrpid='nogrpid'}], [{@appraise_type='appraise_type=imasig'}, {@obj_user={'obj_user', 0x3d, 'smaps_rollup\x00'}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}) r0 = syz_open_dev$admmidi(&(0x7f0000001680)='/dev/admmidi#\x00', 0x7ff, 0x400400) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f00000016c0)=@assoc_value={0x0, 0x40}, &(0x7f0000001700)=0x8) sendmmsg$inet_sctp(r0, &(0x7f0000002100)=[{&(0x7f0000001980)=@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000019c0)=[{&(0x7f0000001b00)="8639c1a4a315618f07fa260d2c45024668d037f1855d864216f99cfc3f80cd04717e8bfbf8fee948870d5d0c46c5aa00845c519287e047720c8a730cd021b858c1fc3197597991abec23b68745446601e346a2557ac752192d3d18db1de1993232f4329b02a9f13a24ba6622cfee1473536525fed9545d0824a62b4ae64bb985f29d97b576de440f9c66171ddc2c8d63de542cb7e22634c30c454653ac9473f6ee4e68672493c6f3e83c52641613fe5ac2c13f5e675182811b4ae236b84af205bab7873fd5eff6e1d6f4cfba9af7a4c1b4badeb461995bdfb6f6ca07848530420b0a", 0xe2}, {&(0x7f0000001e00)="8711482b9071b6e8f919c33c74985e17e75cecef9ef6cbd887e313e1886d9dc78dfdb5e1dba77242456bda9771a0f7b4a5ed65ad352f1bd0bbe05b1e5033cea4aee702d3e7a0d691467bfde0c0bda6e923586ac4ae85d4f8d52fe73f46be7e8a50eae5e5e60929753108a254649098b3859ed84d4ce9fda67d20dae222264428551f6d37c141bd673c15ba5a49c8e88aac9622edc5d3b0e8284c9d61725638845558ac62fea3d5823439bdaa2ce6fe2391efa1fca2e5a8be93cf0a74", 0xbc}, {&(0x7f0000001ec0)="6b0b9bda75cf92f9ece7caa4caec7c7370a4e9a6b2cb2be8403daddcc36eba8d4c822c2073e17b793445b755e192800ce1ac020282ff93387f3980d07b24f50d8e19c3917acfd932e8a1203ac60657298081bedc3cd4b9aea0de4daa67c6a84e3e98c935d3d8f618a34ed32a6424f226b9520f57148b3258fc1809c2d98a0ac7683bdf1a9d8c24e21ee77e9e83ac336f6ded483269c6076b121c98de7b27efe9e5c1694fac8ffbab3862d9cad0a9969332bcdfbf9aad2848e77f138fdb150934ad", 0xc1}, {&(0x7f0000001fc0)="d2735a1543a9c488aa1913aca2af973666d3bd813d35418739e545c1e674f51e2f4ad11a759329d1fab304de19cbc76436d50a74f73a8dfbbadcc33f77b53cdbc4b2292aec2494b25116251c88bd24c9188dabafdb861afd99fc887e1d62de0d6118eefbd754b10141e86c93e2a98b51c69e2b61c4eecaa9f27848f6ea25bb9f69991d6f650c9d5f24a7dbd733c3ddcfd7c12286c65b980f882f6d7cbc4675a6188f39cfc2", 0xa5}], 0x4, &(0x7f0000002080)=[@dstaddrv4={0x18, 0x84, 0x7, @multicast2}, @init={0x18, 0x84, 0x0, {0x0, 0x0, 0x5, 0x2}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x1}}], 0x48, 0x40}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000001740)={r1, 0x3}, 0x8) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') exit(0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000340)=""/208, 0xd0}], 0x1, 0x1) write$binfmt_elf32(r2, &(0x7f0000001c00)={{0x7f, 0x45, 0x4c, 0x46, 0x7ff, 0xee63, 0x4, 0x1, 0xffff, 0x3, 0x3, 0x0, 0x180, 0x38, 0x303, 0x1ff, 0x9400000000000000, 0x20, 0x1, 0x0, 0xffffffff, 0x8}, [{0x70000000, 0x4, 0xffffffffffffff81, 0x9, 0x8001, 0x8, 0xffffffffffffff99, 0x1ff}, {0x70000007, 0x73, 0xad2, 0xec, 0x80000000, 0x1, 0x0, 0x9}], "b2993a3631d3fe2e0b097f56e0bee3ef96db2699de68abf84eed1ada9df2c53096fd8d6d62dbd8c885a1d6130ca1299e69c49f882bb9703a2fdab829359b18e367e01c9b0984fa4c70f7c436", [[]]}, 0x1c4) 03:44:52 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:44:52 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x600000000000000]}, 0x48) 03:44:52 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) listen(r0, 0x1fff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:44:52 executing program 0 (fault-call:2 fault-nth:0): perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) 03:44:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) [ 2809.820118] XFS (loop3): unknown mount option [nolazytime]. 03:44:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) [ 2809.867657] FAULT_INJECTION: forcing a failure. [ 2809.867657] name failslab, interval 1, probability 0, space 0, times 0 [ 2809.879541] CPU: 0 PID: 15978 Comm: syz-executor.0 Not tainted 5.0.0-rc8+ #3 [ 2809.886755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2809.896116] Call Trace: [ 2809.898744] dump_stack+0x172/0x1f0 [ 2809.902417] should_fail.cold+0xa/0x1b [ 2809.906334] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2809.911496] __should_failslab+0x121/0x190 [ 2809.915754] should_failslab+0x9/0x14 [ 2809.919573] kmem_cache_alloc+0x47/0x6f0 [ 2809.923649] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 2809.928840] sctp_get_port_local+0x435/0x1670 [ 2809.933387] ? sctp_unhash+0x10/0x10 [ 2809.937106] ? perf_trace_lock+0x510/0x510 [ 2809.941362] ? mark_held_locks+0xb1/0x100 [ 2809.945527] sctp_get_port+0x101/0x180 [ 2809.949422] ? sctp_get_port_local+0x1670/0x1670 [ 2809.954189] ? __local_bh_enable_ip+0x15a/0x270 [ 2809.958877] inet_autobind+0xbf/0x1a0 [ 2809.962684] inet_sendmsg+0x40c/0x5d0 [ 2809.966488] ? ipip_gro_receive+0x100/0x100 [ 2809.970818] sock_sendmsg+0xdd/0x130 [ 2809.974547] ___sys_sendmsg+0x806/0x930 [ 2809.978530] ? copy_msghdr_from_user+0x430/0x430 [ 2809.983295] ? lock_downgrade+0x810/0x810 [ 2809.987458] ? kasan_check_read+0x11/0x20 [ 2809.991619] ? __fget+0x367/0x540 [ 2809.995098] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 2809.999960] ? __fget_light+0x1a9/0x230 [ 2810.003942] ? __fdget+0x1b/0x20 [ 2810.007310] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2810.012864] __sys_sendmsg+0x105/0x1d0 [ 2810.016764] ? __ia32_sys_shutdown+0x80/0x80 [ 2810.021181] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2810.025953] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2810.030718] ? do_syscall_64+0x26/0x610 [ 2810.034696] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2810.040061] ? do_syscall_64+0x26/0x610 [ 2810.044053] __x64_sys_sendmsg+0x78/0xb0 [ 2810.048123] do_syscall_64+0x103/0x610 [ 2810.052021] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2810.057211] RIP: 0033:0x457e29 [ 2810.060408] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2810.079311] RSP: 002b:00007fcea3655c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2810.087031] RAX: ffffffffffffffda RBX: 00007fcea3655c90 RCX: 0000000000457e29 [ 2810.094300] RDX: 0000000004040040 RSI: 0000000020000400 RDI: 0000000000000004 [ 2810.101574] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2810.108845] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcea36566d4 03:44:52 executing program 5: r0 = socket$kcm(0x10, 0x20000000000007, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="2e00000018008102e00f80ecdb4cb92e0a480e181e0cd308e8bd6efb120009000e00da1b0e000000000000000000", 0x2e}], 0x1}, 0x0) 03:44:52 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x700000000000000]}, 0x48) 03:44:52 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x200, 0x0) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000040)={0x7f, @rand_addr=0x2, 0x4e22, 0x2, 'wlc\x00', 0x3, 0x56d8cd1b, 0x48}, 0x2c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f00000001c0)={0x3, 0xb5f}) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f00000000c0)=ANY=[@ANYBLOB="61a443aa402a56dc127895bfd70549ea9bccc4870d07de961041f2041f0bc8ffe8e582a0428888344e6ad7ad7864180396fe609dc99b6de61c96536b3eb677b45aa6268bee1b03a74632b7302f042e1c566336938a450cb473b5a5d603b0d185c1e9daf14b909df7e6c96472c253c04176ddbd6a22dbd74778fff95e2bcdc7f997c0a2d63ef50058ccc609dff1992fb582e0030e6607efdc906895aa2042496ffa7f528aafceca69a8a6e54ff0abba56bdb93a4207effef5d05deef9f52d60446cba74750d741d692a0fd3b3622e0002ae6815761a371e9ad6c9b8695bd2b7eae670266b6115dbcce6b1000fac9753f25d836276806bff4fa8"]) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r2}, 0x68) [ 2810.116117] R13: 00000000004c4e20 R14: 00000000004d8b88 R15: 0000000000000005 03:44:53 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0xf7, 0x0, 0x1, 0x0, 0x6, @random="d80fe1534bba"}, 0x14) syz_open_dev$audion(&(0x7f0000000780)='/dev/audio#\x00', 0x7ff, 0x0) symlink(0x0, &(0x7f0000000140)='.//ile0\x00') syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0xe800, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66616b00020401000200027400f8", 0x16}], 0x4, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) close(0xffffffffffffffff) write(r1, &(0x7f0000000400)="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", 0x200) sendfile(r1, r2, 0x0, 0x10000) 03:44:53 executing program 0 (fault-call:2 fault-nth:1): perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) [ 2810.354460] FAULT_INJECTION: forcing a failure. [ 2810.354460] name failslab, interval 1, probability 0, space 0, times 0 [ 2810.367839] CPU: 0 PID: 15997 Comm: syz-executor.0 Not tainted 5.0.0-rc8+ #3 [ 2810.375054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2810.384416] Call Trace: [ 2810.387028] dump_stack+0x172/0x1f0 [ 2810.390676] should_fail.cold+0xa/0x1b [ 2810.394582] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2810.399709] ? sctp_get_port_local+0xf09/0x1670 [ 2810.404405] ? __local_bh_enable_ip+0x15a/0x270 [ 2810.409095] __should_failslab+0x121/0x190 [ 2810.413345] should_failslab+0x9/0x14 [ 2810.417178] kmem_cache_alloc_trace+0x4b/0x760 [ 2810.421953] ? sctp_unhash+0x10/0x10 [ 2810.425680] ? kasan_check_read+0x11/0x20 [ 2810.429850] sctp_add_bind_addr+0x9f/0x3a0 [ 2810.434106] sctp_do_bind+0x301/0x5d0 [ 2810.436374] audit: type=1800 audit(2000000693.223:465): pid=15998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=17300 res=0 [ 2810.437928] sctp_autobind+0x16d/0x1f0 [ 2810.437945] ? mark_held_locks+0x100/0x100 [ 2810.437963] ? sctp_do_bind+0x5d0/0x5d0 [ 2810.437979] ? debug_smp_processor_id+0x1c/0x20 [ 2810.438078] ? sctp_endpoint_is_peeled_off+0xf2/0x130 [ 2810.438103] sctp_sendmsg_new_asoc+0xb7c/0xfd0 [ 2810.438119] ? mark_held_locks+0xb1/0x100 [ 2810.438143] ? sctp_autobind+0x1f0/0x1f0 [ 2810.495472] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2810.500081] ? lock_sock_nested+0x9a/0x120 [ 2810.504782] ? trace_hardirqs_on+0x67/0x230 [ 2810.509123] ? lock_sock_nested+0x9a/0x120 [ 2810.513390] ? __local_bh_enable_ip+0x15a/0x270 [ 2810.518074] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2810.523625] ? sctp_endpoint_lookup_assoc+0x17f/0x290 [ 2810.528837] sctp_sendmsg+0x1269/0x17e0 [ 2810.532823] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2810.537601] ? sctp_id2assoc+0x2d0/0x2d0 [ 2810.541687] ? retint_kernel+0x2d/0x2d [ 2810.545597] ? sctp_id2assoc+0x2d0/0x2d0 [ 2810.549682] inet_sendmsg+0x147/0x5d0 [ 2810.553496] ? ipip_gro_receive+0x100/0x100 [ 2810.557836] sock_sendmsg+0xdd/0x130 [ 2810.561571] ___sys_sendmsg+0x806/0x930 [ 2810.565569] ? copy_msghdr_from_user+0x430/0x430 [ 2810.570345] ? lock_downgrade+0x810/0x810 [ 2810.574539] ? kasan_check_read+0x11/0x20 [ 2810.578709] ? __fget+0x367/0x540 [ 2810.582193] ? __fget_light+0x1a9/0x230 [ 2810.586183] ? __fdget+0x1b/0x20 [ 2810.589562] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2810.595114] __sys_sendmsg+0x105/0x1d0 [ 2810.599014] ? __ia32_sys_shutdown+0x80/0x80 [ 2810.603445] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2810.608996] ? fput+0x128/0x1a0 [ 2810.611501] audit: type=1804 audit(2000000693.243:466): pid=15998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir701892627/syzkaller.B1rdvy/3993/file0" dev="sda1" ino=17300 res=1 [ 2810.612291] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2810.644474] ? do_syscall_64+0x26/0x610 [ 2810.648459] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2810.653832] ? do_syscall_64+0x26/0x610 [ 2810.657829] __x64_sys_sendmsg+0x78/0xb0 [ 2810.661906] do_syscall_64+0x103/0x610 [ 2810.665808] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2810.671010] RIP: 0033:0x457e29 [ 2810.674211] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2810.693118] RSP: 002b:00007fcea3655c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2810.700829] RAX: ffffffffffffffda RBX: 00007fcea3655c90 RCX: 0000000000457e29 [ 2810.700840] RDX: 0000000004040040 RSI: 0000000020000400 RDI: 0000000000000004 [ 2810.700850] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2810.700860] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcea36566d4 [ 2810.700870] R13: 00000000004c4e20 R14: 00000000004d8b88 R15: 0000000000000005 [ 2810.769362] XFS (loop3): unknown mount option [nolazytime]. 03:44:53 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') exit(0x0) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000080)) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000340)=""/208, 0xd0}], 0x1, 0x1) 03:44:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) 03:44:53 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0xa00000000000000]}, 0x48) 03:44:53 executing program 2: socketpair(0x2, 0x5, 0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCAX25DELFWD(r0, 0x89eb, &(0x7f0000000040)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d0"]) r3 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0xe88, 0x40) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000100)={0x8, 0x3, {0xffffffffffffffff, 0x3, 0xfffffffffffffffb, 0x3, 0x6}}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r2}, 0x68) 03:44:53 executing program 0 (fault-call:2 fault-nth:2): perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) 03:44:53 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0xf00000000000000]}, 0x48) [ 2811.025436] FAULT_INJECTION: forcing a failure. [ 2811.025436] name failslab, interval 1, probability 0, space 0, times 0 [ 2811.085855] CPU: 0 PID: 16016 Comm: syz-executor.0 Not tainted 5.0.0-rc8+ #3 [ 2811.093086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2811.102449] Call Trace: [ 2811.105061] dump_stack+0x172/0x1f0 [ 2811.108716] should_fail.cold+0xa/0x1b [ 2811.112628] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2811.117752] ? lock_downgrade+0x810/0x810 [ 2811.121922] ? ___might_sleep+0x163/0x280 [ 2811.126104] __should_failslab+0x121/0x190 [ 2811.130364] should_failslab+0x9/0x14 [ 2811.134187] kmem_cache_alloc_trace+0x2d1/0x760 [ 2811.138873] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2811.144431] ? selinux_sctp_bind_connect+0x13b/0x2b0 [ 2811.149555] sctp_association_new+0x93/0x2030 [ 2811.154062] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2811.159626] sctp_sendmsg_new_asoc+0x397/0xfd0 [ 2811.164224] ? retint_kernel+0x2d/0x2d [ 2811.168131] ? sctp_autobind+0x1f0/0x1f0 [ 2811.172212] ? __local_bh_enable_ip+0x18e/0x270 [ 2811.176902] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2811.182460] ? sctp_endpoint_lookup_assoc+0x17f/0x290 [ 2811.187673] sctp_sendmsg+0x1269/0x17e0 [ 2811.191673] ? sctp_id2assoc+0x2d0/0x2d0 [ 2811.195747] ? release_sock+0x158/0x1c0 [ 2811.199747] ? __local_bh_enable_ip+0x18e/0x270 [ 2811.204436] ? _raw_spin_unlock_bh+0x31/0x40 [ 2811.208856] ? release_sock+0x158/0x1c0 [ 2811.212850] inet_sendmsg+0x147/0x5d0 [ 2811.216666] ? ipip_gro_receive+0x100/0x100 [ 2811.221006] sock_sendmsg+0xdd/0x130 [ 2811.224740] ___sys_sendmsg+0x806/0x930 [ 2811.228736] ? copy_msghdr_from_user+0x430/0x430 [ 2811.233526] ? lock_downgrade+0x810/0x810 [ 2811.237696] ? kasan_check_read+0x11/0x20 [ 2811.241864] ? __fget+0x367/0x540 [ 2811.245364] ? __fget_light+0x1a9/0x230 [ 2811.249385] ? __fdget+0x1b/0x20 [ 2811.252764] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2811.258320] __sys_sendmsg+0x105/0x1d0 [ 2811.262228] ? __ia32_sys_shutdown+0x80/0x80 [ 2811.266649] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2811.272199] ? fput+0x128/0x1a0 [ 2811.275503] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2811.280269] ? do_syscall_64+0x26/0x610 [ 2811.284256] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2811.289630] ? do_syscall_64+0x26/0x610 [ 2811.293628] __x64_sys_sendmsg+0x78/0xb0 [ 2811.297706] do_syscall_64+0x103/0x610 [ 2811.301612] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2811.306808] RIP: 0033:0x457e29 [ 2811.310014] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2811.329014] RSP: 002b:00007fcea3655c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2811.336735] RAX: ffffffffffffffda RBX: 00007fcea3655c90 RCX: 0000000000457e29 [ 2811.344015] RDX: 0000000004040040 RSI: 0000000020000400 RDI: 0000000000000004 [ 2811.351292] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2811.358568] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcea36566d4 [ 2811.365849] R13: 00000000004c4e20 R14: 00000000004d8b88 R15: 0000000000000005 03:44:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) [ 2811.408069] audit: type=1804 audit(2000000694.243:467): pid=16022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir701892627/syzkaller.B1rdvy/3993/file0" dev="sda1" ino=17300 res=1 03:44:54 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000f000/0x4000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000000), 0x0, r1}, 0x68) 03:44:54 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x1000000000000000]}, 0x48) 03:44:54 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm_plock\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x400000000000008, 0x0, 0x0, 0xfffffffffffffff9, 0x20, r1}, 0x2c) r2 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x0, 0x20000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000140), 0x10) setsockopt(r3, 0x65, 0x1, &(0x7f0000000700)="3b3561ac00814a4548c78d250bdd795fd74ffc69a3565b45f64e53148f3f1ba2f9ef4cd9bc9accca5a9e66aa66083c540e1c390ef3733d2d4aa8d18ac54b2a11459a84cd69778e626bf2180598cf27123f9e627bf4e0467e04f91dd4c9824be1fec0ce58dd168688e6c45a2d8381f4c9a4dfa0fdbb9c9f9e0ffe482aabc46830685fd52c4413cd4d9929999530dec36e01bfcd34099fbe33339b575ff07af0ec8c1a3c4470c103362070b6230923b6a576f83bd964cdafeaeec9e341d82f90054773b4bb1886feeab2b03ec217b9c7e1caba03da6c718f16cbf30431abe8bb25295fb02cdf4fe3a04f89cf9cc5152d48d92b3f8c9e53beb90474488822da8c6ff25760c06fa435f9d0854024945f872c2d61c78c2db8a5d40e8acbd8c00e008aa50d36c09ac673fb47850a7bf8c3394a2e8112c10c10b5c9a7ee6d364ca52a1e1422e433bb020f2e74eb600033d1af7f5e2bd98ba21417e6daa73284c958ac353dc9add51e9b3ce7558cd3f47417d148444ac3a4012a393f87f3edfe83a68f9c5c80fa3e3605150e199f0443b908f11934f96745dcdf9079b275908bdfa7f470c6583c2f17d00f865afa83a0161d65624de63dfa09e359e1eb0000000100000000b8726651fba34a330eb4d117571008a9634576a1d3e245355788c524a072e1dd361370769a3250291fbb1c0015bbe190d93320e4cf2bfe640f9082a4a33524291403c723ff866b37e651eb32b16803511b5e4ca7afa48ff5dba1559deb21413bee6d818b648d60e299d9ef9e39846d771f4eb6e2fbefac6290fc2cbb1af648451675a870b77b956db74420005e9393520c971741bb4529", 0x258) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f0000000180)) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000500)={0x0, 0x0, 0x7}) close(r3) semget$private(0x0, 0x0, 0x0) timer_delete(0x0) unshare(0x40000000) getdents64(r2, &(0x7f0000000200), 0x0) r4 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r4, &(0x7f0000000040)="0600", 0x2) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000000c0)={0x9, 0x8000, 0x1, 0x0, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000280)={r5}, 0x0) write$FUSE_NOTIFY_STORE(r4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f00000001c0)) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5, 0xfffffffffffffffc, 0x5}}, 0xe8) connect$inet6(r6, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r6, &(0x7f0000000240), 0x5c3, 0x1c) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x10}}, 0x0) 03:44:54 executing program 0 (fault-call:2 fault-nth:3): perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) [ 2811.550969] audit: type=1804 audit(2000000694.283:468): pid=16022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir701892627/syzkaller.B1rdvy/3993/file0" dev="sda1" ino=17300 res=1 03:44:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) [ 2811.771799] FAULT_INJECTION: forcing a failure. [ 2811.771799] name failslab, interval 1, probability 0, space 0, times 0 [ 2811.787527] CPU: 0 PID: 16049 Comm: syz-executor.0 Not tainted 5.0.0-rc8+ #3 [ 2811.794735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2811.804094] Call Trace: [ 2811.806707] dump_stack+0x172/0x1f0 [ 2811.810367] should_fail.cold+0xa/0x1b [ 2811.814291] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2811.819410] ? lock_downgrade+0x810/0x810 [ 2811.823576] ? ___might_sleep+0x163/0x280 [ 2811.827754] __should_failslab+0x121/0x190 [ 2811.832003] should_failslab+0x9/0x14 [ 2811.835818] kmem_cache_alloc_trace+0x2d1/0x760 [ 2811.840497] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2811.845097] ? trace_hardirqs_on+0x67/0x230 [ 2811.849433] ? kasan_check_read+0x11/0x20 [ 2811.853605] flex_array_alloc+0xd9/0x2d0 [ 2811.857753] fa_alloc+0x24/0x70 [ 2811.861054] sctp_stream_alloc_out+0x33/0x450 [ 2811.865573] sctp_stream_init+0xf5/0x400 [ 2811.869660] sctp_association_new+0x11b7/0x2030 [ 2811.872111] IPVS: ftp: loaded support on port[0] = 21 [ 2811.874362] sctp_sendmsg_new_asoc+0x397/0xfd0 [ 2811.874387] ? mark_held_locks+0xb1/0x100 [ 2811.874410] ? sctp_autobind+0x1f0/0x1f0 [ 2811.874424] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2811.874441] ? lock_sock_nested+0x9a/0x120 [ 2811.874457] ? trace_hardirqs_on+0x67/0x230 [ 2811.905544] ? lock_sock_nested+0x9a/0x120 [ 2811.909798] ? __local_bh_enable_ip+0x15a/0x270 [ 2811.914477] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2811.920030] ? sctp_endpoint_lookup_assoc+0x17f/0x290 [ 2811.925232] sctp_sendmsg+0x1269/0x17e0 [ 2811.929233] ? sctp_id2assoc+0x2d0/0x2d0 [ 2811.933307] ? __local_bh_enable_ip+0x15a/0x270 [ 2811.937985] ? _raw_spin_unlock_bh+0x31/0x40 [ 2811.942411] ? __local_bh_enable_ip+0x15a/0x270 [ 2811.947090] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2811.951694] ? release_sock+0x158/0x1c0 [ 2811.955684] ? _raw_spin_unlock_bh+0x31/0x40 [ 2811.960103] ? release_sock+0x158/0x1c0 [ 2811.964097] inet_sendmsg+0x147/0x5d0 [ 2811.967917] ? ipip_gro_receive+0x100/0x100 [ 2811.972251] sock_sendmsg+0xdd/0x130 [ 2811.975975] ___sys_sendmsg+0x806/0x930 [ 2811.975998] ? copy_msghdr_from_user+0x430/0x430 [ 2811.976023] ? lock_downgrade+0x810/0x810 [ 2811.976043] ? kasan_check_read+0x11/0x20 [ 2811.993039] ? __fget+0x367/0x540 [ 2811.996531] ? __fget_light+0x1a9/0x230 [ 2812.000513] ? __fdget+0x1b/0x20 [ 2812.000530] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2812.000555] __sys_sendmsg+0x105/0x1d0 [ 2812.000574] ? __ia32_sys_shutdown+0x80/0x80 [ 2812.000591] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2812.000605] ? fput+0x128/0x1a0 [ 2812.000634] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2812.000650] ? do_syscall_64+0x26/0x610 [ 2812.000666] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2812.000681] ? do_syscall_64+0x26/0x610 [ 2812.000703] __x64_sys_sendmsg+0x78/0xb0 [ 2812.013472] do_syscall_64+0x103/0x610 [ 2812.013495] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2812.013508] RIP: 0033:0x457e29 [ 2812.013525] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2812.013535] RSP: 002b:00007fcea3655c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2812.013550] RAX: ffffffffffffffda RBX: 00007fcea3655c90 RCX: 0000000000457e29 [ 2812.013560] RDX: 0000000004040040 RSI: 0000000020000400 RDI: 0000000000000004 [ 2812.013570] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2812.013580] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcea36566d4 [ 2812.013592] R13: 00000000004c4e20 R14: 00000000004d8b88 R15: 0000000000000005 03:44:55 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') exit(0x4) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000340)=""/208, 0xd0}], 0x1, 0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x101}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x0, 0x8000, 0x1, 0x7fff, r1}, 0x10) r2 = getpgrp(0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000001c0)={{0x4, 0x5, 0x0, 0x5, '\x00', 0x5}, 0x4, 0x10000000, 0xc4b, r2, 0x6, 0x1, 'syz1\x00', &(0x7f0000000140)=['smaps_rollup\x00', 'smaps_rollup\x00', '$%(}md5sum\x00', 'smaps_rollup\x00', 'cgroupkeyring\x00', 'smaps_rollup\x00'], 0x4d, [], [0xc69, 0x3, 0x10001, 0x3]}) 03:44:55 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x200800, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x400, 0x8c, 0x0, 0x0, 0x1f, 0x4, "b7ac317b7d83bd1a45766f7730bf6922a39c34d6397d24d5f5f1113ad7a22b76a93c282bbaf5e62cc4b371960e089c39355a114f3af7af18d04f21aebd31ccb2", "c09b4c6c255112bad18a1ef8582fc260d55042759b7c538c745edfd2da34c9f56b2133841ed71f2bcfb4dd0599da71cdb90e24c9f4e83653ff70f487e5c15535", "42c90d7dc0e379b2ec6b4ce75753edc7ba49eeb45e5985633077281fab7f3860", [0x8, 0x4]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:44:55 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x1810000000000000]}, 0x48) 03:44:55 executing program 0 (fault-call:2 fault-nth:4): perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) 03:44:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) [ 2812.363406] FAULT_INJECTION: forcing a failure. [ 2812.363406] name failslab, interval 1, probability 0, space 0, times 0 [ 2812.428278] CPU: 1 PID: 16064 Comm: syz-executor.0 Not tainted 5.0.0-rc8+ #3 [ 2812.435521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2812.444885] Call Trace: [ 2812.447496] dump_stack+0x172/0x1f0 [ 2812.451146] should_fail.cold+0xa/0x1b [ 2812.455148] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2812.460267] ? lock_downgrade+0x810/0x810 [ 2812.464428] ? ___might_sleep+0x163/0x280 [ 2812.468599] __should_failslab+0x121/0x190 [ 2812.472849] should_failslab+0x9/0x14 [ 2812.476665] kmem_cache_alloc_trace+0x2d1/0x760 [ 2812.481357] ? flex_array_get+0x1a5/0x260 [ 2812.485524] ? __sanitizer_cov_trace_pc+0x48/0x50 [ 2812.490389] sctp_auth_shkey_create+0x87/0x1b0 [ 2812.494987] sctp_auth_asoc_copy_shkeys+0x1fb/0x2c0 [ 2812.500026] sctp_association_new+0x1602/0x2030 [ 2812.504902] sctp_sendmsg_new_asoc+0x397/0xfd0 [ 2812.509500] ? mark_held_locks+0xb1/0x100 [ 2812.513670] ? sctp_autobind+0x1f0/0x1f0 [ 2812.517745] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2812.522337] ? lock_sock_nested+0x9a/0x120 [ 2812.526591] ? trace_hardirqs_on+0x67/0x230 [ 2812.530920] ? lock_sock_nested+0x9a/0x120 [ 2812.535172] ? __local_bh_enable_ip+0x15a/0x270 [ 2812.539853] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2812.545413] ? sctp_endpoint_lookup_assoc+0x17f/0x290 [ 2812.550621] sctp_sendmsg+0x1269/0x17e0 [ 2812.554620] ? sctp_id2assoc+0x2d0/0x2d0 [ 2812.558693] ? __local_bh_enable_ip+0x15a/0x270 [ 2812.563384] ? _raw_spin_unlock_bh+0x31/0x40 [ 2812.567808] ? __local_bh_enable_ip+0x15a/0x270 [ 2812.572489] ? lockdep_hardirqs_on+0x415/0x5d0 03:44:55 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffff9c, 0xc008640a, &(0x7f0000000000)={0x0}) r4 = openat$rfkill(0xffffffffffffff9c, 0xfffffffffffffffe, 0x80000, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000040)={r3, 0x80000, r4}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) [ 2812.577088] ? release_sock+0x158/0x1c0 [ 2812.581079] ? _raw_spin_unlock_bh+0x31/0x40 [ 2812.585508] ? release_sock+0x158/0x1c0 [ 2812.589999] inet_sendmsg+0x147/0x5d0 [ 2812.593807] ? ipip_gro_receive+0x100/0x100 [ 2812.598135] sock_sendmsg+0xdd/0x130 [ 2812.601865] ___sys_sendmsg+0x806/0x930 [ 2812.605855] ? copy_msghdr_from_user+0x430/0x430 [ 2812.605887] ? lock_downgrade+0x810/0x810 [ 2812.605908] ? kasan_check_read+0x11/0x20 [ 2812.618950] ? __fget+0x367/0x540 [ 2812.622439] ? __fget_light+0x1a9/0x230 [ 2812.626432] ? __fdget+0x1b/0x20 [ 2812.629810] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2812.629835] __sys_sendmsg+0x105/0x1d0 [ 2812.629855] ? __ia32_sys_shutdown+0x80/0x80 [ 2812.629878] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2812.629895] ? fput+0x128/0x1a0 [ 2812.639313] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2812.639331] ? do_syscall_64+0x26/0x610 [ 2812.639347] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2812.639373] ? do_syscall_64+0x26/0x610 [ 2812.639397] __x64_sys_sendmsg+0x78/0xb0 03:44:55 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x1b0c050000000000]}, 0x48) [ 2812.639417] do_syscall_64+0x103/0x610 [ 2812.639438] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2812.639451] RIP: 0033:0x457e29 [ 2812.639467] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2812.649395] RSP: 002b:00007fcea3655c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2812.649411] RAX: ffffffffffffffda RBX: 00007fcea3655c90 RCX: 0000000000457e29 03:44:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) [ 2812.649421] RDX: 0000000004040040 RSI: 0000000020000400 RDI: 0000000000000004 [ 2812.649431] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2812.649441] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcea36566d4 [ 2812.649451] R13: 00000000004c4e20 R14: 00000000004d8b88 R15: 0000000000000005 [ 2812.728114] net_ratelimit: 16 callbacks suppressed [ 2812.728123] protocol 88fb is buggy, dev hsr_slave_0 [ 2812.731226] protocol 88fb is buggy, dev hsr_slave_0 [ 2812.738259] protocol 88fb is buggy, dev hsr_slave_1 [ 2812.745975] protocol 88fb is buggy, dev hsr_slave_1 03:44:55 executing program 0 (fault-call:2 fault-nth:5): perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) [ 2812.752905] protocol 88fb is buggy, dev hsr_slave_0 [ 2812.758595] protocol 88fb is buggy, dev hsr_slave_0 [ 2812.762951] protocol 88fb is buggy, dev hsr_slave_1 [ 2812.768317] protocol 88fb is buggy, dev hsr_slave_1 [ 2812.799567] protocol 88fb is buggy, dev hsr_slave_0 [ 2812.805147] protocol 88fb is buggy, dev hsr_slave_1 [ 2813.006002] FAULT_INJECTION: forcing a failure. [ 2813.006002] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2813.017836] CPU: 0 PID: 16089 Comm: syz-executor.0 Not tainted 5.0.0-rc8+ #3 [ 2813.025008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2813.034362] Call Trace: [ 2813.036958] dump_stack+0x172/0x1f0 [ 2813.040592] should_fail.cold+0xa/0x1b [ 2813.044484] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2813.049601] ? debug_smp_processor_id+0x1c/0x20 [ 2813.054268] ? perf_trace_lock+0xeb/0x510 [ 2813.058423] should_fail_alloc_page+0x50/0x60 [ 2813.062930] __alloc_pages_nodemask+0x1a1/0x710 [ 2813.067601] ? __alloc_pages_slowpath+0x2900/0x2900 [ 2813.072631] cache_grow_begin+0x9c/0x8c0 [ 2813.076697] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2813.082234] ? check_preemption_disabled+0x48/0x290 [ 2813.087254] kmem_cache_alloc_trace+0x67f/0x760 [ 2813.091925] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2813.096528] flex_array_alloc+0xd9/0x2d0 [ 2813.100601] fa_alloc+0x24/0x70 [ 2813.103881] sctp_stream_alloc_out+0x33/0x450 [ 2813.108400] sctp_stream_init+0xf5/0x400 [ 2813.112468] sctp_association_new+0x11b7/0x2030 [ 2813.117133] sctp_sendmsg_new_asoc+0x397/0xfd0 [ 2813.121719] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2813.126478] ? sctp_autobind+0x1f0/0x1f0 [ 2813.130551] ? retint_kernel+0x2d/0x2d [ 2813.134448] sctp_sendmsg+0x1269/0x17e0 [ 2813.138442] ? sctp_id2assoc+0x2d0/0x2d0 [ 2813.142511] ? release_sock+0x158/0x1c0 [ 2813.146501] ? __local_bh_enable_ip+0x18e/0x270 [ 2813.151180] ? _raw_spin_unlock_bh+0x31/0x40 [ 2813.155602] ? release_sock+0x158/0x1c0 [ 2813.159593] inet_sendmsg+0x147/0x5d0 [ 2813.163407] ? ipip_gro_receive+0x100/0x100 [ 2813.167738] sock_sendmsg+0xdd/0x130 [ 2813.171471] ___sys_sendmsg+0x806/0x930 [ 2813.175463] ? copy_msghdr_from_user+0x430/0x430 [ 2813.180236] ? lock_downgrade+0x810/0x810 [ 2813.184395] ? kasan_check_read+0x11/0x20 [ 2813.188547] ? __fget+0x367/0x540 [ 2813.192037] ? __fget_light+0x1a9/0x230 [ 2813.196031] ? __fdget+0x1b/0x20 [ 2813.199403] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2813.204946] __sys_sendmsg+0x105/0x1d0 [ 2813.208835] ? __ia32_sys_shutdown+0x80/0x80 [ 2813.213259] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2813.218825] ? fput+0x128/0x1a0 [ 2813.218854] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2813.218872] ? do_syscall_64+0x26/0x610 [ 2813.218886] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2813.218901] ? do_syscall_64+0x26/0x610 [ 2813.218926] __x64_sys_sendmsg+0x78/0xb0 [ 2813.218947] do_syscall_64+0x103/0x610 [ 2813.218971] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2813.226996] RIP: 0033:0x457e29 [ 2813.256575] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2813.275486] RSP: 002b:00007fcea3655c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2813.283207] RAX: ffffffffffffffda RBX: 00007fcea3655c90 RCX: 0000000000457e29 [ 2813.290481] RDX: 0000000004040040 RSI: 0000000020000400 RDI: 0000000000000004 [ 2813.297752] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2813.305016] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcea36566d4 [ 2813.312283] R13: 00000000004c4e20 R14: 00000000004d8b88 R15: 0000000000000005 03:44:57 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) timerfd_create(0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000080)={0x0, r2}) io_setup(0x4, &(0x7f0000000100)=0x0) io_submit(r3, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 03:44:57 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x48) 03:44:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) 03:44:57 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:44:57 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') exit(0x6) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000340)=""/208, 0xd0}], 0x1, 0x1) 03:44:57 executing program 0 (fault-call:2 fault-nth:6): perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) [ 2815.147806] FAULT_INJECTION: forcing a failure. [ 2815.147806] name failslab, interval 1, probability 0, space 0, times 0 [ 2815.178589] CPU: 0 PID: 16100 Comm: syz-executor.0 Not tainted 5.0.0-rc8+ #3 [ 2815.185808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2815.195167] Call Trace: 03:44:58 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x2e00000000000000]}, 0x48) 03:44:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) 03:44:58 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x2000, &(0x7f0000012000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) [ 2815.197774] dump_stack+0x172/0x1f0 [ 2815.201438] should_fail.cold+0xa/0x1b [ 2815.205343] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2815.210480] ? retint_kernel+0x2d/0x2d [ 2815.214419] __should_failslab+0x121/0x190 [ 2815.218689] should_failslab+0x9/0x14 [ 2815.222511] kmem_cache_alloc_trace+0x4b/0x760 [ 2815.227113] ? kasan_check_read+0x11/0x20 [ 2815.231283] sctp_add_bind_addr+0x9f/0x3a0 [ 2815.235547] sctp_copy_local_addr_list+0x385/0x530 [ 2815.240492] ? sctp_defaults_init+0xbf0/0xbf0 [ 2815.245139] ? _get_random_bytes+0x197/0x400 [ 2815.249570] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 2815.254777] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2815.260334] sctp_copy_one_addr+0x5f/0x170 [ 2815.264603] ? sctp_copy_one_addr+0x5f/0x170 [ 2815.269038] sctp_bind_addr_copy+0xfc/0x2c8 [ 2815.273400] sctp_assoc_set_bind_addr_from_ep+0x168/0x1c0 [ 2815.278964] sctp_sendmsg_new_asoc+0x3bd/0xfd0 [ 2815.283562] ? mark_held_locks+0xb1/0x100 [ 2815.287727] ? sctp_autobind+0x1f0/0x1f0 [ 2815.291803] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2815.296420] ? lock_sock_nested+0x9a/0x120 [ 2815.300667] ? trace_hardirqs_on+0x67/0x230 [ 2815.305005] ? lock_sock_nested+0x9a/0x120 [ 2815.309258] ? __local_bh_enable_ip+0x15a/0x270 [ 2815.313946] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2815.319501] ? sctp_endpoint_lookup_assoc+0x17f/0x290 [ 2815.324712] sctp_sendmsg+0x1269/0x17e0 [ 2815.328713] ? sctp_id2assoc+0x2d0/0x2d0 [ 2815.332784] ? __local_bh_enable_ip+0x15a/0x270 [ 2815.337465] ? _raw_spin_unlock_bh+0x31/0x40 [ 2815.341885] ? __local_bh_enable_ip+0x15a/0x270 [ 2815.346563] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2815.351158] ? release_sock+0x158/0x1c0 [ 2815.355144] ? _raw_spin_unlock_bh+0x31/0x40 [ 2815.359556] ? release_sock+0x158/0x1c0 [ 2815.363546] inet_sendmsg+0x147/0x5d0 [ 2815.367359] ? ipip_gro_receive+0x100/0x100 [ 2815.371709] sock_sendmsg+0xdd/0x130 [ 2815.375432] ___sys_sendmsg+0x806/0x930 [ 2815.379416] ? copy_msghdr_from_user+0x430/0x430 [ 2815.384183] ? lock_downgrade+0x810/0x810 [ 2815.388340] ? kasan_check_read+0x11/0x20 [ 2815.392513] ? __fget+0x367/0x540 [ 2815.395990] ? __fget_light+0x1a9/0x230 [ 2815.399982] ? __fdget+0x1b/0x20 [ 2815.403361] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2815.408914] __sys_sendmsg+0x105/0x1d0 [ 2815.412812] ? __ia32_sys_shutdown+0x80/0x80 [ 2815.417238] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2815.422778] ? fput+0x128/0x1a0 [ 2815.426080] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2815.430843] ? do_syscall_64+0x26/0x610 [ 2815.434820] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2815.440189] ? do_syscall_64+0x26/0x610 [ 2815.444175] __x64_sys_sendmsg+0x78/0xb0 [ 2815.448243] do_syscall_64+0x103/0x610 [ 2815.452142] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2815.457332] RIP: 0033:0x457e29 [ 2815.460545] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2815.479454] RSP: 002b:00007fcea3655c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2815.487163] RAX: ffffffffffffffda RBX: 00007fcea3655c90 RCX: 0000000000457e29 03:44:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) [ 2815.494431] RDX: 0000000004040040 RSI: 0000000020000400 RDI: 0000000000000004 [ 2815.501698] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2815.508968] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcea36566d4 [ 2815.516239] R13: 00000000004c4e20 R14: 00000000004d8b88 R15: 0000000000000005 03:44:58 executing program 2: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='\x00']) r2 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x0, 0x10040) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f0000000140)) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000002000)) sendmmsg(r3, &(0x7f0000002e00)=[{{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000000)="ae1e", 0x2}], 0x1}}], 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x9}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f00000000c0)={r5, 0xaa25}, 0x8) ioctl$KVM_RUN(r4, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000200)) 03:44:58 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x3c00000000000000]}, 0x48) 03:44:58 executing program 0 (fault-call:2 fault-nth:7): perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) 03:44:58 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:44:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) 03:44:58 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x3d00000000000000]}, 0x48) [ 2815.813861] FAULT_INJECTION: forcing a failure. [ 2815.813861] name failslab, interval 1, probability 0, space 0, times 0 [ 2815.844213] CPU: 1 PID: 16134 Comm: syz-executor.0 Not tainted 5.0.0-rc8+ #3 [ 2815.851452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2815.860813] Call Trace: [ 2815.863420] dump_stack+0x172/0x1f0 [ 2815.867071] should_fail.cold+0xa/0x1b [ 2815.870967] ? zap_class+0x460/0x460 [ 2815.874696] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2815.879808] ? sctp_bind_addr_state+0x1ae/0x340 [ 2815.884483] ? find_held_lock+0x35/0x130 [ 2815.888559] __should_failslab+0x121/0x190 [ 2815.892804] should_failslab+0x9/0x14 [ 2815.896612] kmem_cache_alloc_trace+0x4b/0x760 [ 2815.901202] ? kasan_check_read+0x11/0x20 [ 2815.905372] sctp_add_bind_addr+0x9f/0x3a0 [ 2815.909628] sctp_copy_local_addr_list+0x385/0x530 [ 2815.914568] ? sctp_defaults_init+0xbf0/0xbf0 [ 2815.919080] ? _get_random_bytes+0x197/0x400 [ 2815.923497] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 2815.928693] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2815.934241] sctp_copy_one_addr+0x5f/0x170 [ 2815.938485] ? sctp_copy_one_addr+0x5f/0x170 [ 2815.942907] sctp_bind_addr_copy+0xfc/0x2c8 [ 2815.947248] sctp_assoc_set_bind_addr_from_ep+0x168/0x1c0 [ 2815.952800] sctp_sendmsg_new_asoc+0x3bd/0xfd0 [ 2815.957408] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2815.962173] ? sctp_autobind+0x1f0/0x1f0 [ 2815.966240] ? retint_kernel+0x2d/0x2d [ 2815.970147] ? sctp_endpoint_lookup_assoc+0x17f/0x290 [ 2815.975347] sctp_sendmsg+0x1269/0x17e0 [ 2815.979358] ? sctp_id2assoc+0x2d0/0x2d0 [ 2815.983424] ? __local_bh_enable_ip+0x15a/0x270 [ 2815.988095] ? _raw_spin_unlock_bh+0x31/0x40 [ 2815.992505] ? __local_bh_enable_ip+0x15a/0x270 [ 2815.997178] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2816.001769] ? release_sock+0x158/0x1c0 [ 2816.005754] ? _raw_spin_unlock_bh+0x31/0x40 [ 2816.010172] ? release_sock+0x158/0x1c0 [ 2816.014160] inet_sendmsg+0x147/0x5d0 [ 2816.017971] ? ipip_gro_receive+0x100/0x100 [ 2816.022319] sock_sendmsg+0xdd/0x130 [ 2816.026060] ___sys_sendmsg+0x806/0x930 [ 2816.030044] ? copy_msghdr_from_user+0x430/0x430 [ 2816.034814] ? lock_downgrade+0x810/0x810 [ 2816.038980] ? kasan_check_read+0x11/0x20 [ 2816.043148] ? __fget+0x367/0x540 [ 2816.046627] ? __fget_light+0x1a9/0x230 [ 2816.050608] ? __fdget+0x1b/0x20 [ 2816.053979] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2816.059529] __sys_sendmsg+0x105/0x1d0 [ 2816.063432] ? __ia32_sys_shutdown+0x80/0x80 [ 2816.067852] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2816.073405] ? fput+0x128/0x1a0 [ 2816.076708] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2816.081475] ? do_syscall_64+0x26/0x610 [ 2816.085475] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2816.090849] ? do_syscall_64+0x26/0x610 [ 2816.094841] __x64_sys_sendmsg+0x78/0xb0 [ 2816.098921] do_syscall_64+0x103/0x610 [ 2816.102822] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2816.108010] RIP: 0033:0x457e29 [ 2816.111213] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2816.130121] RSP: 002b:00007fcea3655c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2816.137838] RAX: ffffffffffffffda RBX: 00007fcea3655c90 RCX: 0000000000457e29 [ 2816.145111] RDX: 0000000004040040 RSI: 0000000020000400 RDI: 0000000000000004 [ 2816.152387] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 03:44:59 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x3, 0x2a2001) write$P9_RLERRORu(r1, 0x0, 0x515262bd8a6e48e6) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) fremovexattr(r1, &(0x7f0000000240)=@random={'btrfs.', '\x00'}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000000f000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f00000000c0)="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", 0x160, r2}, 0x68) 03:44:59 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000080)) exit(0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000340)=""/208, 0xd0}], 0x1, 0x1) 03:44:59 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000009, 0x11, r0, 0x81000000) ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f0000000000)=0x7fff) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0xffffffffffffff3c, 0xfa00, {0x2, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f0000000200)=0x7f) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000140)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r1}}, 0x18) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) 03:44:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) [ 2816.159662] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcea36566d4 [ 2816.166931] R13: 00000000004c4e20 R14: 00000000004d8b88 R15: 0000000000000005 03:44:59 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x3f00000000000000]}, 0x48) 03:44:59 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000001800)={0x0, 0x8, &(0x7f00000017c0)={&(0x7f0000001700)={0x20, r1, 0x51d, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ADDR={0x8}]}]}, 0x20}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000000)={0x2, 0x8, 0xfffffffffffffc00, 0x0, "f6cfa1dfbf153b0cdad782aeebdc29f6d8e2e943a56a9d94dc0c30fb819f212a"}) 03:44:59 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x4000000000000000]}, 0x48) 03:44:59 executing program 0 (fault-call:2 fault-nth:8): perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) 03:44:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) 03:44:59 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x4, &(0x7f0000000000), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:44:59 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x4800000000000000]}, 0x48) 03:44:59 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") socket$inet_dccp(0x2, 0x6, 0x0) r1 = socket(0x11, 0x803, 0x300) setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f0000000040)=0x3f, 0x4) r2 = socket$inet(0x2, 0x80003, 0x4) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x10) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth1_to_hsr\x00', 0x0}) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14) getsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000000c80)={@local, 0x0}, &(0x7f0000000cc0)=0x14) recvmmsg(r0, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000000d00)=""/133, 0x85}, {&(0x7f0000000dc0)=""/47, 0x2f}, {&(0x7f0000000e00)=""/160, 0xa0}, {&(0x7f0000000ec0)=""/235, 0xeb}, {&(0x7f0000000fc0)=""/26, 0x1a}, {&(0x7f0000001000)=""/89, 0x59}, {&(0x7f0000001080)=""/4096, 0x1000}], 0x7, &(0x7f0000002100)=""/65, 0x41}, 0x9}, {{&(0x7f0000002180)=@isdn, 0x80, &(0x7f0000002340)=[{&(0x7f0000002200)=""/113, 0x71}, {&(0x7f0000002280)=""/163, 0xa3}], 0x2, &(0x7f0000002380)=""/4096, 0x1000}, 0x1}, {{&(0x7f0000003380), 0x80, &(0x7f0000003480)=[{&(0x7f0000003400)=""/118, 0x76}], 0x1, &(0x7f00000034c0)=""/38, 0x26}, 0x3ff}, {{&(0x7f0000003500)=@nfc, 0x80, &(0x7f0000004840)=[{&(0x7f0000003580)}, {&(0x7f00000035c0)=""/246, 0xf6}, {&(0x7f00000036c0)=""/51, 0x33}, {&(0x7f0000003700)=""/178, 0xb2}, {&(0x7f00000037c0)=""/84, 0x54}, {&(0x7f0000003840)=""/4096, 0x1000}], 0x6, &(0x7f00000048c0)=""/168, 0xa8}, 0x6}, {{&(0x7f0000004980)=@isdn, 0x80, &(0x7f0000004ac0)=[{&(0x7f0000004a00)=""/141, 0x8d}], 0x1, &(0x7f0000004b00)=""/174, 0xae}, 0x100000001}, {{&(0x7f0000004bc0)=@vsock, 0x80, &(0x7f0000004e40)=[{&(0x7f0000004c40)=""/209, 0xd1}, {&(0x7f0000004d40)=""/238, 0xee}], 0x2, &(0x7f0000004e80)=""/84, 0x54}, 0xffff}, {{&(0x7f0000004f00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000004f80), 0x0, &(0x7f0000004fc0)=""/4096, 0x1000}, 0xb9}, {{0x0, 0x0, &(0x7f0000006040)=[{&(0x7f0000005fc0)=""/127, 0x7f}], 0x1, &(0x7f0000006080)=""/4096, 0x1000}}], 0x8, 0x20, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000007280)={{{@in=@multicast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@multicast1}}, &(0x7f0000007380)=0xe8) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000007700)={0x0, @remote, @broadcast}, &(0x7f0000007740)=0xc) getsockname(r0, &(0x7f0000008880)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000008900)=0x80) getsockname$packet(r1, &(0x7f0000008940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000008980)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000089c0)={{{@in=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@initdev}}, &(0x7f0000008ac0)=0xe8) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000008fc0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000008f80)={&(0x7f0000008b00)={0x44c, r4, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8, 0x1, r5}, {0xb8, 0x2, [{0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}]}}, {{0x8, 0x1, r6}, {0x7c, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x88f}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x9}}}]}}, {{0x8, 0x1, r7}, {0x268, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0xfd4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x100000000}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x20}}, {0x8, 0x6, r11}}}]}}, {{0x8, 0x1, r12}, {0x7c, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x800}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x9}}}]}}]}, 0x44c}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000800) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) recvmmsg(r1, &(0x7f0000002e00), 0x386, 0x0, 0x0) 03:44:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) [ 2816.557647] FAULT_INJECTION: forcing a failure. [ 2816.557647] name failslab, interval 1, probability 0, space 0, times 0 [ 2816.616793] CPU: 0 PID: 16167 Comm: syz-executor.0 Not tainted 5.0.0-rc8+ #3 [ 2816.624029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2816.633419] Call Trace: [ 2816.636027] dump_stack+0x172/0x1f0 [ 2816.639674] should_fail.cold+0xa/0x1b [ 2816.643567] ? zap_class+0x460/0x460 [ 2816.647291] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2816.652404] ? sctp_bind_addr_state+0x1ae/0x340 [ 2816.657077] ? find_held_lock+0x35/0x130 [ 2816.661154] __should_failslab+0x121/0x190 [ 2816.665414] should_failslab+0x9/0x14 [ 2816.669220] kmem_cache_alloc_trace+0x4b/0x760 [ 2816.673808] ? kasan_check_read+0x11/0x20 [ 2816.677970] sctp_add_bind_addr+0x9f/0x3a0 [ 2816.682218] sctp_copy_local_addr_list+0x385/0x530 [ 2816.687157] ? sctp_defaults_init+0xbf0/0xbf0 [ 2816.691666] ? _get_random_bytes+0x197/0x400 [ 2816.696081] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 2816.701273] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2816.706827] sctp_copy_one_addr+0x5f/0x170 [ 2816.711067] ? sctp_copy_one_addr+0x5f/0x170 [ 2816.715485] sctp_bind_addr_copy+0xfc/0x2c8 [ 2816.719822] sctp_assoc_set_bind_addr_from_ep+0x168/0x1c0 [ 2816.725386] sctp_sendmsg_new_asoc+0x3bd/0xfd0 [ 2816.729980] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2816.734742] ? sctp_autobind+0x1f0/0x1f0 [ 2816.738811] ? retint_kernel+0x2d/0x2d [ 2816.742717] ? sctp_endpoint_lookup_assoc+0x17f/0x290 [ 2816.747915] sctp_sendmsg+0x1269/0x17e0 [ 2816.751906] ? sctp_id2assoc+0x2d0/0x2d0 [ 2816.755973] ? __local_bh_enable_ip+0x15a/0x270 [ 2816.760641] ? _raw_spin_unlock_bh+0x31/0x40 [ 2816.765050] ? __local_bh_enable_ip+0x15a/0x270 [ 2816.769723] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2816.774316] ? release_sock+0x158/0x1c0 [ 2816.778301] ? _raw_spin_unlock_bh+0x31/0x40 [ 2816.782712] ? release_sock+0x158/0x1c0 [ 2816.786698] inet_sendmsg+0x147/0x5d0 [ 2816.790508] ? ipip_gro_receive+0x100/0x100 [ 2816.794837] sock_sendmsg+0xdd/0x130 [ 2816.798558] ___sys_sendmsg+0x806/0x930 [ 2816.802544] ? copy_msghdr_from_user+0x430/0x430 [ 2816.807310] ? lock_downgrade+0x810/0x810 [ 2816.811468] ? kasan_check_read+0x11/0x20 [ 2816.815625] ? __fget+0x367/0x540 [ 2816.819105] ? __fget_light+0x1a9/0x230 [ 2816.823084] ? __fdget+0x1b/0x20 [ 2816.826456] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2816.832004] __sys_sendmsg+0x105/0x1d0 [ 2816.835901] ? __ia32_sys_shutdown+0x80/0x80 [ 2816.840318] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2816.845865] ? fput+0x128/0x1a0 [ 2816.849166] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2816.853929] ? do_syscall_64+0x26/0x610 [ 2816.857908] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2816.863277] ? do_syscall_64+0x26/0x610 [ 2816.867268] __x64_sys_sendmsg+0x78/0xb0 [ 2816.871338] do_syscall_64+0x103/0x610 [ 2816.875247] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2816.880437] RIP: 0033:0x457e29 [ 2816.883631] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2816.902532] RSP: 002b:00007fcea3655c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2816.910240] RAX: ffffffffffffffda RBX: 00007fcea3655c90 RCX: 0000000000457e29 [ 2816.917514] RDX: 0000000004040040 RSI: 0000000020000400 RDI: 0000000000000004 [ 2816.924785] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2816.932057] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcea36566d4 [ 2816.939324] R13: 00000000004c4e20 R14: 00000000004d8b88 R15: 0000000000000005 03:45:00 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') exit(0x0) shmget$private(0x0, 0x4000, 0x78000000, &(0x7f0000ff9000/0x4000)=nil) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000340)=""/208, 0xd0}], 0x1, 0x1) 03:45:00 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x3, 0x81) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000040)={0x9, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f00000000c0)=ANY=[@ANYBLOB="24a4436009406531bf17f280b9201dce7f2cdbd3bd15df59707634333f47ddbf49b487e3a3bccba9aa5444fd7419f61c9151438c469390e8c8f85ddb62dc039191b35927887307d993b1854498b18f206af2f64e80ea605b5bf56ca90e77c28a3396c9e7aa08dd4d0f25e7b39cade21c9f063bff98d3c0fd0d56ac8d8a19695d53eabb"]) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:45:00 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x4c00000000000000]}, 0x48) 03:45:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) 03:45:00 executing program 0 (fault-call:2 fault-nth:9): perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) 03:45:00 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x6100000000000000]}, 0x48) [ 2817.323963] FAULT_INJECTION: forcing a failure. [ 2817.323963] name failslab, interval 1, probability 0, space 0, times 0 [ 2817.376509] CPU: 1 PID: 16185 Comm: syz-executor.0 Not tainted 5.0.0-rc8+ #3 [ 2817.383736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2817.393099] Call Trace: [ 2817.395707] dump_stack+0x172/0x1f0 [ 2817.399366] should_fail.cold+0xa/0x1b [ 2817.403265] ? zap_class+0x460/0x460 [ 2817.406999] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2817.412115] ? sctp_bind_addr_state+0x1ae/0x340 [ 2817.416796] ? find_held_lock+0x35/0x130 [ 2817.420895] __should_failslab+0x121/0x190 [ 2817.425148] should_failslab+0x9/0x14 [ 2817.428963] kmem_cache_alloc_trace+0x4b/0x760 [ 2817.433562] ? kasan_check_read+0x11/0x20 [ 2817.437730] sctp_add_bind_addr+0x9f/0x3a0 [ 2817.441986] sctp_copy_local_addr_list+0x385/0x530 [ 2817.446933] ? sctp_defaults_init+0xbf0/0xbf0 [ 2817.451444] ? __sanitizer_cov_trace_pc+0x3b/0x50 [ 2817.456298] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2817.461859] sctp_copy_one_addr+0x5f/0x170 [ 2817.466112] ? sctp_copy_one_addr+0x5f/0x170 [ 2817.470544] sctp_bind_addr_copy+0xfc/0x2c8 03:45:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) [ 2817.474919] sctp_assoc_set_bind_addr_from_ep+0x168/0x1c0 [ 2817.480479] sctp_sendmsg_new_asoc+0x3bd/0xfd0 [ 2817.485070] ? preempt_schedule+0x4b/0x60 [ 2817.489232] ? preempt_schedule_common+0x4f/0xe0 [ 2817.493995] ? sctp_autobind+0x1f0/0x1f0 [ 2817.498057] ? ___preempt_schedule+0x16/0x18 [ 2817.502493] ? __local_bh_enable_ip+0x21d/0x270 [ 2817.507174] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2817.512719] ? sctp_endpoint_lookup_assoc+0x17f/0x290 [ 2817.517913] sctp_sendmsg+0x1269/0x17e0 [ 2817.521895] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2817.526672] ? sctp_id2assoc+0x2d0/0x2d0 [ 2817.530727] ? retint_kernel+0x2d/0x2d [ 2817.534608] ? sctp_id2assoc+0x2d0/0x2d0 [ 2817.538673] inet_sendmsg+0x147/0x5d0 [ 2817.542476] ? ipip_gro_receive+0x100/0x100 [ 2817.546789] sock_sendmsg+0xdd/0x130 [ 2817.550491] ___sys_sendmsg+0x806/0x930 [ 2817.554469] ? copy_msghdr_from_user+0x430/0x430 [ 2817.559231] ? lock_downgrade+0x810/0x810 [ 2817.563387] ? kasan_check_read+0x11/0x20 [ 2817.567541] ? __fget+0x367/0x540 [ 2817.570996] ? __fget_light+0x1a9/0x230 [ 2817.574960] ? __fdget+0x1b/0x20 [ 2817.578316] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2817.583858] __sys_sendmsg+0x105/0x1d0 [ 2817.587755] ? __ia32_sys_shutdown+0x80/0x80 [ 2817.592149] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2817.597675] ? fput+0x128/0x1a0 [ 2817.600951] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2817.605695] ? do_syscall_64+0x26/0x610 [ 2817.609659] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2817.615019] ? do_syscall_64+0x26/0x610 [ 2817.618985] __x64_sys_sendmsg+0x78/0xb0 [ 2817.623040] do_syscall_64+0x103/0x610 [ 2817.626919] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2817.632093] RIP: 0033:0x457e29 [ 2817.635284] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2817.654186] RSP: 002b:00007fcea3655c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2817.661890] RAX: ffffffffffffffda RBX: 00007fcea3655c90 RCX: 0000000000457e29 [ 2817.669148] RDX: 0000000004040040 RSI: 0000000020000400 RDI: 0000000000000004 03:45:00 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$VIDIOC_G_FREQUENCY(r3, 0xc02c5638, &(0x7f0000000040)={0x5, 0x3, 0x1}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) [ 2817.676406] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2817.684147] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcea36566d4 [ 2817.691425] R13: 00000000004c4e20 R14: 00000000004d8b88 R15: 0000000000000005 03:45:00 executing program 0 (fault-call:2 fault-nth:10): perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) 03:45:00 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x6300000000000000]}, 0x48) [ 2817.914970] FAULT_INJECTION: forcing a failure. [ 2817.914970] name failslab, interval 1, probability 0, space 0, times 0 [ 2817.947145] CPU: 1 PID: 16207 Comm: syz-executor.0 Not tainted 5.0.0-rc8+ #3 [ 2817.954363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2817.963723] Call Trace: [ 2817.966338] dump_stack+0x172/0x1f0 [ 2817.969995] should_fail.cold+0xa/0x1b [ 2817.973899] ? zap_class+0x460/0x460 [ 2817.977632] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2817.982746] ? sctp_bind_addr_state+0x1ae/0x340 [ 2817.987428] ? find_held_lock+0x35/0x130 [ 2817.991509] __should_failslab+0x121/0x190 [ 2817.995760] should_failslab+0x9/0x14 [ 2817.999571] kmem_cache_alloc_trace+0x4b/0x760 [ 2818.004167] ? kasan_check_read+0x11/0x20 [ 2818.008337] sctp_add_bind_addr+0x9f/0x3a0 [ 2818.012599] sctp_copy_local_addr_list+0x385/0x530 [ 2818.017548] ? sctp_defaults_init+0xbf0/0xbf0 [ 2818.022058] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 2818.027257] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2818.032814] sctp_copy_one_addr+0x5f/0x170 [ 2818.037058] ? sctp_copy_one_addr+0x5f/0x170 [ 2818.041488] sctp_bind_addr_copy+0xfc/0x2c8 [ 2818.045836] sctp_assoc_set_bind_addr_from_ep+0x168/0x1c0 [ 2818.051401] sctp_sendmsg_new_asoc+0x3bd/0xfd0 [ 2818.056000] ? mark_held_locks+0xb1/0x100 [ 2818.060162] ? sctp_autobind+0x1f0/0x1f0 [ 2818.064229] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2818.068821] ? lock_sock_nested+0x9a/0x120 [ 2818.073067] ? trace_hardirqs_on+0x67/0x230 [ 2818.077392] ? lock_sock_nested+0x9a/0x120 [ 2818.081622] ? __local_bh_enable_ip+0x15a/0x270 [ 2818.086292] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2818.091841] ? sctp_endpoint_lookup_assoc+0x17f/0x290 [ 2818.097043] sctp_sendmsg+0x1269/0x17e0 [ 2818.101017] ? sctp_id2assoc+0x2d0/0x2d0 [ 2818.105065] ? __local_bh_enable_ip+0x15a/0x270 [ 2818.109722] ? _raw_spin_unlock_bh+0x31/0x40 [ 2818.114115] ? __local_bh_enable_ip+0x15a/0x270 [ 2818.118775] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2818.123345] ? release_sock+0x158/0x1c0 [ 2818.127323] ? _raw_spin_unlock_bh+0x31/0x40 [ 2818.131732] ? release_sock+0x158/0x1c0 [ 2818.135703] inet_sendmsg+0x147/0x5d0 [ 2818.139504] ? ipip_gro_receive+0x100/0x100 [ 2818.143835] sock_sendmsg+0xdd/0x130 [ 2818.147539] ___sys_sendmsg+0x806/0x930 [ 2818.151506] ? copy_msghdr_from_user+0x430/0x430 [ 2818.156254] ? lock_downgrade+0x810/0x810 [ 2818.160400] ? kasan_check_read+0x11/0x20 [ 2818.164541] ? __fget+0x367/0x540 [ 2818.168007] ? __fget_light+0x1a9/0x230 [ 2818.171982] ? __fdget+0x1b/0x20 [ 2818.175337] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2818.180890] __sys_sendmsg+0x105/0x1d0 [ 2818.184765] ? __ia32_sys_shutdown+0x80/0x80 [ 2818.189160] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2818.194685] ? fput+0x128/0x1a0 [ 2818.197967] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2818.202718] ? do_syscall_64+0x26/0x610 [ 2818.206683] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2818.212032] ? do_syscall_64+0x26/0x610 [ 2818.215998] __x64_sys_sendmsg+0x78/0xb0 [ 2818.220048] do_syscall_64+0x103/0x610 [ 2818.223926] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2818.229104] RIP: 0033:0x457e29 [ 2818.232283] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2818.251171] RSP: 002b:00007fcea3655c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2818.258862] RAX: ffffffffffffffda RBX: 00007fcea3655c90 RCX: 0000000000457e29 [ 2818.266121] RDX: 0000000004040040 RSI: 0000000020000400 RDI: 0000000000000004 [ 2818.273383] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2818.280639] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcea36566d4 [ 2818.287900] R13: 00000000004c4e20 R14: 00000000004d8b88 R15: 0000000000000005 [ 2818.298337] net_ratelimit: 24 callbacks suppressed [ 2818.298345] protocol 88fb is buggy, dev hsr_slave_0 [ 2818.308505] protocol 88fb is buggy, dev hsr_slave_1 03:45:01 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) sendto$ax25(r0, 0x0, 0x0, 0x4141, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0xfffffffffffffffd, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x1ff, 0x40000) recvfrom$netrom(r2, &(0x7f0000000040)=""/38, 0x26, 0x0, &(0x7f0000000100)={{0x3, @bcast, 0x7}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000000180)={0x3, 0xffffffffffffff80, 0x1}, 0xc) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000080)=0x8001) 03:45:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) 03:45:01 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x6800000000000000]}, 0x48) 03:45:01 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='\x00']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:45:01 executing program 0 (fault-call:2 fault-nth:11): perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) 03:45:01 executing program 3: timer_create(0x7, &(0x7f00000000c0)={0x0, 0x2}, &(0x7f0000000100)=0x0) timer_delete(r0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') exit(0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x200000, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000340)=""/208, 0xd0}], 0x1, 0x1) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x0, 0x0) recvfrom$netrom(r2, &(0x7f0000000180)=""/228, 0xe4, 0x40000160, 0x0, 0x0) 03:45:01 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x6c00000000000000]}, 0x48) 03:45:01 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000040)=ANY=[@ANYBLOB="ee9800000000004000000000000000001a1ae88f8efafb2be5c373ab3ba8c97a5af693709f674543203086ae171a6cf185"]) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) [ 2818.519997] FAULT_INJECTION: forcing a failure. [ 2818.519997] name failslab, interval 1, probability 0, space 0, times 0 03:45:01 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x7100000000000000]}, 0x48) [ 2818.582748] CPU: 0 PID: 16226 Comm: syz-executor.0 Not tainted 5.0.0-rc8+ #3 [ 2818.589987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2818.599361] Call Trace: [ 2818.601980] dump_stack+0x172/0x1f0 [ 2818.605640] should_fail.cold+0xa/0x1b [ 2818.609542] ? zap_class+0x460/0x460 [ 2818.613271] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2818.618413] ? sctp_bind_addr_state+0x1ae/0x340 [ 2818.623100] ? find_held_lock+0x35/0x130 [ 2818.627185] __should_failslab+0x121/0x190 [ 2818.631441] should_failslab+0x9/0x14 [ 2818.635254] kmem_cache_alloc_trace+0x4b/0x760 [ 2818.639847] ? kasan_check_read+0x11/0x20 [ 2818.644007] sctp_add_bind_addr+0x9f/0x3a0 [ 2818.648256] sctp_copy_local_addr_list+0x385/0x530 [ 2818.653197] ? sctp_defaults_init+0xbf0/0xbf0 [ 2818.657706] ? _get_random_bytes+0x197/0x400 [ 2818.662121] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 2818.667318] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2818.672872] sctp_copy_one_addr+0x5f/0x170 [ 2818.677111] ? sctp_copy_one_addr+0x5f/0x170 [ 2818.681531] sctp_bind_addr_copy+0xfc/0x2c8 [ 2818.685868] sctp_assoc_set_bind_addr_from_ep+0x168/0x1c0 [ 2818.691426] sctp_sendmsg_new_asoc+0x3bd/0xfd0 [ 2818.696024] ? sctp_autobind+0x1f0/0x1f0 [ 2818.700097] ? sctp_endpoint_lookup_assoc+0x1b/0x290 [ 2818.705209] ? sctp_endpoint_lookup_assoc+0x6f/0x290 [ 2818.710318] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2818.715862] ? sctp_endpoint_lookup_assoc+0x17f/0x290 [ 2818.721062] sctp_sendmsg+0x1269/0x17e0 [ 2818.725052] ? sctp_id2assoc+0x2d0/0x2d0 [ 2818.729116] ? __local_bh_enable_ip+0x15a/0x270 [ 2818.733785] ? _raw_spin_unlock_bh+0x31/0x40 [ 2818.738196] ? __local_bh_enable_ip+0x15a/0x270 [ 2818.742871] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2818.747462] ? release_sock+0x158/0x1c0 [ 2818.751448] ? _raw_spin_unlock_bh+0x31/0x40 [ 2818.755857] ? release_sock+0x158/0x1c0 [ 2818.759845] inet_sendmsg+0x147/0x5d0 [ 2818.763650] ? ipip_gro_receive+0x100/0x100 [ 2818.767979] sock_sendmsg+0xdd/0x130 [ 2818.771703] ___sys_sendmsg+0x806/0x930 [ 2818.775684] ? copy_msghdr_from_user+0x430/0x430 [ 2818.780455] ? lock_downgrade+0x810/0x810 [ 2818.784612] ? kasan_check_read+0x11/0x20 [ 2818.788768] ? __fget+0x367/0x540 [ 2818.792248] ? __fget_light+0x1a9/0x230 [ 2818.796226] ? __fdget+0x1b/0x20 [ 2818.799595] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2818.805143] __sys_sendmsg+0x105/0x1d0 [ 2818.809037] ? __ia32_sys_shutdown+0x80/0x80 [ 2818.813454] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2818.818998] ? fput+0x128/0x1a0 [ 2818.822292] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2818.827051] ? do_syscall_64+0x26/0x610 [ 2818.831033] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2818.836408] ? do_syscall_64+0x26/0x610 [ 2818.840414] __x64_sys_sendmsg+0x78/0xb0 [ 2818.844481] do_syscall_64+0x103/0x610 [ 2818.848392] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2818.853583] RIP: 0033:0x457e29 [ 2818.856781] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2818.875681] RSP: 002b:00007fcea3655c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 03:45:01 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$sock_int(r0, 0x1, 0x22, 0x0, &(0x7f0000000040)) 03:45:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) [ 2818.883404] RAX: ffffffffffffffda RBX: 00007fcea3655c90 RCX: 0000000000457e29 [ 2818.890679] RDX: 0000000004040040 RSI: 0000000020000400 RDI: 0000000000000004 [ 2818.897949] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2818.905223] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcea36566d4 [ 2818.912495] R13: 00000000004c4e20 R14: 00000000004d8b88 R15: 0000000000000005 03:45:01 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x7300000000000000]}, 0x48) 03:45:01 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f00000000c0)=ANY=[@ANYBLOB="618a7aa203fdca7f675606b0bd2ebf72acda0f32a354bd5e271cf3d0d4aba1f063611470bd1e25ed52558a8a3b56fa32bf72509fe7503d49d15061c78511d5ce384980fa437dbe706d3fa8e50ae4203c71c6d84d99c3ee2cb28ced53370c4c2f0883afacb07c68443df0f002779b8d6234c5511765b7509f37179074f2c26e01f00e29732dcf656627ce9b01a65d6e57808937ee57e23e8d6a76d98707d646464b1d51884be51e1850705b7e1c4dd83fede03c4dac3d45510e26f955ced87f387aaa88aa67c6ee4df260a76f5e95bb3937209edf261234"]) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) [ 2818.968088] protocol 88fb is buggy, dev hsr_slave_0 [ 2818.968128] protocol 88fb is buggy, dev hsr_slave_1 [ 2818.973188] protocol 88fb is buggy, dev hsr_slave_1 [ 2818.978305] protocol 88fb is buggy, dev hsr_slave_0 [ 2818.983346] protocol 88fb is buggy, dev hsr_slave_0 [ 2818.988364] protocol 88fb is buggy, dev hsr_slave_1 [ 2818.993364] protocol 88fb is buggy, dev hsr_slave_1 [ 2819.048126] protocol 88fb is buggy, dev hsr_slave_0 03:45:01 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x7400000000000000]}, 0x48) 03:45:01 executing program 0 (fault-call:2 fault-nth:12): perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) 03:45:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) 03:45:02 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000180)=0x0) move_pages(r0, 0x8, &(0x7f00000001c0)=[&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil], 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x2) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='\x18\xbeb\x01\x80\x13\xb9)\xbd\xb1\x1a\xf6}t(\xef\x93+\x0fI\xb1\xd5\xa8\xfb\x0fA\x99\xa0\xf0\x1c\x82\\\xab\x83C\x9d\x12\xb4\xe4M\xdb\x8c\x98\x87P', 0x8000, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) mount(&(0x7f0000000340)=ANY=[@ANYBLOB="7607d060da8088579c1f08114d4898d0ffbb87607382320171d71463226a527fdbf561083760b9ce98bf6f1a9f19634266d305b56d9723d17599778909417cb6a4b150d9f62e4bbf"], &(0x7f00000000c0)='.', 0x0, 0x3080, 0x0) r1 = dup(0xffffffffffffff9c) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000440)={&(0x7f0000000300)=[0x0], 0x1}) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)=@random={'btrfs.', '\x00'}, &(0x7f00000002c0)='u\x00', 0x2, 0x1) umount2(&(0x7f0000000240)='./file0\x00', 0xf) umount2(&(0x7f0000000140)='./file0\x00', 0x4) [ 2819.262394] FAULT_INJECTION: forcing a failure. [ 2819.262394] name failslab, interval 1, probability 0, space 0, times 0 [ 2819.289902] CPU: 0 PID: 16256 Comm: syz-executor.0 Not tainted 5.0.0-rc8+ #3 [ 2819.297114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2819.306478] Call Trace: [ 2819.309089] dump_stack+0x172/0x1f0 03:45:02 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps\x7fro{lup\x00\xe2i0\xb7\x1cO\x04N\x81\xd1\xa3/\x96\xfd\xbeK\xf8\x91c\xf4,V\x87pa\xd8\xe3\x97\x10 \xfd}!\xfc\xe6\\s\x01\x81LJ\xbc\b\xc2B\xee\xc0\v\x02\x85\xb8\x80\xf77@\x93\x1e\x93u\x93)\xc5B\x0ey\xaf\xe4\x16\xd3i\x91\x9a\xea\xbd_U\x93\xebsw\xa59\x13O\xc5~\xe3\xaaK\xfc<\xdak\xc4\xc5\xfcE\xdc\xdb\x16\x7f\xf4\xb0\x16\xd8\xe9L6\xe9\xc2\xce=\xb2\xb5\x9e\xa6|/\xa2\x9b\x92t\xa1\x84\xc3\x88X\vm\x93\xbd\xcf^\x8d{\xdf\x16:Yd\x90') ioctl(r0, 0x5, &(0x7f0000000040)="0c4e54a5a2bb1a322573bd6c6097ae4937e072f04e8e8c48c760582cc8704a12ad4d634b0ec34b5b7388e6ffb98fb8f66880218bd9bc60fd82c4f3796c95aa90e823fdfd09de913047db89482d787a5a8c24ca8620d2b417a44f3f6b4df4ecc577773abcb09e8cc359df6be823f866519918ef22c4b68b6a6b792e0197e7672854e3f1050798b7e049199695888f9a") fadvise64(r0, 0x0, 0x6, 0x4) exit(0x0) 03:45:02 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x7a00000000000000]}, 0x48) 03:45:02 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r3, 0xae9a) r4 = fcntl$dupfd(r0, 0x406, r2) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r2}, 0x68) 03:45:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) [ 2819.312743] should_fail.cold+0xa/0x1b [ 2819.316652] ? zap_class+0x460/0x460 [ 2819.320411] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2819.325531] ? sctp_bind_addr_state+0x1ae/0x340 [ 2819.330217] ? find_held_lock+0x35/0x130 [ 2819.334304] __should_failslab+0x121/0x190 [ 2819.338556] should_failslab+0x9/0x14 [ 2819.342388] kmem_cache_alloc_trace+0x4b/0x760 [ 2819.346990] ? kasan_check_read+0x11/0x20 [ 2819.351146] sctp_add_bind_addr+0x9f/0x3a0 [ 2819.355387] sctp_copy_local_addr_list+0x385/0x530 [ 2819.360337] ? sctp_defaults_init+0xbf0/0xbf0 [ 2819.364870] ? _get_random_bytes+0x197/0x400 [ 2819.369294] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 2819.374497] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2819.374556] sctp_copy_one_addr+0x5f/0x170 [ 2819.384319] ? sctp_copy_one_addr+0x5f/0x170 [ 2819.388755] sctp_bind_addr_copy+0xfc/0x2c8 [ 2819.393104] sctp_assoc_set_bind_addr_from_ep+0x168/0x1c0 [ 2819.398668] sctp_sendmsg_new_asoc+0x3bd/0xfd0 [ 2819.403261] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2819.408034] ? sctp_autobind+0x1f0/0x1f0 [ 2819.408054] ? retint_kernel+0x2d/0x2d [ 2819.408083] ? sctp_endpoint_lookup_assoc+0x17f/0x290 [ 2819.408104] sctp_sendmsg+0x1269/0x17e0 [ 2819.408133] ? sctp_id2assoc+0x2d0/0x2d0 [ 2819.408149] ? __local_bh_enable_ip+0x15a/0x270 [ 2819.408166] ? _raw_spin_unlock_bh+0x31/0x40 [ 2819.438370] ? __local_bh_enable_ip+0x15a/0x270 [ 2819.443065] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2819.447663] ? release_sock+0x158/0x1c0 [ 2819.451660] ? _raw_spin_unlock_bh+0x31/0x40 [ 2819.456085] ? release_sock+0x158/0x1c0 [ 2819.460085] inet_sendmsg+0x147/0x5d0 [ 2819.463902] ? ipip_gro_receive+0x100/0x100 [ 2819.468247] sock_sendmsg+0xdd/0x130 [ 2819.471976] ___sys_sendmsg+0x806/0x930 [ 2819.475966] ? copy_msghdr_from_user+0x430/0x430 [ 2819.480743] ? lock_downgrade+0x810/0x810 [ 2819.484910] ? kasan_check_read+0x11/0x20 [ 2819.489079] ? __fget+0x367/0x540 [ 2819.492567] ? __fget_light+0x1a9/0x230 [ 2819.496555] ? __fdget+0x1b/0x20 [ 2819.499929] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2819.505488] __sys_sendmsg+0x105/0x1d0 [ 2819.509407] ? __ia32_sys_shutdown+0x80/0x80 [ 2819.513830] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2819.519395] ? fput+0x128/0x1a0 [ 2819.522702] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2819.527473] ? do_syscall_64+0x26/0x610 [ 2819.531467] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2819.536852] ? do_syscall_64+0x26/0x610 [ 2819.540846] __x64_sys_sendmsg+0x78/0xb0 [ 2819.544922] do_syscall_64+0x103/0x610 [ 2819.548842] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2819.554040] RIP: 0033:0x457e29 [ 2819.557244] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2819.576159] RSP: 002b:00007fcea3655c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2819.583868] RAX: ffffffffffffffda RBX: 00007fcea3655c90 RCX: 0000000000457e29 [ 2819.591139] RDX: 0000000004040040 RSI: 0000000020000400 RDI: 0000000000000004 [ 2819.598413] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2819.605681] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcea36566d4 [ 2819.612955] R13: 00000000004c4e20 R14: 00000000004d8b88 R15: 0000000000000005 03:45:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) 03:45:02 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x8000000000000000]}, 0x48) 03:45:02 executing program 0 (fault-call:2 fault-nth:13): perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) 03:45:02 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) getsockname(r0, &(0x7f0000000140)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x80) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000000)=ANY=[@ANYBLOB="0f4761563b9385170ff064"]) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) r4 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x8001, 0x200000) setsockopt$CAIFSO_LINK_SELECT(r4, 0x116, 0x7f, &(0x7f0000000100), 0x4) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, &(0x7f0000000040)=0x7) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$CAPI_NCCI_GETUNIT(r4, 0x80044327, &(0x7f0000000200)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r2}, 0x68) 03:45:02 executing program 5: r0 = open(&(0x7f0000000080)='./bus\x00', 0x80000, 0xffffffffffffffff) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) write$P9_RXATTRWALK(r1, &(0x7f0000000140)={0xcf}, 0xf) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f0000000180)={r2, &(0x7f00000000c0)=""/97}) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) 03:45:02 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x85ffffff00000000]}, 0x48) 03:45:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) [ 2819.884814] audit: type=1804 audit(2000000702.723:469): pid=16290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir701892627/syzkaller.B1rdvy/4003/bus" dev="sda1" ino=17528 res=1 03:45:02 executing program 5: r0 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0xa00000000000000, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000], 0x0, 0x0}, 0x78) [ 2819.936311] FAULT_INJECTION: forcing a failure. [ 2819.936311] name failslab, interval 1, probability 0, space 0, times 0 [ 2819.963741] CPU: 0 PID: 16289 Comm: syz-executor.0 Not tainted 5.0.0-rc8+ #3 [ 2819.970974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2819.980336] Call Trace: [ 2819.982963] dump_stack+0x172/0x1f0 [ 2819.986615] should_fail.cold+0xa/0x1b [ 2819.990516] ? zap_class+0x460/0x460 [ 2819.992170] audit: type=1804 audit(2000000702.733:470): pid=16290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir701892627/syzkaller.B1rdvy/4003/bus" dev="sda1" ino=17528 res=1 [ 2819.994237] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2819.994257] ? sctp_bind_addr_state+0x1ae/0x340 [ 2819.994274] ? find_held_lock+0x35/0x130 [ 2819.994300] __should_failslab+0x121/0x190 [ 2820.038692] should_failslab+0x9/0x14 [ 2820.042508] kmem_cache_alloc_trace+0x4b/0x760 [ 2820.047106] ? kasan_check_read+0x11/0x20 [ 2820.051289] sctp_add_bind_addr+0x9f/0x3a0 [ 2820.055558] sctp_copy_local_addr_list+0x385/0x530 [ 2820.060509] ? sctp_defaults_init+0xbf0/0xbf0 [ 2820.065019] ? _get_random_bytes+0x197/0x400 [ 2820.069442] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 2820.074644] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2820.080203] sctp_copy_one_addr+0x5f/0x170 [ 2820.084452] ? sctp_copy_one_addr+0x5f/0x170 [ 2820.088878] sctp_bind_addr_copy+0xfc/0x2c8 [ 2820.093228] sctp_assoc_set_bind_addr_from_ep+0x168/0x1c0 [ 2820.098785] sctp_sendmsg_new_asoc+0x3bd/0xfd0 [ 2820.103395] ? mark_held_locks+0xb1/0x100 [ 2820.107558] ? sctp_autobind+0x1f0/0x1f0 [ 2820.111624] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2820.116207] ? lock_sock_nested+0x9a/0x120 [ 2820.120446] ? trace_hardirqs_on+0x67/0x230 [ 2820.124773] ? lock_sock_nested+0x9a/0x120 [ 2820.129017] ? __local_bh_enable_ip+0x15a/0x270 [ 2820.133692] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2820.139233] ? sctp_endpoint_lookup_assoc+0x17f/0x290 [ 2820.144429] sctp_sendmsg+0x1269/0x17e0 [ 2820.148428] ? sctp_id2assoc+0x2d0/0x2d0 [ 2820.152492] ? __local_bh_enable_ip+0x15a/0x270 [ 2820.157165] ? _raw_spin_unlock_bh+0x31/0x40 [ 2820.161578] ? __local_bh_enable_ip+0x15a/0x270 [ 2820.166249] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2820.170844] ? release_sock+0x158/0x1c0 [ 2820.174827] ? _raw_spin_unlock_bh+0x31/0x40 [ 2820.179238] ? release_sock+0x158/0x1c0 [ 2820.183223] inet_sendmsg+0x147/0x5d0 [ 2820.187027] ? ipip_gro_receive+0x100/0x100 [ 2820.191367] sock_sendmsg+0xdd/0x130 [ 2820.195094] ___sys_sendmsg+0x806/0x930 [ 2820.199081] ? copy_msghdr_from_user+0x430/0x430 [ 2820.203849] ? lock_downgrade+0x810/0x810 [ 2820.208012] ? kasan_check_read+0x11/0x20 [ 2820.212170] ? __fget+0x367/0x540 [ 2820.215643] ? finish_task_switch+0x118/0x790 [ 2820.220146] ? __fget_light+0x1a9/0x230 [ 2820.224145] ? __fdget+0x1b/0x20 [ 2820.227519] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2820.233067] __sys_sendmsg+0x105/0x1d0 [ 2820.236965] ? __ia32_sys_shutdown+0x80/0x80 [ 2820.241396] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2820.246182] __x64_sys_sendmsg+0x78/0xb0 [ 2820.250246] ? do_syscall_64+0x5b/0x610 [ 2820.254241] do_syscall_64+0x103/0x610 [ 2820.258138] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2820.263341] RIP: 0033:0x457e29 [ 2820.266554] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2820.285457] RSP: 002b:00007fcea3655c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2820.293166] RAX: ffffffffffffffda RBX: 00007fcea3655c90 RCX: 0000000000457e29 [ 2820.300435] RDX: 0000000004040040 RSI: 0000000020000400 RDI: 0000000000000004 [ 2820.307705] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2820.314972] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcea36566d4 [ 2820.322260] R13: 00000000004c4e20 R14: 00000000004d8b88 R15: 0000000000000005 03:45:03 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') exit(0x0) r1 = getpid() bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r1, r0, 0x0, 0xd, &(0x7f0000000080)='smaps_rollup\x00', r2}, 0x30) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000340)=""/208, 0xd0}], 0x1, 0x1) 03:45:03 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000180)=ANY=[@ANYBLOB="019ed7aebee8d805070eb72bb5598db6a35315c25814ae94b74d8437917fc35dd3a1b9c58dcf0f3b4218efbd122f835d8d913a6663946ec1f6c50f0de40efea0a0ef9b1defded3473e92744fb235ccb7e475b4150814e0f22876cf637b71a913172bc328f8454a580a538fbb8d624ae6ca8e810000000000"]) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r3, 0xae9a) r4 = accept4(r0, &(0x7f0000000000)=@nfc_llcp, &(0x7f00000000c0)=0x80, 0x80000) getsockopt$inet6_mreq(r4, 0x29, 0x15, &(0x7f0000000100)={@loopback}, &(0x7f0000000140)=0x14) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r2}, 0x68) 03:45:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) [ 2820.372963] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:45:03 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x86e6080000000000]}, 0x48) 03:45:03 executing program 0 (fault-call:2 fault-nth:14): perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) 03:45:03 executing program 5: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = creat(&(0x7f0000000040)='./file1\x00', 0x0) io_setup(0x4, &(0x7f0000000140)=0x0) fcntl$setstatus(r0, 0x4, 0x4800) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000080)="7ab1bcba1027", 0x6}]) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000000280)={r2, &(0x7f0000000180)=""/203}) 03:45:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) 03:45:03 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000400)='/proc/capi/capi20ncci\x00', 0x2202, 0x0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000440)={&(0x7f0000ff9000/0x7000)=nil, 0x7000}) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000280)={0x1000, 0x9}, 0x2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x400, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @broadcast}}, [0x3, 0x3, 0x2, 0x100000001, 0x3, 0x6, 0x1, 0x1, 0x3, 0x0, 0x3, 0x101, 0x1, 0x7ff, 0x4]}, &(0x7f0000000040)=0x100) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f00000001c0)={r6, 0x61, "b778d4d6cbfa92c9b7355d175288000b7410ff3ebd58adef4345cd8078125405d08188db631db3ac062dc013b06551ff4c94c1f89c031a398515c91fc504597ba0ae15dd1f847ce4de1c74e25ce524fbdedcee9cd86341edf94094604ccfeaaf77"}, &(0x7f0000000240)=0x69) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r3}, 0x68) 03:45:03 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x9cffffff00000000]}, 0x48) [ 2820.755592] FAULT_INJECTION: forcing a failure. [ 2820.755592] name failslab, interval 1, probability 0, space 0, times 0 [ 2820.775336] CPU: 1 PID: 16322 Comm: syz-executor.0 Not tainted 5.0.0-rc8+ #3 [ 2820.782555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2820.791913] Call Trace: [ 2820.794536] dump_stack+0x172/0x1f0 [ 2820.798187] should_fail.cold+0xa/0x1b [ 2820.802080] ? zap_class+0x460/0x460 [ 2820.805787] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2820.810886] ? sctp_bind_addr_state+0x1ae/0x340 [ 2820.815550] ? find_held_lock+0x35/0x130 [ 2820.819639] __should_failslab+0x121/0x190 [ 2820.823893] should_failslab+0x9/0x14 [ 2820.827704] kmem_cache_alloc_trace+0x4b/0x760 [ 2820.832304] ? kasan_check_read+0x11/0x20 [ 2820.836466] sctp_add_bind_addr+0x9f/0x3a0 [ 2820.840719] sctp_copy_local_addr_list+0x385/0x530 [ 2820.845656] ? sctp_defaults_init+0xbf0/0xbf0 [ 2820.850157] ? _get_random_bytes+0x197/0x400 [ 2820.854578] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 2820.859774] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2820.865304] sctp_copy_one_addr+0x5f/0x170 [ 2820.869532] ? sctp_copy_one_addr+0x5f/0x170 [ 2820.873933] sctp_bind_addr_copy+0xfc/0x2c8 [ 2820.878274] sctp_assoc_set_bind_addr_from_ep+0x168/0x1c0 [ 2820.883830] sctp_sendmsg_new_asoc+0x3bd/0xfd0 [ 2820.888437] ? mark_held_locks+0xb1/0x100 [ 2820.892610] ? sctp_autobind+0x1f0/0x1f0 [ 2820.896667] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2820.901255] ? lock_sock_nested+0x9a/0x120 [ 2820.905492] ? trace_hardirqs_on+0x67/0x230 [ 2820.909813] ? lock_sock_nested+0x9a/0x120 [ 2820.914042] ? __local_bh_enable_ip+0x15a/0x270 [ 2820.918713] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2820.924265] ? sctp_endpoint_lookup_assoc+0x17f/0x290 [ 2820.929472] sctp_sendmsg+0x1269/0x17e0 [ 2820.933481] ? sctp_id2assoc+0x2d0/0x2d0 [ 2820.937600] ? release_sock+0x158/0x1c0 [ 2820.941596] ? __local_bh_enable_ip+0x18e/0x270 [ 2820.946281] ? _raw_spin_unlock_bh+0x31/0x40 [ 2820.950688] ? release_sock+0x158/0x1c0 [ 2820.954677] inet_sendmsg+0x147/0x5d0 [ 2820.958551] ? ipip_gro_receive+0x100/0x100 [ 2820.962867] sock_sendmsg+0xdd/0x130 [ 2820.966581] ___sys_sendmsg+0x806/0x930 [ 2820.970563] ? copy_msghdr_from_user+0x430/0x430 [ 2820.975328] ? lock_downgrade+0x810/0x810 [ 2820.979485] ? kasan_check_read+0x11/0x20 [ 2820.983637] ? __fget+0x367/0x540 [ 2820.987130] ? __fget_light+0x1a9/0x230 [ 2820.991097] ? __fdget+0x1b/0x20 [ 2820.994465] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2820.999998] __sys_sendmsg+0x105/0x1d0 [ 2821.003892] ? __ia32_sys_shutdown+0x80/0x80 [ 2821.008294] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2821.013831] ? fput+0x128/0x1a0 [ 2821.017124] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2821.021864] ? do_syscall_64+0x26/0x610 [ 2821.025833] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2821.031193] ? do_syscall_64+0x26/0x610 [ 2821.035184] __x64_sys_sendmsg+0x78/0xb0 [ 2821.039241] do_syscall_64+0x103/0x610 [ 2821.043147] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2821.048340] RIP: 0033:0x457e29 [ 2821.051590] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2821.070538] RSP: 002b:00007fcea3655c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2821.078245] RAX: ffffffffffffffda RBX: 00007fcea3655c90 RCX: 0000000000457e29 [ 2821.085502] RDX: 0000000004040040 RSI: 0000000020000400 RDI: 0000000000000004 [ 2821.092759] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2821.100015] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcea36566d4 03:45:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) 03:45:04 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x9fffffff00000000]}, 0x48) [ 2821.107271] R13: 00000000004c4e20 R14: 00000000004d8b88 R15: 0000000000000005 03:45:04 executing program 0 (fault-call:2 fault-nth:15): perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) 03:45:04 executing program 5: socketpair$unix(0x1, 0x2000000000005, 0x0, &(0x7f0000616ff8)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20400) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x5, 0x1ff, 0x1000000000000914, 0x3}, 0x2c) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x42000, 0x0) r2 = add_key(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r3 = request_key(&(0x7f0000000280)='dns_resolver\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)='@trusted\x00', 0xfffffffffffffffe) keyctl$search(0xa, r2, &(0x7f0000000180)='logon\x00', &(0x7f0000000240)={'syz', 0x3}, r3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xd, 0x81, 0x4, 0x4, 0x0, r1}, 0x2c) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f0000000340)={0x0, 0x7, 0x6}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000003c0)={r4, 0x3451}, &(0x7f0000000400)=0x8) sendmmsg(r0, &(0x7f0000004040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)) select(0x40, &(0x7f0000000100)={0x9}, 0x0, &(0x7f0000000200)={0x2ce}, 0x0) 03:45:04 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x0, 0x2000) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@mcast2, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@dev}}, &(0x7f0000000240)=0xe8) accept(r0, &(0x7f00000002c0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000440)=0x80) r5 = accept$packet(r0, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000004c0)=0x14) ioctl$sock_TIOCINQ(r5, 0x541b, &(0x7f0000000280)) getpeername$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)=0x14) ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f0000000800)) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f00000007c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f0000000840)=ANY=[@ANYBLOB="d0010000", @ANYRES16=r2, @ANYBLOB="00042bbd70f7ffdbdf2502cc45204208000100", @ANYRES32=r3, @ANYBLOB="b401020040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000600000008000600", @ANYRES32=r4, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000100000044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004006163746976656261636b75700000000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000800030003000000080004009f0000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r6, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e00000008000400ff7f000008000600", @ANYRES32=r7, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b000000080004007fffffff0800070000000000"], 0x1d0}, 0x1, 0x0, 0x0, 0x4}, 0x40) socket$inet6_dccp(0xa, 0x6, 0x0) exit(0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000340)=""/208, 0xd0}], 0x1, 0x1) 03:45:04 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) getsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) 03:45:04 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0xe4ffffff00000000]}, 0x48) 03:45:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) [ 2821.324542] FAULT_INJECTION: forcing a failure. [ 2821.324542] name failslab, interval 1, probability 0, space 0, times 0 [ 2821.351713] CPU: 1 PID: 16341 Comm: syz-executor.0 Not tainted 5.0.0-rc8+ #3 [ 2821.358921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2821.368275] Call Trace: [ 2821.370854] dump_stack+0x172/0x1f0 [ 2821.374479] should_fail.cold+0xa/0x1b [ 2821.378388] ? zap_class+0x460/0x460 [ 2821.382109] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2821.387243] ? sctp_bind_addr_state+0x1ae/0x340 [ 2821.391906] ? find_held_lock+0x35/0x130 [ 2821.395961] __should_failslab+0x121/0x190 [ 2821.400184] should_failslab+0x9/0x14 [ 2821.403971] kmem_cache_alloc_trace+0x4b/0x760 [ 2821.408576] ? kasan_check_read+0x11/0x20 [ 2821.412713] sctp_add_bind_addr+0x9f/0x3a0 [ 2821.416942] sctp_copy_local_addr_list+0x385/0x530 [ 2821.421866] ? sctp_defaults_init+0xbf0/0xbf0 [ 2821.426352] ? trace_hardirqs_on_caller+0x6a/0x220 [ 2821.431298] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 2821.436489] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2821.442034] sctp_copy_one_addr+0x5f/0x170 [ 2821.446255] ? sctp_copy_one_addr+0x5f/0x170 [ 2821.450671] sctp_bind_addr_copy+0xfc/0x2c8 [ 2821.454984] sctp_assoc_set_bind_addr_from_ep+0x168/0x1c0 [ 2821.460517] sctp_sendmsg_new_asoc+0x3bd/0xfd0 [ 2821.465087] ? mark_held_locks+0xb1/0x100 [ 2821.469273] ? sctp_autobind+0x1f0/0x1f0 [ 2821.473324] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2821.477894] ? lock_sock_nested+0x9a/0x120 [ 2821.482115] ? trace_hardirqs_on+0x67/0x230 [ 2821.486449] ? lock_sock_nested+0x9a/0x120 [ 2821.490675] ? __local_bh_enable_ip+0x15a/0x270 [ 2821.495331] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2821.500875] ? sctp_endpoint_lookup_assoc+0x17f/0x290 [ 2821.506066] sctp_sendmsg+0x1269/0x17e0 [ 2821.510066] ? sctp_id2assoc+0x2d0/0x2d0 [ 2821.514196] ? __local_bh_enable_ip+0x15a/0x270 [ 2821.518866] ? _raw_spin_unlock_bh+0x31/0x40 [ 2821.523265] ? __local_bh_enable_ip+0x15a/0x270 [ 2821.527951] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2821.532561] ? release_sock+0x158/0x1c0 [ 2821.536542] ? _raw_spin_unlock_bh+0x31/0x40 [ 2821.540940] ? release_sock+0x158/0x1c0 [ 2821.544923] inet_sendmsg+0x147/0x5d0 [ 2821.548740] ? ipip_gro_receive+0x100/0x100 [ 2821.553056] sock_sendmsg+0xdd/0x130 [ 2821.556783] ___sys_sendmsg+0x806/0x930 [ 2821.560755] ? copy_msghdr_from_user+0x430/0x430 [ 2821.565501] ? lock_downgrade+0x810/0x810 [ 2821.569652] ? kasan_check_read+0x11/0x20 [ 2821.573805] ? __fget+0x367/0x540 [ 2821.577256] ? __fget_light+0x1a9/0x230 [ 2821.581254] ? __fdget+0x1b/0x20 [ 2821.584608] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2821.590137] __sys_sendmsg+0x105/0x1d0 [ 2821.594026] ? __ia32_sys_shutdown+0x80/0x80 [ 2821.598434] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2821.603957] ? fput+0x128/0x1a0 [ 2821.607250] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2821.612002] ? do_syscall_64+0x26/0x610 [ 2821.615960] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2821.621323] ? do_syscall_64+0x26/0x610 [ 2821.625285] __x64_sys_sendmsg+0x78/0xb0 [ 2821.629337] do_syscall_64+0x103/0x610 [ 2821.633224] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2821.638402] RIP: 0033:0x457e29 [ 2821.641593] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2821.660507] RSP: 002b:00007fcea3655c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2821.668215] RAX: ffffffffffffffda RBX: 00007fcea3655c90 RCX: 0000000000457e29 [ 2821.675488] RDX: 0000000004040040 RSI: 0000000020000400 RDI: 0000000000000004 [ 2821.682740] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2821.690023] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcea36566d4 [ 2821.697308] R13: 00000000004c4e20 R14: 00000000004d8b88 R15: 0000000000000005 03:45:04 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f0000000040)=r0, 0x4) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x4e88, 0x0, @mcast2={0xff, 0x2, [0xe82b, 0x0, 0x0, 0x3f000000, 0x0, 0x55efff7f]}, 0xd}, 0x80, &(0x7f0000000340), 0x2b, &(0x7f0000000180)}, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) r1 = gettid() getpgrp(r1) 03:45:04 executing program 0 (fault-call:2 fault-nth:16): perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) 03:45:04 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0xfa00000000000000]}, 0x48) 03:45:04 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) r3 = syz_open_dev$rtc(&(0x7f0000000040)='/dev/rtc#\x00', 0xfffffffffffffffc, 0x2000) ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0x87c) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:45:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) [ 2821.968397] FAULT_INJECTION: forcing a failure. [ 2821.968397] name failslab, interval 1, probability 0, space 0, times 0 [ 2821.987873] CPU: 0 PID: 16370 Comm: syz-executor.0 Not tainted 5.0.0-rc8+ #3 [ 2821.995086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2822.004446] Call Trace: [ 2822.007052] dump_stack+0x172/0x1f0 [ 2822.010698] should_fail.cold+0xa/0x1b [ 2822.014596] ? mark_held_locks+0xb1/0x100 [ 2822.018791] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2822.023916] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2822.028543] ? retint_kernel+0x2d/0x2d [ 2822.032443] ? trace_hardirqs_on_caller+0x6a/0x220 [ 2822.037424] __should_failslab+0x121/0x190 [ 2822.041675] should_failslab+0x9/0x14 [ 2822.045488] kmem_cache_alloc_trace+0x4b/0x760 [ 2822.050095] ? retint_kernel+0x2d/0x2d [ 2822.054004] sctp_add_bind_addr+0x9f/0x3a0 [ 2822.058272] sctp_copy_local_addr_list+0x385/0x530 [ 2822.063222] ? sctp_defaults_init+0xbf0/0xbf0 [ 2822.067736] ? _get_random_bytes+0x197/0x400 [ 2822.072163] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 2822.077371] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2822.082950] sctp_copy_one_addr+0x5f/0x170 [ 2822.087196] ? sctp_copy_one_addr+0x5f/0x170 [ 2822.091626] sctp_bind_addr_copy+0xfc/0x2c8 [ 2822.095975] sctp_assoc_set_bind_addr_from_ep+0x168/0x1c0 [ 2822.101545] sctp_sendmsg_new_asoc+0x3bd/0xfd0 [ 2822.106144] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2822.110920] ? sctp_autobind+0x1f0/0x1f0 [ 2822.114992] ? retint_kernel+0x2d/0x2d [ 2822.118920] ? sctp_endpoint_lookup_assoc+0x17f/0x290 [ 2822.124128] sctp_sendmsg+0x1269/0x17e0 [ 2822.128197] ? sctp_id2assoc+0x2d0/0x2d0 [ 2822.132275] ? __local_bh_enable_ip+0x15a/0x270 [ 2822.136954] ? _raw_spin_unlock_bh+0x31/0x40 [ 2822.141391] ? __local_bh_enable_ip+0x15a/0x270 [ 2822.146073] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2822.150671] ? release_sock+0x158/0x1c0 [ 2822.154686] ? _raw_spin_unlock_bh+0x31/0x40 [ 2822.159098] ? release_sock+0x158/0x1c0 [ 2822.163097] inet_sendmsg+0x147/0x5d0 [ 2822.166919] ? ipip_gro_receive+0x100/0x100 [ 2822.171261] sock_sendmsg+0xdd/0x130 [ 2822.174988] ___sys_sendmsg+0x806/0x930 [ 2822.178987] ? copy_msghdr_from_user+0x430/0x430 [ 2822.183773] ? lock_downgrade+0x810/0x810 [ 2822.187943] ? kasan_check_read+0x11/0x20 [ 2822.192100] ? __fget+0x367/0x540 [ 2822.195592] ? __fget_light+0x1a9/0x230 [ 2822.199572] ? __fdget+0x1b/0x20 [ 2822.202938] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2822.208484] __sys_sendmsg+0x105/0x1d0 [ 2822.212400] ? __ia32_sys_shutdown+0x80/0x80 [ 2822.216809] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2822.222349] ? fput+0x128/0x1a0 [ 2822.225657] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2822.230414] ? do_syscall_64+0x26/0x610 [ 2822.234394] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2822.239762] ? do_syscall_64+0x26/0x610 [ 2822.243749] __x64_sys_sendmsg+0x78/0xb0 [ 2822.247816] do_syscall_64+0x103/0x610 [ 2822.251711] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2822.256902] RIP: 0033:0x457e29 [ 2822.260097] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2822.278997] RSP: 002b:00007fcea3655c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2822.286729] RAX: ffffffffffffffda RBX: 00007fcea3655c90 RCX: 0000000000457e29 [ 2822.294016] RDX: 0000000004040040 RSI: 0000000020000400 RDI: 0000000000000004 [ 2822.301289] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2822.308561] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcea36566d4 03:45:05 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f0000000040)=r0, 0x4) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x4e88, 0x0, @mcast2={0xff, 0x2, [0xe82b, 0x0, 0x0, 0x3f000000, 0x0, 0x55efff7f]}, 0xd}, 0x80, &(0x7f0000000340), 0x2b, &(0x7f0000000180)}, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) r1 = gettid() getpgrp(r1) [ 2822.315833] R13: 00000000004c4e20 R14: 00000000004d8b88 R15: 0000000000000005 03:45:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) 03:45:05 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000000040)={'broute\x00', 0x0, 0x0, 0x0, [], 0x1, 0x0, 0x0, [{}]}, 0x88) openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f00000000c0)=ANY=[@ANYBLOB="6143c425d3462a003ae7c5aeec8e030000000000aa8734b0807a65f31274c1750000dea46ca0a2879ee20775255ac1ee6bfbb04c09b2b8a52d86a8"]) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3f, 0x100) ioctl$TCSBRK(r3, 0x5409, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:45:05 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') socket$pptp(0x18, 0x1, 0x2) exit(0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000340)=""/208, 0xd0}], 0x1, 0x1) 03:45:05 executing program 0 (fault-call:2 fault-nth:17): perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) 03:45:05 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0xff00000000000000]}, 0x48) 03:45:05 executing program 5: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000000)={0xa, {0x100000000, 0x2, 0x6, 0xd2}}) sendfile(r1, r0, 0x0, 0x2020005) 03:45:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) [ 2822.626198] kernel msg: ebtables bug: please report to author: Wrong nr of counters [ 2822.681994] kernel msg: ebtables bug: please report to author: Wrong nr of counters [ 2822.743491] FAULT_INJECTION: forcing a failure. [ 2822.743491] name failslab, interval 1, probability 0, space 0, times 0 [ 2822.797331] CPU: 0 PID: 16400 Comm: syz-executor.0 Not tainted 5.0.0-rc8+ #3 [ 2822.804554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2822.813915] Call Trace: [ 2822.816521] dump_stack+0x172/0x1f0 [ 2822.820169] should_fail.cold+0xa/0x1b [ 2822.824064] ? retint_kernel+0x2d/0x2d [ 2822.827981] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2822.833109] ? __should_failslab+0x14/0x190 [ 2822.837450] __should_failslab+0x121/0x190 [ 2822.841706] should_failslab+0x9/0x14 03:45:05 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0xffffffff00000000]}, 0x48) [ 2822.845517] kmem_cache_alloc_trace+0x4b/0x760 [ 2822.850134] ? kasan_check_read+0x11/0x20 [ 2822.854334] sctp_add_bind_addr+0x9f/0x3a0 [ 2822.858587] sctp_copy_local_addr_list+0x385/0x530 [ 2822.863536] ? sctp_defaults_init+0xbf0/0xbf0 [ 2822.868068] ? retint_kernel+0x2d/0x2d [ 2822.871972] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 2822.877160] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2822.882705] sctp_copy_one_addr+0x5f/0x170 [ 2822.886949] ? sctp_copy_one_addr+0x5f/0x170 [ 2822.891398] sctp_bind_addr_copy+0xfc/0x2c8 [ 2822.895731] sctp_assoc_set_bind_addr_from_ep+0x168/0x1c0 [ 2822.901293] sctp_sendmsg_new_asoc+0x3bd/0xfd0 [ 2822.905900] ? mark_held_locks+0xb1/0x100 [ 2822.910058] ? sctp_autobind+0x1f0/0x1f0 [ 2822.914133] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2822.918718] ? lock_sock_nested+0x9a/0x120 [ 2822.922955] ? trace_hardirqs_on+0x67/0x230 [ 2822.927282] ? lock_sock_nested+0x9a/0x120 [ 2822.931529] ? __local_bh_enable_ip+0x15a/0x270 [ 2822.936201] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2822.941744] ? sctp_endpoint_lookup_assoc+0x17f/0x290 [ 2822.946946] sctp_sendmsg+0x1269/0x17e0 [ 2822.950937] ? sctp_id2assoc+0x2d0/0x2d0 [ 2822.955014] ? __local_bh_enable_ip+0x15a/0x270 [ 2822.959683] ? _raw_spin_unlock_bh+0x31/0x40 [ 2822.964112] ? __local_bh_enable_ip+0x15a/0x270 [ 2822.968797] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2822.973416] ? release_sock+0x158/0x1c0 [ 2822.977406] ? _raw_spin_unlock_bh+0x31/0x40 [ 2822.981818] ? release_sock+0x158/0x1c0 [ 2822.985800] inet_sendmsg+0x147/0x5d0 [ 2822.989605] ? ipip_gro_receive+0x100/0x100 [ 2822.993946] sock_sendmsg+0xdd/0x130 [ 2822.997671] ___sys_sendmsg+0x806/0x930 [ 2823.001658] ? copy_msghdr_from_user+0x430/0x430 [ 2823.006449] ? lock_downgrade+0x810/0x810 [ 2823.010604] ? kasan_check_read+0x11/0x20 [ 2823.014773] ? __fget+0x367/0x540 [ 2823.018257] ? __fget_light+0x1a9/0x230 [ 2823.022252] ? __fdget+0x1b/0x20 [ 2823.025633] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2823.031195] __sys_sendmsg+0x105/0x1d0 [ 2823.035104] ? __ia32_sys_shutdown+0x80/0x80 [ 2823.039519] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2823.045060] ? fput+0x128/0x1a0 [ 2823.048353] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2823.053129] ? do_syscall_64+0x26/0x610 [ 2823.057103] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2823.062499] ? do_syscall_64+0x26/0x610 [ 2823.066483] __x64_sys_sendmsg+0x78/0xb0 [ 2823.070550] do_syscall_64+0x103/0x610 [ 2823.074454] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2823.079646] RIP: 0033:0x457e29 03:45:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) 03:45:06 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:45:06 executing program 5: r0 = syz_open_dev$sndpcmp(&(0x7f0000000300)='/dev/snd/pcmC#D#p\x00', 0xfd, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000380)=0x4, 0x370) r1 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x400, 0x0) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000280)={0x8, 0x7}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x1) clone(0x80002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() request_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f0000000100)={'iyz'}, &(0x7f00000001c0)='\x00', 0x0) [ 2823.082845] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2823.101744] RSP: 002b:00007fcea3655c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2823.109452] RAX: ffffffffffffffda RBX: 00007fcea3655c90 RCX: 0000000000457e29 [ 2823.116724] RDX: 0000000004040040 RSI: 0000000020000400 RDI: 0000000000000004 [ 2823.123996] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2823.131262] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcea36566d4 [ 2823.138543] R13: 00000000004c4e20 R14: 00000000004d8b88 R15: 0000000000000005 03:45:06 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x2]}, 0x48) 03:45:06 executing program 0 (fault-call:2 fault-nth:18): perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) 03:45:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) [ 2823.367121] FAULT_INJECTION: forcing a failure. [ 2823.367121] name failslab, interval 1, probability 0, space 0, times 0 [ 2823.399123] CPU: 0 PID: 16425 Comm: syz-executor.0 Not tainted 5.0.0-rc8+ #3 [ 2823.406329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2823.415730] Call Trace: [ 2823.418351] dump_stack+0x172/0x1f0 [ 2823.422038] should_fail.cold+0xa/0x1b [ 2823.425931] ? zap_class+0x460/0x460 [ 2823.429655] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2823.434771] ? sctp_bind_addr_state+0x1ae/0x340 [ 2823.439457] ? find_held_lock+0x35/0x130 [ 2823.443546] __should_failslab+0x121/0x190 [ 2823.447807] should_failslab+0x9/0x14 [ 2823.451623] kmem_cache_alloc_trace+0x4b/0x760 [ 2823.456211] ? kasan_check_read+0x11/0x20 [ 2823.460412] sctp_add_bind_addr+0x9f/0x3a0 [ 2823.464675] sctp_copy_local_addr_list+0x385/0x530 [ 2823.469626] ? sctp_defaults_init+0xbf0/0xbf0 [ 2823.474142] ? _get_random_bytes+0x197/0x400 [ 2823.478556] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 2823.483749] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2823.489294] sctp_copy_one_addr+0x5f/0x170 [ 2823.493550] ? sctp_copy_one_addr+0x5f/0x170 [ 2823.497992] sctp_bind_addr_copy+0xfc/0x2c8 [ 2823.502376] sctp_assoc_set_bind_addr_from_ep+0x168/0x1c0 [ 2823.507936] sctp_sendmsg_new_asoc+0x3bd/0xfd0 [ 2823.512534] ? mark_held_locks+0xb1/0x100 [ 2823.516700] ? sctp_autobind+0x1f0/0x1f0 [ 2823.520766] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2823.525369] ? lock_sock_nested+0x9a/0x120 [ 2823.529620] ? trace_hardirqs_on+0x67/0x230 [ 2823.533965] ? lock_sock_nested+0x9a/0x120 [ 2823.538238] ? __local_bh_enable_ip+0x15a/0x270 [ 2823.542917] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2823.548480] ? sctp_endpoint_lookup_assoc+0x17f/0x290 [ 2823.553677] sctp_sendmsg+0x1269/0x17e0 [ 2823.557664] ? sctp_id2assoc+0x2d0/0x2d0 [ 2823.561754] ? __local_bh_enable_ip+0x15a/0x270 [ 2823.566434] ? _raw_spin_unlock_bh+0x31/0x40 [ 2823.570853] ? __local_bh_enable_ip+0x15a/0x270 [ 2823.575527] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2823.580161] ? release_sock+0x158/0x1c0 [ 2823.584138] ? _raw_spin_unlock_bh+0x31/0x40 [ 2823.588561] ? release_sock+0x158/0x1c0 [ 2823.592555] inet_sendmsg+0x147/0x5d0 [ 2823.596385] ? ipip_gro_receive+0x100/0x100 [ 2823.600724] sock_sendmsg+0xdd/0x130 [ 2823.604442] ___sys_sendmsg+0x806/0x930 [ 2823.608438] ? copy_msghdr_from_user+0x430/0x430 [ 2823.613192] ? lock_downgrade+0x810/0x810 [ 2823.617341] ? kasan_check_read+0x11/0x20 [ 2823.621525] ? __fget+0x367/0x540 [ 2823.624993] ? __fget_light+0x1a9/0x230 [ 2823.628986] ? __fdget+0x1b/0x20 [ 2823.632350] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2823.638006] __sys_sendmsg+0x105/0x1d0 [ 2823.641914] ? __ia32_sys_shutdown+0x80/0x80 [ 2823.646324] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2823.651867] ? fput+0x128/0x1a0 [ 2823.655145] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2823.659902] ? do_syscall_64+0x26/0x610 [ 2823.663871] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2823.669252] ? do_syscall_64+0x26/0x610 [ 2823.673228] __x64_sys_sendmsg+0x78/0xb0 [ 2823.677275] do_syscall_64+0x103/0x610 [ 2823.681163] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2823.686349] RIP: 0033:0x457e29 [ 2823.689559] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2823.708497] RSP: 002b:00007fcea3655c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2823.716205] RAX: ffffffffffffffda RBX: 00007fcea3655c90 RCX: 0000000000457e29 [ 2823.723471] RDX: 0000000004040040 RSI: 0000000020000400 RDI: 0000000000000004 [ 2823.730741] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2823.738034] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcea36566d4 [ 2823.745318] R13: 00000000004c4e20 R14: 00000000004d8b88 R15: 0000000000000005 03:45:06 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') exit(0x0) preadv(r0, &(0x7f0000000040), 0x0, 0x1) 03:45:06 executing program 5: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000d0607031dfffd946fa2830020200a0009000100041d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000040)={'mangle\x00', 0x1000, "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"}, &(0x7f0000001080)=0x1024) 03:45:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) 03:45:06 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = dup3(r0, r3, 0x80000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e21, 0x8, @loopback}}, 0x6, 0x0, 0xfc4, 0x7ff, 0x3}, &(0x7f0000000000)=0x98) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000180)={r5, @in6={{0xa, 0x4e24, 0x6, @local, 0x3f}}, 0x1000, 0x4}, &(0x7f0000000040)=0x90) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r2}, 0x68) 03:45:06 executing program 0 (fault-call:2 fault-nth:19): perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) 03:45:06 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x3]}, 0x48) [ 2823.937267] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2823.954824] FAULT_INJECTION: forcing a failure. [ 2823.954824] name failslab, interval 1, probability 0, space 0, times 0 [ 2824.007575] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2824.008329] CPU: 1 PID: 16440 Comm: syz-executor.0 Not tainted 5.0.0-rc8+ #3 [ 2824.022143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2824.031514] Call Trace: [ 2824.034120] dump_stack+0x172/0x1f0 [ 2824.037764] should_fail.cold+0xa/0x1b [ 2824.041695] ? zap_class+0x460/0x460 [ 2824.045427] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2824.050543] ? sctp_bind_addr_state+0x1ae/0x340 03:45:06 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x4]}, 0x48) 03:45:06 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={0x0, 0xd6b}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0x7}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000140)={r4, 0xc54c, 0x3, 0x101, 0x6, 0x9a, 0x9, 0x8000, {r5, @in6={{0xa, 0x4e23, 0xeba, @local, 0x5}}, 0x80000000, 0x1, 0x5, 0x7}}, &(0x7f0000000200)=0xb0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x103ff, 0x2, 0x4, 0x1000, &(0x7f0000009000/0x1000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) [ 2824.055229] ? find_held_lock+0x35/0x130 [ 2824.059311] __should_failslab+0x121/0x190 [ 2824.063560] should_failslab+0x9/0x14 [ 2824.067382] kmem_cache_alloc_trace+0x4b/0x760 [ 2824.071988] ? kasan_check_read+0x11/0x20 [ 2824.076168] sctp_add_bind_addr+0x9f/0x3a0 [ 2824.080448] sctp_copy_local_addr_list+0x385/0x530 [ 2824.085400] ? sctp_defaults_init+0xbf0/0xbf0 [ 2824.089921] ? sctp_get_af_specific+0x23/0x60 [ 2824.094438] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2824.099995] sctp_copy_one_addr+0x5f/0x170 [ 2824.104247] ? sctp_copy_one_addr+0x5f/0x170 [ 2824.108662] sctp_bind_addr_copy+0xfc/0x2c8 [ 2824.112989] sctp_assoc_set_bind_addr_from_ep+0x168/0x1c0 [ 2824.118534] sctp_sendmsg_new_asoc+0x3bd/0xfd0 [ 2824.123107] ? mark_held_locks+0xb1/0x100 [ 2824.127263] ? sctp_autobind+0x1f0/0x1f0 [ 2824.131320] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2824.135894] ? lock_sock_nested+0x9a/0x120 [ 2824.140126] ? trace_hardirqs_on+0x67/0x230 [ 2824.144465] ? lock_sock_nested+0x9a/0x120 [ 2824.148694] ? __local_bh_enable_ip+0x15a/0x270 [ 2824.153350] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2824.158919] ? sctp_endpoint_lookup_assoc+0x17f/0x290 [ 2824.164116] sctp_sendmsg+0x1269/0x17e0 [ 2824.168095] ? sctp_id2assoc+0x2d0/0x2d0 [ 2824.172145] ? __local_bh_enable_ip+0x15a/0x270 [ 2824.176809] ? _raw_spin_unlock_bh+0x31/0x40 [ 2824.181223] ? __local_bh_enable_ip+0x15a/0x270 [ 2824.185905] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2824.190489] ? release_sock+0x158/0x1c0 [ 2824.194455] ? _raw_spin_unlock_bh+0x31/0x40 [ 2824.198857] ? release_sock+0x158/0x1c0 [ 2824.202843] inet_sendmsg+0x147/0x5d0 [ 2824.206653] ? ipip_gro_receive+0x100/0x100 [ 2824.210967] sock_sendmsg+0xdd/0x130 [ 2824.214669] ___sys_sendmsg+0x806/0x930 [ 2824.218634] ? copy_msghdr_from_user+0x430/0x430 [ 2824.223397] ? lock_downgrade+0x810/0x810 [ 2824.227553] ? kasan_check_read+0x11/0x20 [ 2824.231708] ? __fget+0x367/0x540 [ 2824.235159] ? __fget_light+0x1a9/0x230 [ 2824.239130] ? __fdget+0x1b/0x20 [ 2824.242496] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2824.248052] __sys_sendmsg+0x105/0x1d0 [ 2824.251950] ? __ia32_sys_shutdown+0x80/0x80 [ 2824.256351] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2824.261906] ? fput+0x128/0x1a0 [ 2824.265192] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2824.269978] ? do_syscall_64+0x26/0x610 [ 2824.273949] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2824.279296] ? do_syscall_64+0x26/0x610 [ 2824.283272] __x64_sys_sendmsg+0x78/0xb0 [ 2824.287325] do_syscall_64+0x103/0x610 [ 2824.291203] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2824.296398] RIP: 0033:0x457e29 [ 2824.299586] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2824.318472] RSP: 002b:00007fcea3655c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2824.326173] RAX: ffffffffffffffda RBX: 00007fcea3655c90 RCX: 0000000000457e29 [ 2824.333430] RDX: 0000000004040040 RSI: 0000000020000400 RDI: 0000000000000004 [ 2824.340687] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2824.347940] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcea36566d4 03:45:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) 03:45:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x0) pipe(&(0x7f0000000300)) socket$rxrpc(0x21, 0x2, 0x2) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000240)={{0x3, 0x3}, 'port0\x00', 0x40, 0x800, 0x7, 0x8000000, 0x0, 0x4, 0x6, 0x0, 0x6, 0x6}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x7, 0x2}, 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000100)={0x0, r2+30000000}, 0x0) [ 2824.355197] R13: 00000000004c4e20 R14: 00000000004d8b88 R15: 0000000000000005 03:45:07 executing program 0 (fault-call:2 fault-nth:20): perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) [ 2824.488103] net_ratelimit: 25 callbacks suppressed [ 2824.488112] protocol 88fb is buggy, dev hsr_slave_0 [ 2824.498219] protocol 88fb is buggy, dev hsr_slave_1 03:45:07 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x5]}, 0x48) [ 2824.633934] FAULT_INJECTION: forcing a failure. [ 2824.633934] name failslab, interval 1, probability 0, space 0, times 0 [ 2824.647700] CPU: 0 PID: 16467 Comm: syz-executor.0 Not tainted 5.0.0-rc8+ #3 [ 2824.654914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2824.664276] Call Trace: [ 2824.666869] dump_stack+0x172/0x1f0 [ 2824.670532] should_fail.cold+0xa/0x1b [ 2824.674436] ? zap_class+0x460/0x460 [ 2824.678138] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2824.683228] ? sctp_bind_addr_state+0x1ae/0x340 [ 2824.687886] ? find_held_lock+0x35/0x130 [ 2824.691944] __should_failslab+0x121/0x190 [ 2824.696173] should_failslab+0x9/0x14 [ 2824.699962] kmem_cache_alloc_trace+0x4b/0x760 [ 2824.704538] ? kasan_check_read+0x11/0x20 [ 2824.708697] sctp_add_bind_addr+0x9f/0x3a0 [ 2824.712928] sctp_copy_local_addr_list+0x385/0x530 [ 2824.717849] ? sctp_defaults_init+0xbf0/0xbf0 [ 2824.722338] ? _get_random_bytes+0x197/0x400 [ 2824.726744] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 2824.732005] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2824.737535] sctp_copy_one_addr+0x5f/0x170 [ 2824.741760] ? sctp_copy_one_addr+0x5f/0x170 [ 2824.746168] sctp_bind_addr_copy+0xfc/0x2c8 [ 2824.750502] sctp_assoc_set_bind_addr_from_ep+0x168/0x1c0 [ 2824.756031] sctp_sendmsg_new_asoc+0x3bd/0xfd0 [ 2824.760605] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2824.765349] ? sctp_autobind+0x1f0/0x1f0 [ 2824.769421] ? retint_kernel+0x2d/0x2d [ 2824.773299] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2824.778819] ? sctp_endpoint_lookup_assoc+0x17f/0x290 [ 2824.783998] sctp_sendmsg+0x1269/0x17e0 [ 2824.787964] ? sctp_id2assoc+0x2d0/0x2d0 [ 2824.792030] ? __local_bh_enable_ip+0x15a/0x270 [ 2824.796686] ? _raw_spin_unlock_bh+0x31/0x40 [ 2824.801099] ? __local_bh_enable_ip+0x15a/0x270 [ 2824.805785] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2824.810396] ? release_sock+0x158/0x1c0 [ 2824.814400] ? _raw_spin_unlock_bh+0x31/0x40 [ 2824.818823] ? release_sock+0x158/0x1c0 [ 2824.822814] inet_sendmsg+0x147/0x5d0 [ 2824.826631] ? ipip_gro_receive+0x100/0x100 [ 2824.830983] sock_sendmsg+0xdd/0x130 03:45:07 executing program 3: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000340)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="100128bd7000fcdbdf250100000008000100000000000c0008000d9d0000000000000c0002003f0000000000000008000100000000000c00030006000000000000002037c1be5738e5814f3ac3eb6735030e4afe1421c5015d043c8c18ac20c460ee0f8461"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x800) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000580)={r0, &(0x7f0000000480)="5718f40a34322ce440a5176508a0b5eeadacc61155c303e3780d141db13363359acd4291", &(0x7f00000004c0)=""/192}, 0x18) r2 = msgget$private(0x0, 0x40) msgctl$IPC_RMID(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @remote}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={r3, 0x800}, 0x8) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') preadv(r4, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/208, 0xd0}], 0x1, 0x0) 03:45:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) 03:45:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) clone(0x2102001fbe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_ifreq(r1, 0x80000000008b17, &(0x7f0000000040)={'meaj\'\xff\x0f\x00\x1d2:\x01\xd2\xdeI\x00', @ifru_flags}) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x4, 0x40) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x2) 03:45:07 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) unlink(&(0x7f0000000000)='./file0\x00') getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=@known='system.sockprotoname\x00', &(0x7f0000000100)='/dev/kvm\x00', 0x9, 0x3) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:45:07 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x6]}, 0x48) [ 2824.834726] ___sys_sendmsg+0x806/0x930 [ 2824.838731] ? copy_msghdr_from_user+0x430/0x430 [ 2824.843507] ? lock_downgrade+0x810/0x810 [ 2824.847675] ? kasan_check_read+0x11/0x20 [ 2824.851840] ? __fget+0x367/0x540 [ 2824.855343] ? __fget_light+0x1a9/0x230 [ 2824.859349] ? __fdget+0x1b/0x20 [ 2824.862746] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2824.868302] __sys_sendmsg+0x105/0x1d0 [ 2824.872205] ? __ia32_sys_shutdown+0x80/0x80 [ 2824.876629] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2824.882175] ? fput+0x128/0x1a0 [ 2824.885479] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2824.890268] ? do_syscall_64+0x26/0x610 [ 2824.894254] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2824.899635] ? do_syscall_64+0x26/0x610 [ 2824.903636] __x64_sys_sendmsg+0x78/0xb0 [ 2824.907729] do_syscall_64+0x103/0x610 [ 2824.911666] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2824.916883] RIP: 0033:0x457e29 03:45:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}}, 0x2) [ 2824.920100] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2824.939011] RSP: 002b:00007fcea3655c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2824.946732] RAX: ffffffffffffffda RBX: 00007fcea3655c90 RCX: 0000000000457e29 [ 2824.954010] RDX: 0000000004040040 RSI: 0000000020000400 RDI: 0000000000000004 [ 2824.961305] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2824.968579] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcea36566d4 [ 2824.975871] R13: 00000000004c4e20 R14: 00000000004d8b88 R15: 0000000000000005 03:45:07 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) unshare(0x24020400) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BLKBSZSET(r0, 0x401870cb, 0x0) 03:45:07 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x7]}, 0x48) 03:45:07 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:45:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}}, 0x3) 03:45:08 executing program 0 (fault-call:2 fault-nth:21): perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) 03:45:08 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') exit(0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000180)=""/208, 0x100ba}], 0x172, 0x1) [ 2825.208118] protocol 88fb is buggy, dev hsr_slave_0 [ 2825.208150] protocol 88fb is buggy, dev hsr_slave_1 [ 2825.213273] protocol 88fb is buggy, dev hsr_slave_1 [ 2825.218371] protocol 88fb is buggy, dev hsr_slave_0 [ 2825.223404] protocol 88fb is buggy, dev hsr_slave_0 [ 2825.228439] protocol 88fb is buggy, dev hsr_slave_1 [ 2825.233460] protocol 88fb is buggy, dev hsr_slave_1 [ 2825.288154] protocol 88fb is buggy, dev hsr_slave_0 [ 2825.316946] FAULT_INJECTION: forcing a failure. [ 2825.316946] name failslab, interval 1, probability 0, space 0, times 0 [ 2825.333244] CPU: 0 PID: 16508 Comm: syz-executor.0 Not tainted 5.0.0-rc8+ #3 [ 2825.340451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2825.349806] Call Trace: [ 2825.352439] dump_stack+0x172/0x1f0 [ 2825.356105] should_fail.cold+0xa/0x1b [ 2825.360009] ? zap_class+0x460/0x460 03:45:08 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0xa]}, 0x48) 03:45:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}}, 0x8) [ 2825.363750] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2825.368862] ? sctp_bind_addr_state+0x1ae/0x340 [ 2825.373543] ? find_held_lock+0x35/0x130 [ 2825.377626] __should_failslab+0x121/0x190 [ 2825.381875] should_failslab+0x9/0x14 [ 2825.385687] kmem_cache_alloc_trace+0x4b/0x760 [ 2825.390290] ? kasan_check_read+0x11/0x20 [ 2825.394472] sctp_add_bind_addr+0x9f/0x3a0 [ 2825.398731] sctp_copy_local_addr_list+0x385/0x530 [ 2825.403684] ? sctp_defaults_init+0xbf0/0xbf0 [ 2825.408200] ? _get_random_bytes+0x197/0x400 [ 2825.412626] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 2825.417869] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2825.423444] sctp_copy_one_addr+0x5f/0x170 [ 2825.427689] ? sctp_copy_one_addr+0x5f/0x170 [ 2825.432130] sctp_bind_addr_copy+0xfc/0x2c8 [ 2825.436476] sctp_assoc_set_bind_addr_from_ep+0x168/0x1c0 [ 2825.442024] sctp_sendmsg_new_asoc+0x3bd/0xfd0 [ 2825.446623] ? mark_held_locks+0xb1/0x100 [ 2825.450790] ? sctp_autobind+0x1f0/0x1f0 [ 2825.454864] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2825.459451] ? lock_sock_nested+0x9a/0x120 [ 2825.463688] ? trace_hardirqs_on+0x67/0x230 [ 2825.468023] ? lock_sock_nested+0x9a/0x120 [ 2825.472276] ? __local_bh_enable_ip+0x15a/0x270 [ 2825.476953] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2825.482497] ? sctp_endpoint_lookup_assoc+0x17f/0x290 [ 2825.487694] sctp_sendmsg+0x1269/0x17e0 [ 2825.491684] ? sctp_id2assoc+0x2d0/0x2d0 [ 2825.495748] ? __local_bh_enable_ip+0x15a/0x270 [ 2825.500476] ? _raw_spin_unlock_bh+0x31/0x40 [ 2825.504892] ? __local_bh_enable_ip+0x15a/0x270 [ 2825.509581] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2825.514174] ? release_sock+0x158/0x1c0 [ 2825.518158] ? _raw_spin_unlock_bh+0x31/0x40 [ 2825.522571] ? release_sock+0x158/0x1c0 [ 2825.526560] inet_sendmsg+0x147/0x5d0 [ 2825.530373] ? ipip_gro_receive+0x100/0x100 [ 2825.534708] sock_sendmsg+0xdd/0x130 [ 2825.538433] ___sys_sendmsg+0x806/0x930 [ 2825.542425] ? copy_msghdr_from_user+0x430/0x430 [ 2825.547191] ? lock_downgrade+0x810/0x810 [ 2825.551370] ? kasan_check_read+0x11/0x20 [ 2825.555538] ? __fget+0x367/0x540 [ 2825.559017] ? __fget_light+0x1a9/0x230 [ 2825.562995] ? __fdget+0x1b/0x20 [ 2825.566371] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2825.571930] __sys_sendmsg+0x105/0x1d0 [ 2825.575824] ? __ia32_sys_shutdown+0x80/0x80 [ 2825.580258] ? __x64_sys_sendmsg+0x11/0xb0 [ 2825.584506] __x64_sys_sendmsg+0x78/0xb0 [ 2825.588575] do_syscall_64+0x103/0x610 [ 2825.592471] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2825.597660] RIP: 0033:0x457e29 03:45:08 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x40000, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x0}, {}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r3, 0x40086424, &(0x7f0000000100)={r4, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) [ 2825.600855] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2825.619761] RSP: 002b:00007fcea3655c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2825.627494] RAX: ffffffffffffffda RBX: 00007fcea3655c90 RCX: 0000000000457e29 [ 2825.634962] RDX: 0000000004040040 RSI: 0000000020000400 RDI: 0000000000000004 [ 2825.642229] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2825.649512] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcea36566d4 [ 2825.656784] R13: 00000000004c4e20 R14: 00000000004d8b88 R15: 0000000000000005 03:45:08 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0xf]}, 0x48) 03:45:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}}, 0xf) 03:45:08 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000d0fff5)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000003ff8)) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, &(0x7f0000000140)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) write$P9_RLINK(r1, &(0x7f0000000100)={0x7, 0x47, 0x1}, 0x7) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x200000, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e22, @remote}, 0xffffffcc) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000024c0), 0x100032, &(0x7f0000000080)=ANY=[]) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c9, &(0x7f0000000240)) 03:45:08 executing program 0 (fault-call:2 fault-nth:22): perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) 03:45:08 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="df"]) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:45:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}}, 0x10) 03:45:08 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x10]}, 0x48) 03:45:08 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x3, &(0x7f00000000c0)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0x27}}, &(0x7f00000002c0)='syzkaller\x00', 0x9, 0x4ae, &(0x7f0000000340)=""/207}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000000)={0x0, @speck128}) 03:45:09 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') exit(0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x3}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000000c0)={r1, 0x7, 0x13dd2970}, 0x8) 03:45:09 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) 03:45:09 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000000)=ANY=[@ANYBLOB="3ab377c802ec337ad70d9f37cea5016cd91497b70e9d190dfa94afcd61004cd7573bab1b970b09d8174edc7e1c2fd894e9357a9444dba94e0b6ee49b47292c09d0b1ffad2b86a17be807df7cb11ce76825166b9053adafa1a416766e"]) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:45:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}}, 0xf0) 03:45:09 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x2e]}, 0x48) 03:45:09 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000540)=""/11, 0x485) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109) dup2(r0, r1) execve(&(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000000)={0x0, 0xfab, 0x2, 0x18, &(0x7f0000ffe000/0x2000)=nil, 0x8635}) 03:45:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}}, 0x300) 03:45:09 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_dev$audion(&(0x7f0000000440)='/dev/audio#\x00', 0x4, 0x200000) connect$l2tp(r1, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x3, 0x1, 0x2}}, 0x26) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) syz_open_dev$dmmidi(&(0x7f0000000280)='/dev/dmmidi#\x00', 0x3, 0x20400) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x90000, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f00000001c0)="f0201f2c34cb57e040b625abceda85d3e53a88d1d6c98b11f0118b90574a75af0fe42e059ccc7d3928c2eca2f7d6e9fe4702a1013676c1bdda5c7509042e54cad42371f99ab9c21f105cbcdbe2968d0fabc8dc512e7524cb040ef933300885f1e56d826e8c49c2e8373d32613081ef5c2b567fa529784452d27294840796a1083486d70057b9c7c1a7c2a21e4f1495dc6c573de424e256640944cf", 0x9b, r3}, 0x68) r6 = request_key(&(0x7f0000000040)='ceph\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)='cgroup@securitywlan0eth0(\x00', 0xfffffffffffffffd) r7 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$reject(0x13, r6, 0x10000, 0x1f1d, r7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) 03:45:09 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x3c]}, 0x48) 03:45:09 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x40, 0x8) r2 = accept$ax25(r1, &(0x7f0000000080)={{0x3, @null}, [@null, @bcast, @rose, @netrom, @bcast, @remote, @rose]}, &(0x7f0000000100)=0x48) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) fcntl$setpipe(r2, 0x407, 0x8) socketpair(0x22, 0x2, 0x11, &(0x7f0000000180)) 03:45:09 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0x2, 0x0, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) [ 2826.475158] delete_channel: no stack [ 2826.492896] delete_channel: no stack 03:45:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}}, 0xe32) 03:45:09 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0x3, 0x0, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) 03:45:09 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x3d]}, 0x48) 03:45:09 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000140)) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000300)={{0x7, 0x74}, 'port0\x00', 0x1, 0x0, 0x7ff, 0x3, 0x3, 0x75, 0x8, 0x0, 0x6, 0x1000}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0xfffffffffffffffc, &(0x7f0000000480)=ANY=[@ANYRESDEC=r1, @ANYPTR, @ANYRESHEX, @ANYRESHEX=r1, @ANYRES32=r1, @ANYBLOB="5e6b6c0ada52ccb4230133519b228fa17fdfdc5232ce7186209af3653dc2b5cbedde35790558dcd7a840b4a7d0f4766fbbd9a66f6c7e46262145ea9c76b628947831c9816a3a2bf278bb0a252401c69f32e13bd44fa64289f69c11b43e7ec9b00de5f9587e2e09487e45fb923a29d1b43c993b5d213c771bf1e50adbd36004a4f031e52a487e1b4473e2268f563c6c0ae87e81110b8a9d4d6f21317dbe323db59255a01826da774f1492574644f683ee9f865a828055f5f87d0c00efd73cf67276f0d4ae9d1c46cfcfd222a9bf2faefe46c7336c69f1bc", @ANYBLOB]) r2 = fcntl$dupfd(r0, 0x0, r0) getsockopt$bt_hci(r2, 0x0, 0x3, &(0x7f0000000280)=""/106, &(0x7f0000000240)=0x6a) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000040)=0x6, 0x4) fcntl$setstatus(r2, 0x4, 0x3ffd) syz_open_dev$usb(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x5, 0x80) 03:45:09 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d2"]) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:45:09 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) unshare(0x20020000) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000380)='ramfs\x00', 0x0, 0x0) poll(0x0, 0x0, 0x400007f) rename(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file1\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') read(r1, &(0x7f0000000080)=""/125, 0x7d) exit(0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000340)=""/208, 0xd0}], 0x1, 0x1) 03:45:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}}, 0xec0) 03:45:10 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0x4, 0x0, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) 03:45:10 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x48]}, 0x48) 03:45:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}}, 0xf00) 03:45:10 executing program 2: inotify_init1(0x800) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB]) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:45:10 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000440)={@loopback}, 0x14) r0 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r2 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x401, 0x0) getsockname$packet(0xffffffffffffff9c, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@remote}}, &(0x7f0000000180)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000480)={{{@in=@broadcast, @in6=@local, 0x4e21, 0x8, 0x4e22, 0x2, 0x0, 0x80, 0x0, 0x7f, r3, r4}, {0x4, 0x200, 0x5, 0x5, 0x8, 0x4, 0x1, 0x6}, {0x8, 0x1, 0x3, 0x5}, 0x8, 0x6e6bbf, 0x1, 0x1, 0x2, 0x1}, {{@in=@multicast1, 0x4d4, 0x6c}, 0xa, @in6=@remote, 0x3500, 0x0, 0x1, 0x97, 0x100000000, 0x2, 0x5}}, 0xe8) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r1}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00\x17\x000\xdf\xaa_(\x8a\x8c\x9a\x8e\x00\x00\x00\x01\x00'}}) 03:45:10 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0x5, 0x0, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) 03:45:10 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x4c]}, 0x48) 03:45:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}}, 0x320e) 03:45:10 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB]) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:45:10 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x61]}, 0x48) 03:45:10 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') exit(0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000340)=""/208, 0x8}], 0x1, 0x1) 03:45:10 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000380)={0x0}, &(0x7f00000003c0)=0xc) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000400)=0x0) kcmp(r4, r5, 0x7, r3, r2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x20000400000037, 0x0, 0xffffffffffffffff}, 0x2c) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000440)='vmnet1\x00') r6 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x0, 0xc00) ioctl$KVM_SET_CPUID(r6, 0x4008ae8a, &(0x7f0000000340)={0x2, 0x0, [{0x80000019, 0x4, 0x8001, 0x7f, 0x1}, {0xc000001f, 0x99, 0x4, 0x9, 0xffff}]}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)={&(0x7f00000000c0)='./file0\x00'}, 0x10) setsockopt$inet6_buf(r1, 0x29, 0x15, &(0x7f00000002c0)="a28e3dd184203ebb9f4c21aa5de0c6ca597ab3a1c11ed3b41c1e5c1b338dae7758f4e5ee35e8d53a0677665bd2dd74b9e7a88b3e2ec17865c23c40b10884d0f74a743135a18428ad3070523f1879d6bfa8af462e4199d759f9aa6855a69f264a64cf25cc52620e6e135c11886ee33d8a21fa2b3f0f015fbe5147f0ae", 0x7c) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000000200)={{0x9}, 'port0\x00', 0x1, 0x0, 0x63c8, 0x7, 0x0, 0x8, 0xfffffffffffffc01, 0x0, 0x6, 0x2}) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) 03:45:10 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0x6, 0x0, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) 03:45:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}}, 0x3f00) 03:45:10 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x63]}, 0x48) 03:45:10 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fcntl$getownex(r0, 0x10, &(0x7f0000000500)={0x0, 0x0}) ptrace$getsig(0x4202, r1, 0x10001, &(0x7f0000000540)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000000)=ANY=[@ANYBLOB="f6ebd6d6f744606bec5d000000000000000000000000000080"]) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r3}, 0x68) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x100f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000440)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r5, 0x1}}, 0x18) 03:45:11 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x68]}, 0x48) 03:45:11 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0x7, 0x0, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) 03:45:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}}, 0xc00e) 03:45:11 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000400)={0x4, 0x1, 0x4}) 03:45:11 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x204480, 0x0) ioctl$TIOCNOTTY(r2, 0x5422) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:45:11 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x6c]}, 0x48) 03:45:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}}, 0xf000) 03:45:11 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0x8, 0x0, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) 03:45:11 executing program 3: exit(0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000340)=""/208, 0xd0}], 0x1, 0x1) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000080)={0x5, 0x10000, 0x5, 0x7fff, 0x6}) 03:45:11 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x71]}, 0x48) 03:45:11 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) symlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x104, @dev, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) recvmmsg(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1, 0x0) 03:45:11 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x40800, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x1f, 0x6, 0x6b0, 0x368, 0x480, 0x278, 0x118, 0x368, 0x5e0, 0x5e0, 0x5e0, 0x5e0, 0x5e0, 0x6, &(0x7f0000000240), {[{{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hl={0x28, 'hl\x00', 0x0, {0x3, 0x401}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x2}}, @inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x4}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@dev={0xac, 0x14, 0x14, 0x21}, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x13, 0x18, 0x3}}}, {{@ipv6={@rand_addr="2341d0fc7a54e253bae7f5f8e26b76d3", @ipv4={[], [], @loopback}, [0xffffffff, 0xffffff00, 0xffffffff, 0xffffffff], [0xff000000, 0xffffffff, 0xffffffff, 0xffffffff], 'bcsh0\x00', 'bond_slave_0\x00', {0xff}, {0xff}, 0x3f, 0xfc, 0x4, 0x20}, 0x0, 0xc8, 0xf0}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0x9}}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x2}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x7, 0x5}}}, {{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}, @common=@eui64={0x28, 'eui64\x00'}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@loopback, @ipv6=@loopback, 0x3a, 0x36, 0x100000000}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x710) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f00000000c0)=ANY=[@ANYBLOB="61d6e9a54e1ee22eab08f11cc16aba7d00000000"]) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000100)) getpeername$netrom(r0, &(0x7f0000000180)={{0x3, @netrom}, [@remote, @rose, @remote, @default, @rose, @null, @netrom, @netrom]}, &(0x7f0000000200)=0x48) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x800, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e24, 0x6b33, @rand_addr="5d3ecf1367e447a8056058de40b6c83d", 0x4}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r2}, 0x68) 03:45:11 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x73]}, 0x48) 03:45:11 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0x9, 0x0, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) 03:45:11 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000680)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x104, 0x1, {{}, {0x0}, 0x0}}], 0x48}, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x7, 0x240) openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) socket$rds(0x15, 0x5, 0x0) 03:45:11 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB]) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:45:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}}, 0x34000) 03:45:12 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x74]}, 0x48) 03:45:12 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x9, 0x8, 0x200209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x2, &(0x7f0000000100)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x2c) r1 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x101, 0x20000) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000200)="b82b2f9758eae72094db3a22a828ae69b30197ed067296d5e18a24d98d826d6e031a8b3eb75b57a2e618420cb32a064f263c8369b769de584d17fa1f388cf504a6e3b490353f27249aaca2b1b2e189936b9a3cad669d3ece0aa359d92c976df4ab75fc65aa2ac1078a216303ef268e847d0234869d0ce0f40cb7c32bd919c17ae971c281b90ab61d4033deab136bcdc7aad905f019bbc3cda53f57da9b1494e898c3adfa629a1262a008d711d8d7046718db522cd02c1dad9f8e6e03914185e54b9841c3d96aaa615519cde6804093a8c0e2c67db93dfa1db0eecc773c3f3de2a651e60fcfb4dbd5d264f208d6392367d15c1a009d67f01eecf23b6ca523231ea387c50c1d138e639ea2bc43bd7c56822cde7694667eb63982a2494e7eb9b01d4cf18cb9e831b1a5d7414975207e30a6ddd41734db1acd2332ad934484c0dd21115ad769f56202bda455a8df97ecd416e6822b2f8fa32ef2069e598e29848375fcd6c9c5c336fa5af72b00dcd307f9e9f7faee3bc9eb78dcb0d6866c6e16790fd03b4437d753c0c7957697992ef86ea0b0dbcb1efbf081ee59e5bd512af3ebb888eacc8acd128c452c896a54c4a7f4507b686bdeb4be2266b540824f10c9d700d4e9ea894b58604e891afba3af8087d3ec76135da56dd3fc73dbf3be80a999bd39eb59a3e390b9e5406f2b32cd9c7b1fe1d112158f16447ee1cfef15326ded003e5b9e084cc6e641d150375b482d8ff6950de67c15bd4ad37c6803a0bc32af8bd151a3ce9f4e47cfcbf26723308e818e497418b4558f429d321ddc42e77fcbbcc993fd4ef0588297b16ee265298aea8e2775c7a4c91766cd20ee67bde174798c421519831977c4c2ce41c102b7d8ed377694c4d038590bdce41c048e5e4076fc038238a597208d5ff4f2e33a977466a04c53a5fca1b5ac0ddf8f95cf2624fd1584646b015e23141b9afb966f33b4865752c59832270be096e9856297ec329ba0c578cd150976c6ac87184471769e4e5403097087952b4c6d064d45d5bc70fb7044aff7cd685b8b132f5186072a4e7143963edb725fa65e5e24974ac747628514e38ecb75b0a279e486b8e1c7ec37d406dc90876f356a7485cf4054c99dce12db8ed7d1bfe6c01ea0ed494f83e050db6f6e98ce5d0b996bf8bd9769a3636d7127e03083e769306515022426b27b0be79d18e3939ab5e1776e89ecdb88894da88d15ed82e4b7577a056fdd31243937f7a56ab8a98002d0b14764188f40bc68f53a28034dac01e9ffe21e2e91250c8fe753d01bb714c06543bf0c883767fb759677fa24bd9b5ea3735062886f2dbcfa3ae397b094fba58c161bbaf48ac0f4b629822d1b8a5b682265d8c2ea62359ee51b929ab3b49601815277830e85b387efae1e90474047db55f2e2e49de774cd2b11ab4b10cef3bde949e4f9eca3b1fa1506f92e63c8a984ebec8ae78fec0e6e3cb2007c4e6c8034d2082e250808f291c337a8f0c619d2c796b8fea0cbe3034924a1ff51a235762cbabc917be008cf2d7a0d145bc73bb2edc47fac68e9ca3740df8d52f9f24513feaeaf46e4f13a5920690c25f8b7ecdf619c2248bfc14823b618433e9afb6a98a1012bf66d737eed57e9c3c9f60e8649cf4a9f7c39cb3bc0ce3df63fae40b8a33b44873100fa7079a5d84cb1e6cd69a86d42fcf52eefed61f1e503beedc2c886b2c571933fca4550a235867cf9b133ae73694fe45c7bf74198e1eea016f1ebc2b574ff4af4c778c17614e11f15d3584bb78ee0476966481c27ee8ffb723544e2fd8763d2717a6d0d98cb419610b7112d16d205e4e08f5cd666806d59bfc695f0b46482d6104a27d8400adc77794a6475f6fb7f90466a7a7e91df183ab2614eaffe1404bf4be5a0a0744494e6ae49709dd1b8cdebe302e8321e9ebda45337399b584b23a443b2b01199c5f370e1c568f5b5779335ffc6b92690f470e8b580262249d522f289138ae5f1c8f3d2156bbb5058c0a1183fbcf65f3d33583161c56b92e23b425d14a36f9e2e4065d66f312821d3a059895627adec858c76659479681f89e4b186e1097876ae9a7218ab70a67fde2ccae17171ee7e8899daf135a232367f24b0b3fcecbbb3aa8d1c16a3649eedacb4571d7886ec85505e68b23acce719b0fb4eeccfa1cd4491bd65891f30d1a28670d8c55ae0a72907d3aed946a4b3b7b92cedbfd96b4f508d90039b744921fe121a3d44c0737fc6bd5c9d762a2de165f74972029ecc1d026d3ffea882f2a92a05f1f6e85c32596ecb85f0e0f67d3c2d871b9dc6d887b4e3482598eb081be0bd8645d60b342fc11f4d4cc670be4e459dc8bda5b83e07b84aeac79d60aecf52edb802d4c2be6c17d40993c745744ae2e70a15521df9488c24d94b48b3f89d77585661e7ab46dedbb07dbb935fc9b54426d082e73e7a9080cd5591b16f1c8159c9bbac2d70482a2d2e8ff2d80d14150848810a223854ef5f46674b62d1ffbceb01801ea1ea7f38ad8af1a0cdca575b07d93233e55817e900915d9c0f4f7fa474555cadf07ddbbd02be29957c534be8b78368f704188f9f314a5e8e50a88a7a53262008114a3bd0ade8327b301a8d600cd7731264310b3834f6db9f7bb249837899f3d790dc68e7e945f0fc3b70dec6d4a6b268c36762ca40f2390d1b009808aa53ff8d007d56345d1a64b67e58b29e0b9522091be7555b08022a29c340ba22c43c98474eec23b8854a2a020150c2fd7f5001bcc120a75f0d8b189e79768fe4e8b3a0d8003620e27babc396f09beb3238d0a47a062a5df7f07576702c742432abf99e63b8e60534b710c2c57a67ef42a3a39edd9fb684d30f1ff682c4ed79cf666109232362f54b4f9c79c07dc4966b4ece3dc37bb58eefd6dbca56773dfc807ddb7a8cbc3b7fc4d5861dd401a3c9e8c3fd390d34d2875333b1589cad27c3f26895b033d876897e1eb9e3397f864bbdb0d24ad1bc0e37f68357754f92d47e2b4eb98bcb30ddb7f8be84544451b67e319c299542c4607d362b7a0356865ba1af695b178a2e1d480af347c6e8e662a54bbf6480ed4dd9e9a685ebaa6751f3a1d49c1eaf604edb5ad522c55ec79fee6d9c87bb850b4aecb841bbf38929aa84426b278442f8a51e5301cdd910097e70f4cb1270cf3d9fd8bdd4c5c3d15c82f8b6cbefbf157b853a5a1e173ec13de0eac369cf73b7441cf6edbe7ea1d860262937422f5ba573a05e229ba719b2bec839385bb771765b401dab826f28e8c17475610ec4a530246ec294699f54975db640f240a74d5e61cb37ccff922b18cf431d2522b17faa667e7dfcb482c2a331aac13dcc3be9a0d36b2d66e8c48605460a7f4237bf31f1ebbb3b46e48175f84319e92f860581ec712347c7b88a1c216393d15bf386f9d786c0a01d80f554107fa9d2435833d1521ca2bdbd795452d6169071dcf871e06c913888aa968eb867db81de54aeab103114915a148fccfd64d97ae971e6357b9316e7b3d3a186abefc59a884a1712d9ed055f07e893f407e62c0917789e1e12fdcfbbf60d1aef29794fb43596c16112c83162db9662204167847d9b0d87a668bb05313faf7308a9a3d9b0e826b6933118679347bd2f26c0b72b35571d210f574a779160ff262e33bfd95c5fa799de681f364fccb985df16c4c3d2da739d3a45b01648d06b831054f192363360c8c5505d4a1c02500cd47845671f2491a42e440dc3366178b5853e47820aa1ea9005fcf56da14a2b1dc04bcb6f801669ac617f0ea9aca30c9d3ea8f022075cb91ff1bf060c5847f451324ef1bda76dc4aceee3052b932c3cdc33388c559cdb2e8dcbbcb129a06f7f2eee0407f9af0009a26736db61f24952d3132041b690f81a0e10cabe577665e9ff1c8a0176203b38b47229641b22a812dcdbbaefcc8faf6238039f004aa9a49c93069a91cb43560933e01172160dbdb1b8287f090772ea3795432b7405f2ea816a6691d34e5ef3544d3bd529bd85e6498a0837c9369b29233091df94e94f4f35c5e9ff8f41d2132b9758f4e3a570a9ebd1c3a053a5ad95444211f28acc0d368eea25e8b518bb6d7590246bc3fda83f9df72586370ea1577f4815a59f4ee0e1e4e8dd6d00bbf86bb0ae363620642f36b4cb7157a982b0735710fabfe1dae079a39ec8567734402c7e6a9e9b26848955fb7613d57f9b7fe53a00958eb67058f9140162387f96d5df12eebfbca76d65e75400a3e74821e3df860e2454a7fea9ba01dcef3484d587ebeba007e8507ef894e5de532c09ab4864936b86c54607d9e021672fb1d17f3e6ba8d319703038d3543b2b4b6d7513a99704b44311250470224c7db68d5983f0e4d16d11d6425bb8c68c081656576dd7a90a662728da89c56e793d91ef64d34d14c842428fae50df5d6924ef634f437768d58caa20264681070c0c122b25d041bb1deaabccf7bb0cbca99694c9c26500e12409c13cd25745656fc4b8ddb26c66be788fa05f1c31aee007121c9c475c1b9f058f17566c6f30e9bb93e1361a7c5c23119256aad629aa4bfcb3f3b9e8ad67a0f544bafbe54287da62cfee593d9ebf10896944a352edd2d1ae993faabb8a38bf7018eab42949b79004144c6f56c9384c8be88e32fd54a2b5573f85e0578c31400adc600ef4a9c6ece5182c45eab1190d10814e8bf1d93315bc55a0bb066e5b6df87390ca99d0a852822a2f53662514b3396ceb1f72184dc3f5609ef843e97c0bf2e137d02eb9c0a2c5a99217cd77a80f5d7d908c44fd31d84b55f881bcf382b04dcbe142d958f57cf070bf802f929a809cb59d1d37330333bf348b1c3298bb785160161fd1eaa58d27102867172058552f5fdeebfa583d8ef077fb81134e958aef0a6e34496c80e4a5f111abde197047375d84fbfbdd191bba7e3335dbc811a1662284e077e35f3936219ca8d1a31bdd3019b07ef98e8125d187562567def63f599f0ee4f133ceb6ba8c073f65b3f6e86ea64e0a18587f6b5b756bf5f1073c8f5d86a86f0cddcd45541f96fc1498b8b0aba97886937effc162f9eeace06a96540da60f05fc4ad247171f8d1f52dc4d6e5bb82f3838feb8fd522611777549049bc25ec0931e1bd24fa0e49522cdcad568acfac9884e264da68019d59cc316dc3c7ae342d6931dde533f7b06c901fa5e2a84663b127bacac31a73cdd3493d9299f35e0c7c321a85550b075c1e49f237c8ce56237587b8ab031953d6780d4eeca63bb5788b975c0c7b7cb8267605561625ecc31991d8529caea09945461ef558245d4e17eaa427de42527cdaa59061c842f8b12ef7c9b84a009d0caea5e0dd2853fe6f25683d53ef3f0e98a640892ce9d6ecff9ff2b16a013d5c8d7284e9c8153fb7786fcbb7a49423bff3dac86714e2a4e21b3317e99b729caf847d97faa7c39aef565a45ec81a58619151522b4aa07b20bd524962f2ce1c81e156c949aa8b9bbd86456c5881f08fbc119e956840ad9690835191bde8c0d1298f25c4ecaeff0adf450c08be32141233bead5ec04ddc23ecbdc96f33b0c6339aa8df370d375c67579d1430d5e323ff2f5bd7904359a78c630b20ff3adc6f6c4ab04f6e05ce1c2f6f6d1d3266113c2c75da285534f87dfe27e04be3ccb6a698130cc4032353d811af29ae7473757aa6ba5ac81584f38ad51ffb71feb5de46b0a45ab3e9dcf1c195d590a232c1664112c81af931027f6627b59ec5de50db13cce468e50c785627588c783d2e49989784b9c6da8207680cc88a58fb81f8999364fcba3372874e83ef9171a594a861f9f15fec94efab23c55a6a") ioctl$VIDIOC_G_AUDOUT(r0, 0x80345631, &(0x7f0000000000)) bpf$MAP_CREATE(0x2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, 0x2c) 03:45:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}}, 0x400300) 03:45:12 executing program 3: fcntl$getown(0xffffffffffffffff, 0x9) r0 = getpgid(0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2000, 0x80) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x8) r2 = syz_open_procfs(r0, &(0x7f0000000000)='net/psched\x00') write$selinux_load(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="8cff7cf9080000005345204c344a4acc39440760362881aad90cd6d4cf4e8854ce933684ee18a61482c398914c0bae73a89d7450f0a7d7c3ade5039e728a1da756ff010003b4d880b3342919c200000000000000000000"], 0x57) exit(0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000014c0)={'vcan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x1f, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="46f30602ffffffffadf15000fcffffff850000000d0000001800001e070000000000000009080000850000005a000000"], &(0x7f0000000100)='GPL\x00', 0x8, 0x1000, &(0x7f0000000440)=""/4096, 0x41f00, 0x1, [], r3, 0xd}, 0x48) ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, 0x100, 0x3, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x3d}) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000340)=""/208, 0xd0}], 0x1000000000000222, 0x1) 03:45:12 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000140)=ANY=[@ANYBLOB="61df305380b7defb55e68a5bc1a3f4f2260c02b12fb4c10a77c35df0523b62887680367293444f241ddcfbc9d1d80419e7a462cd35fa010040c29f520befef49dededfdb918b474413bf091382f26a9b33da0043244b07acb7e2e60903de35eb45a5e28ac46ab5a800380eefea437442bb7333b59f404c8daa612d257d28bb0a75ffba207a77478a322243f12823879268b61a0cdafe0744b34d92df0633c67df89f7572f5a87d8f61120380fe96e5e2aeba8707002e45b191e7e55539912a2ebef1bc3dcee3ec3cf2f50d19bc3a9176d182372b9f634ef3e93d5ae8d25c2e254c228ac7a314dfd0fc4675d42e44b7b216"]) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0xb30ab61c17a1f68f, 0x0) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, &(0x7f00000000c0)={0x0, 0x107, "14ed549c49355429cb72fffb3470715417a99418d6812efc123a56e81ed4bd67", 0x7, 0xcf, 0x3, 0x5}) ioctl$sock_inet_SIOCDELRT(r3, 0x890c, &(0x7f0000000240)={0x0, {0x2, 0x4e23, @multicast1}, {0x2, 0x4e24, @rand_addr=0x3f}, {0x2, 0x4e22, @remote}, 0x80, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000040)='bridge_slave_1\x00', 0x8, 0x8, 0x3}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:45:12 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x7a]}, 0x48) 03:45:12 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xb, 0x0, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) 03:45:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}}, 0xf0ffff) 03:45:12 executing program 5: mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x0, 0x1) setxattr$security_ima(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)='security.ima\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="f524"], 0x1, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 03:45:12 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0xfa]}, 0x48) 03:45:12 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0x10, 0x0, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) 03:45:12 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000014000/0x18000)=nil, &(0x7f00000004c0)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) getsockname$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000080)=@assoc_value, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) write(r0, &(0x7f0000000140)="4c69d49b2151556d4f068d5d434fc1ccb41d55aebe0c2f45723bcfa384db6a37a6818c5ee2ad8eb0c4184ad4b9780b232276ea94fad88e128d051db203951565c1f01f22ab4df738fda95d1c290bffc2351f5e3396611a1c9789006e4d7b37c7faad4b1673a805817906f149c9e30c277e5311a3ca9866d04561d9b98625be125ab37262818d4e1b3b725cea529c6bd6a6c3767eb98cc9648c78a4d3b27ba36022302d0203c22ad7f3fd7ea804415c1d28badce03b29b44ef00989a8afafcec0f84ddaa8964dad363733b14f9b", 0xcd) ioctl$KVM_RUN(r3, 0xae80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) r4 = syz_open_dev$mice(&(0x7f0000000280)='/dev/input/mice\x00', 0x0, 0x311000) write$P9_RREAD(r4, &(0x7f00000002c0)={0xd8, 0x75, 0x1, {0xcd, "59635732efebd68fb324eec6a0528a9cdd27d84e32f332213ada82c9e872f5d8969f91a15bed7111f56ec077417a57d33d1d2fa2b8c520c562840aa1a9463ba4141f510725877c5651ea80352cfffc118fca7e47b0882165a52fdebb996a2e0be9788c4dd05bb67283ef71aa2feff435faa9b6d75c6af39939ea68afd43385d02e191ddc56639f2efc32094d0e6a8c84092722133fb2417e3a3aa8421dd52289713fca1dbc5cd97263a65da3063b6e04cda8c4a40ec0c64730e13528ecfc0990e45e625d28303d9f4079d9f4e8"}}, 0xd8) ioctl$KVM_RUN(r3, 0xae80, 0x0) mremap(&(0x7f000001b000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000022000/0x4000)=nil) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={0x0, 0x4}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000000)={'raw\x00'}, &(0x7f0000000080)=0x54) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) bind$bt_hci(r0, &(0x7f0000000040), 0x58) 03:45:12 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x80, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:45:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}}, 0x1000000) 03:45:13 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0x14, 0x0, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) [ 2830.728141] net_ratelimit: 25 callbacks suppressed [ 2830.728150] protocol 88fb is buggy, dev hsr_slave_0 [ 2830.738319] protocol 88fb is buggy, dev hsr_slave_1 03:45:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}}, 0x2000000) 03:45:13 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x300]}, 0x48) 03:45:13 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') exit(0xc94) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000340)=""/208, 0xd0}], 0x1, 0x1) 03:45:13 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_FBUF(r2, 0x8030560a, &(0x7f0000000180)={0x20, 0x4, &(0x7f00000000c0)="3203743814dbb83d12a10a14e6f4b8ae765786185732f2a095a13d20c266c3e177528ca469dc8da0a8787018969f0ca6d9e419dd6ea17706c463bb402dcefc445cc66ae8e015e170168e5a9495095d2098f0205d66510388a62d2b1d5c89ffc9a16d83921359e63b8dd1867a3fd306b47b87d7af6565c6f6ba9705fd99c90eeec2834e06bfef46145d12c0f354d8e9029709c003127137a4edbb9ad0df343c7465", {0x7, 0x10001, 0x47504a50, 0xd, 0x1ff800, 0x29d, 0x9, 0x7}}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$sock_bt_cmtp_CMTPCONNDEL(r3, 0x400443c9, &(0x7f0000000000)={{0x916e, 0x9, 0x5, 0x7, 0x1, 0x80}, 0x9}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:45:13 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000014000/0x18000)=nil, &(0x7f00000004c0)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) getsockname$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000080)=@assoc_value, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) write(r0, &(0x7f0000000140)="4c69d49b2151556d4f068d5d434fc1ccb41d55aebe0c2f45723bcfa384db6a37a6818c5ee2ad8eb0c4184ad4b9780b232276ea94fad88e128d051db203951565c1f01f22ab4df738fda95d1c290bffc2351f5e3396611a1c9789006e4d7b37c7faad4b1673a805817906f149c9e30c277e5311a3ca9866d04561d9b98625be125ab37262818d4e1b3b725cea529c6bd6a6c3767eb98cc9648c78a4d3b27ba36022302d0203c22ad7f3fd7ea804415c1d28badce03b29b44ef00989a8afafcec0f84ddaa8964dad363733b14f9b", 0xcd) ioctl$KVM_RUN(r3, 0xae80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) r4 = syz_open_dev$mice(&(0x7f0000000280)='/dev/input/mice\x00', 0x0, 0x311000) write$P9_RREAD(r4, &(0x7f00000002c0)={0xd8, 0x75, 0x1, {0xcd, "59635732efebd68fb324eec6a0528a9cdd27d84e32f332213ada82c9e872f5d8969f91a15bed7111f56ec077417a57d33d1d2fa2b8c520c562840aa1a9463ba4141f510725877c5651ea80352cfffc118fca7e47b0882165a52fdebb996a2e0be9788c4dd05bb67283ef71aa2feff435faa9b6d75c6af39939ea68afd43385d02e191ddc56639f2efc32094d0e6a8c84092722133fb2417e3a3aa8421dd52289713fca1dbc5cd97263a65da3063b6e04cda8c4a40ec0c64730e13528ecfc0990e45e625d28303d9f4079d9f4e8"}}, 0xd8) ioctl$KVM_RUN(r3, 0xae80, 0x0) mremap(&(0x7f000001b000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000022000/0x4000)=nil) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={0x0, 0x4}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000000)={'raw\x00'}, &(0x7f0000000080)=0x54) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) bind$bt_hci(r0, &(0x7f0000000040), 0x58) 03:45:13 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0x15202, 0x0, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) 03:45:13 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x500]}, 0x48) 03:45:13 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xfffffffd, 0x0, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) 03:45:13 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='\x00']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000009000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f00000000c0)="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", 0x104, r1}, 0x68) 03:45:13 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000014000/0x18000)=nil, &(0x7f00000004c0)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) getsockname$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000080)=@assoc_value, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) write(r0, &(0x7f0000000140)="4c69d49b2151556d4f068d5d434fc1ccb41d55aebe0c2f45723bcfa384db6a37a6818c5ee2ad8eb0c4184ad4b9780b232276ea94fad88e128d051db203951565c1f01f22ab4df738fda95d1c290bffc2351f5e3396611a1c9789006e4d7b37c7faad4b1673a805817906f149c9e30c277e5311a3ca9866d04561d9b98625be125ab37262818d4e1b3b725cea529c6bd6a6c3767eb98cc9648c78a4d3b27ba36022302d0203c22ad7f3fd7ea804415c1d28badce03b29b44ef00989a8afafcec0f84ddaa8964dad363733b14f9b", 0xcd) ioctl$KVM_RUN(r3, 0xae80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) r4 = syz_open_dev$mice(&(0x7f0000000280)='/dev/input/mice\x00', 0x0, 0x311000) write$P9_RREAD(r4, &(0x7f00000002c0)={0xd8, 0x75, 0x1, {0xcd, "59635732efebd68fb324eec6a0528a9cdd27d84e32f332213ada82c9e872f5d8969f91a15bed7111f56ec077417a57d33d1d2fa2b8c520c562840aa1a9463ba4141f510725877c5651ea80352cfffc118fca7e47b0882165a52fdebb996a2e0be9788c4dd05bb67283ef71aa2feff435faa9b6d75c6af39939ea68afd43385d02e191ddc56639f2efc32094d0e6a8c84092722133fb2417e3a3aa8421dd52289713fca1dbc5cd97263a65da3063b6e04cda8c4a40ec0c64730e13528ecfc0990e45e625d28303d9f4079d9f4e8"}}, 0xd8) ioctl$KVM_RUN(r3, 0xae80, 0x0) mremap(&(0x7f000001b000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000022000/0x4000)=nil) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={0x0, 0x4}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000000)={'raw\x00'}, &(0x7f0000000080)=0x54) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) bind$bt_hci(r0, &(0x7f0000000040), 0x58) 03:45:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}}, 0x3000000) 03:45:13 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x600]}, 0x48) 03:45:14 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x2, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) 03:45:14 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r2 = accept(r0, &(0x7f0000000000)=@nfc, &(0x7f00000000c0)=0x80) accept4$packet(r2, 0x0, &(0x7f0000000100), 0x800) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r3}, 0x68) 03:45:14 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x700]}, 0x48) [ 2831.448149] protocol 88fb is buggy, dev hsr_slave_0 [ 2831.448187] protocol 88fb is buggy, dev hsr_slave_1 [ 2831.453235] protocol 88fb is buggy, dev hsr_slave_1 [ 2831.458392] protocol 88fb is buggy, dev hsr_slave_0 [ 2831.463347] protocol 88fb is buggy, dev hsr_slave_0 [ 2831.468355] protocol 88fb is buggy, dev hsr_slave_1 [ 2831.473331] protocol 88fb is buggy, dev hsr_slave_1 [ 2831.528186] protocol 88fb is buggy, dev hsr_slave_0 03:45:14 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008913, &(0x7f0000000100)="0a38b27bdc1f1233849f88b8925dce") r1 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x9, 0x0) read(r1, &(0x7f0000000300)=""/140, 0x8c) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup3(r2, r1, 0x0) 03:45:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}}, 0x8000000) 03:45:14 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0xa00]}, 0x48) 03:45:14 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000340)=""/208, 0xd0}], 0x1, 0x1) prctl$PR_SET_ENDIAN(0x14, 0x2) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000080)=@can, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)="5b0ac2aacc2da1beffcfbe4f6ccb1441b25a25ab68eb41d523b1ef1af83dea81d3a295f2f93ba4026f422ebc44248cf54fed29029a7632cffd8ad62153fb9e96c78550a58771014bae0d612930947f3277818de65a4ecd0315f5c2d401ed5c6699344fba4ba7db580160974e2f69171b2e0a356daf07f763f5fc801d404f196fca12f9edbec938da3b477f0069e27e5938a6f8", 0x93}], 0x1, &(0x7f0000000440)=[{0xb8, 0x1ff, 0x7, "50659227a58ef454eb3cee26e22d92ffa3c62ccace8dcc55375e4675c3a4f3073e4b88ab2a92a542bbc98e6ff01002c25554a341d2f583b33761318aa36237400676907ffa87ebf08547a0d5c2dd9d650535c5b4c01d4df3cb437e40c6e946a01a5682048aa096a4cba1d7c4eeacd0b76e65202a16025c65e885ac63c8768506a0c6469e0542d885c818db27a1df592b549a7c00d5b33772150e3b2352a7296789fcf7"}, {0x100, 0x10b, 0x7, "1616f35e3627df0339ee70761624ca7fde9be3aa995e02016a92de2240d7821a3b707b6503f2058a3d33b9c1d466f37133379a7f7f5971f6903c1859afbed6e4ce16a9fa7b0d9f79d58093a687424048a2bd93fb2413242df9244c925bda1798c7f08d74c0679ddb63edb72f573493f75a2d785e38e7cd8d01f60f772f44351a44112c47d5d1820c9a4239bac47f6220bbfcbe766bf3c9f3317acc47601d65d0fc2d7fde9705f2a76caf5f6ba4b970b997488127d513f870f6740994bea99d1b2e3957460c0c6c7cdf49ace966eee33e90957d6a2b83f12df9a1b6ff2c3c0ad423540a327f1b9898ab94ed68e5ea"}], 0x1b8}, 0x800) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000240)={0x0, 0xffff, 0x8}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000002c0)={r1, 0x401}, &(0x7f0000000300)=0x8) ioctl$PPPIOCDISCONN(r0, 0x7439) 03:45:14 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x3, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) 03:45:14 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r3 = accept(r0, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, &(0x7f00000000c0)=0x80) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000100)={r1, 0x1, 0x6, @remote}, 0x10) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000140)=ANY=[@ANYBLOB="616d852133f32497bcd4094d1acf7724d47d02ff8302f549ea0151f8e314d238f0e2bd1c"]) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000013000/0x3000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r4}, 0x68) 03:45:14 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0xf00]}, 0x48) 03:45:14 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB]) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:45:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}}, 0xe320000) 03:45:14 executing program 5: syz_open_dev$audion(0x0, 0x0, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x730000}, 0x200000}) 03:45:14 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x4, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) 03:45:14 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x1018]}, 0x48) 03:45:14 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080)=0x7, 0x4) exit(0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000340)=""/208, 0xd0}], 0x1, 0x1) 03:45:15 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x4000, 0x0) ioctl$UI_SET_PROPBIT(r3, 0x4004556e, 0x16) r4 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$get_security(0x11, r4, &(0x7f00000000c0)=""/129, 0x81) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:45:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}}, 0xf000000) 03:45:15 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x1810]}, 0x48) 03:45:15 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x5, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) 03:45:15 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x2000]}, 0x48) 03:45:15 executing program 5: 03:45:15 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f00000000c0)=ANY=[@ANYBLOB="61fc97ca5ebecd13a14b2808dd1f7e85f4290d516c860d5d67cf4ae25b79e1d086f60cad0d593ff780bc6bf6f7ce44bd0000000000000015e75a218fff68a94e1565c209b346acb3e893bbce238c73c3c4277ded6c6032ee0388c5fd05a6c7f22853ecdbc301961f92db3d9bb02bc00257a1bd7ee24212b22d022346bd5e27"]) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x208000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:45:15 executing program 5: 03:45:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}}, 0x10000000) 03:45:15 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x2e00]}, 0x48) 03:45:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}}, 0x3f000000) 03:45:15 executing program 3: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20228288}, 0xfffffffffffffd4f, &(0x7f0000000440)={&(0x7f0000000840)=ANY=[@ANYBLOB="000600000bc62ec2dab6392c159ab708427f02292c204056f49833b0302d92b55edd3985895d5cd9f0ed17b8b8f02eb5c8ef2fda6501e7cb776ceba4d4794e19cb9fd664de681d1b7fcc0bdef3a55c0fc02ecab91be431f03db5c9793c5d09106d2df8dc35771219f2cc2b024ce668c582c9ea000000000000a6f46333543dbc6059d1b7daf8a14ae74646f38608bdc9dd42edb09fb421a255aa0d30086447eabeeec160857ba33ff6e4dca74366931f", @ANYRES16=r1, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x20044001}, 0x4000004) bind$netlink(r0, &(0x7f00000004c0)={0x10, 0x0, 0x25dfdbfe, 0xa0}, 0xc) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') exit(0x8001) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x18000, 0x0) ioctl$VIDIOC_G_PARM(r3, 0xc0cc5615, &(0x7f0000000740)={0x0, @raw_data="d6365ecf58aa73993e709633567e794579423988b6041f5cc1ea50a056e176fcc93a649b393ed687631003d0f02c6ea293cb48bdc5757e01808e2cdc3ba0722580aa67d6a5d1f2eaa63eaa6d394a37d9c2b208b20620512f4976e3238b1fe512089a9436e46b764cbe994f0b38f64aa946a2466900e7a3e2c9dd66170ae6b8613e35df22d11a05dcb5684f58c1935927af98f81691cd5775fd8ded689354961cac7e91c04224284f4511a3b4929611b379ae7e48b9b7a7b0578bc375d88a341a6fcdf1c48ce70aef"}) unlinkat(r3, &(0x7f0000000280)='./file0\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000180)={{0x2d7, 0x3f}, 'port0\x00', 0x24, 0x21414, 0x0, 0x100000001, 0x3d01, 0x5, 0xd85, 0x0, 0x7, 0x100000000}) syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0x443ffd) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000340)=""/208, 0xd0}], 0x1, 0x1) 03:45:15 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x6, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) 03:45:15 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_KVMCLOCK_CTRL(0xffffffffffffffff, 0xaead) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) syncfs(0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)='.\x00\x00\x00>\x00', 0x6}], 0x1}, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) connect$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd'}]}, 0xfdef) 03:45:15 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x3c00]}, 0x48) 03:45:15 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$VIDIOC_ENUMAUDIO(r3, 0xc0345641, &(0x7f0000000040)={0xc608862, "f770c0cedff5767f3cfeccb09231b92ee5c0115aec1f4f665673d649ad3265e2", 0x2, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:45:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}}, 0x9effffff) 03:45:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}}, 0xc00e0000) 03:45:16 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x3d00]}, 0x48) 03:45:16 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r3, 0xae9a) fcntl$setstatus(r0, 0x4, 0x400) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r2}, 0x68) 03:45:16 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x7, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) 03:45:16 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x3f00]}, 0x48) 03:45:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}}, 0xf0ffffff) 03:45:16 executing program 3: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x400000, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x200) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100), &(0x7f0000000140)=0xb) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x109480, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='smaps_rollup\x00') exit(0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000340)=""/208, 0xd0}], 0x1, 0x1) 03:45:16 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) pipe2(&(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r2, &(0x7f0000000a40)=ANY=[@ANYRES32=r1, @ANYRES64=0x0], 0xfffffff6) recvmmsg(r2, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/156, 0x33f0f}], 0x1}}], 0x1, 0x0, 0x0) 03:45:16 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000000)=ANY=[@ANYBLOB="1ba36131fc84417630ca053336b4d84c4a"]) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f000000e000/0x4000)=nil, &(0x7f0000009000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000016000/0x1000)=nil, &(0x7f000000a000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000000500), 0xffffffffffffffb6, r1}, 0x68) 03:45:16 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x4000]}, 0x48) 03:45:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}}, 0xfffff000) 03:45:16 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x8, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) 03:45:17 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x4800]}, 0x48) 03:45:17 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000000)={0x5, 0x9, 0x7f, 0x80000001, 0x7}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x8, &(0x7f0000000040)=[@cstype3={0x5, 0xb}], 0x100000f5) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:45:17 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x9, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) 03:45:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}}, 0xffffff7f) 03:45:17 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x4c00]}, 0x48) 03:45:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}}, 0xffffff9e) 03:45:17 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') exit(0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x778ed3210980bbad}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xc0, r1, 0x2, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x4c, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x24000000000}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x203}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100000000}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x10001}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x222}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x800000000000000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x6dcf}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5e}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4807}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x2}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000080}, 0x4010) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000340)=""/208, 0xd0}], 0x1, 0x1) 03:45:17 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f00000000c0)=ANY=[@ANYBLOB="988844272461049c778815370ea00159e5f1e64055ba849a5317819431498544e38f7dd0635f37dc84ef77249e4344ed8f3bb6e4d86d96f534bbf70114e3b3f3ec1cb3d91261c75088edac6ab8b473db247c4cbd7b61b830a9bb12adf87fc724c6e4058beb8ac08c51c0f7125fa16fe97ee48384ca8ac50867fbccc68e24afeaa863352ca96b09ff59cda13af5dc11ce7387a53bb0b4630aa675100f1e8a42d47162a17cead9c600dbd8ca55d348ad495350488b285fc229aab1f1acb46d9484e01afcc6a9af993ea5e29d02fcefba"]) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:45:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}}, 0xfffffff0) 03:45:17 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x6100]}, 0x48) 03:45:17 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0xa, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) 03:45:17 executing program 5: perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c61, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5300000044a6aea6ec2e02fc1772f684bc1bd0172d00000013db9820000000003bc3d450590176560000080000abd288f9e2e542d57d50574936d74b08c80200000000370400000000000012e2cdaa2012846655b9c71d97"], 0x58) r1 = dup(r0) write$FUSE_ATTR(r0, &(0x7f0000000300)={0x78}, 0x78) write$FUSE_ATTR(r1, &(0x7f0000000280)={0x78}, 0x78) 03:45:18 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x6300]}, 0x48) 03:45:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}}, 0x40030000000000) 03:45:18 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f00000000c0)=ANY=[@ANYBLOB="63104c84c7ddf7c3ac44927e87a45ff0910407ae5e864acdeb4e01801de060791e35c9e9dd9d0910b1e897f678027c08a28b559497b1d641b6fefe21805036a94baa4733042f730bc23e92f1c58354516a1eba42a562eb9375aa49d22fa646ff6de86887c2402938f50a8ef560780bda27e2c59640c091065158089a23688ab1a3182e4750d927d6eca42ea6d5905193e5276d94194aff836629db67e542518b3bd9d785060071d99d9cdd89d825ac9603e1346329a3da6b10f4bba944631f0797d4fc3d5bc02ed1aa767259cf66f6cc5ace32c1e1ad3fd5b53cc5bd8e4f2af4a58e"]) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:45:18 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0xe, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) 03:45:18 executing program 5: clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x3, 0x0, 0xca}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 03:45:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}}, 0xf0ffffffffffff) 03:45:18 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x40, 0x19f) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f00000000c0)={0x1, 0x0, [{}]}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x1f, 0x8000) r4 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xc9e, 0x34202) ioctl$VIDIOC_S_PRIORITY(r4, 0x40045644, 0xf5ef4db6b470fb97) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:45:18 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x6800]}, 0x48) 03:45:18 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') r1 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r0, 0x0, 0x56, &(0x7f0000000080)='keyring\xc7\x13wlan0)%}\'{posix_acl_accessvboxnet0$cgroupeth0cgroupsecuritynodev(%$.lo}@ppp0\x00'}, 0x30) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000140)={r0, r0, 0x4005}) exit(0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000340)=""/208, 0xd0}], 0x1, 0x40000000) 03:45:18 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0xf, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) 03:45:18 executing program 5: r0 = userfaultfd(0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x730000}, 0x200000}) 03:45:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}}, 0x100000000000000) 03:45:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}}, 0x200000000000000) 03:45:18 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x6c00]}, 0x48) 03:45:19 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x10, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) 03:45:19 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x5, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xc8, r3, 0x401, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x70, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x67}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffbff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}]}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffffd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_NET={0x28, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x189}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x80}, 0x40040) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:45:19 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x7100]}, 0x48) 03:45:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}}, 0x300000000000000) 03:45:19 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c, 0x80800) r0 = socket$inet6(0xa, 0x8000f, 0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r2}, 0x68) 03:45:19 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x7300]}, 0x48) 03:45:19 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req3={0x1, 0x7, 0x23d3, 0x7f, 0x5, 0x4, 0x636}, 0x1c) exit(0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000080)) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000340)=""/208, 0xd0}], 0x1, 0x1) 03:45:19 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x11, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) 03:45:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}}, 0x800000000000000) 03:45:19 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='environ\x00') write$P9_RWRITE(r2, &(0x7f0000000040)={0xb, 0x77, 0x2, 0x6}, 0xb) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:45:19 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x7400]}, 0x48) 03:45:19 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x9, 0x30b000) write$P9_RSTATFS(r0, &(0x7f00000003c0)={0x43, 0x9, 0x1, {0x3, 0x82b0, 0x0, 0x1, 0x4fe2, 0x3ff, 0x3, 0x85, 0x81}}, 0x43) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) r2 = syz_open_dev$admmidi(&(0x7f00000001c0)='/dev/admmidi#\x00', 0x0, 0x200000) r3 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@dev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@remote}}, &(0x7f00000004c0)=0xe8) recvmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000680)=@can={0x1d, 0x0}, 0x80, 0x0, 0x0, &(0x7f0000000740)=""/47, 0x2f}, 0x10002) sendmsg$nl_route(r3, &(0x7f0000000bc0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)=@ipv4_newroute={0x44, 0x18, 0x700, 0x70bd28, 0x25dfdbfd, {0x2, 0x94, 0xa0, 0x8bb9, 0xfd, 0x6, 0xff, 0x9, 0x200}, [@RTA_IIF={0x8, 0x1, r4}, @RTA_OIF={0x8, 0x4, r5}, @RTA_UID={0x8}, @RTA_GATEWAY={0x8, 0x5, @loopback}, @RTA_MARK={0x8, 0x10, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x90) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, 0x0, &(0x7f0000000480)) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) ioctl$BLKGETSIZE(r3, 0x1260, &(0x7f0000000440)) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000a80)="d85e678e676090b1343eb9c52bd02479d0747d8b2ab1410220300dba233c5193d6240d4a4d3d2a693cc7b07ce79ebbae29f214bee98043109616a4205ae885b9fa8c3b79353fa61bf3da3d814e673a4e0524a241d81a07f6dd09e1d0e34871ddf209e2e0ea4539e15d", 0x69}], 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000140)='\x00') sendmsg$TIPC_NL_PEER_REMOVE(r2, 0x0, 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf32(r1, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x169) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) [ 2836.968101] net_ratelimit: 25 callbacks suppressed [ 2836.968110] protocol 88fb is buggy, dev hsr_slave_0 [ 2836.978272] protocol 88fb is buggy, dev hsr_slave_1 03:45:19 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x7a00]}, 0x48) 03:45:19 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x60, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) 03:45:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}}, 0xe32000000000000) 03:45:20 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(r0, 0x0, 0xfffffffffffffdf5) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r3, 0xae9a) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f00000000c0)="66b80d0000000f23d00f21f866351000000f0f23f80f01cb660f38401ea800baf80c66b8d1d09d8c66efbafc0cec0f01d86766c74424000e0000006766c7442402000000006766c744240600000000670f011c24266764f3ad6565dbdd652e0fc72dba400066ed", 0x67}], 0x1, 0x4, &(0x7f0000000180)=[@vmwrite={0x8, 0x0, 0xcdd8, 0x0, 0xbef, 0x0, 0x6, 0x0, 0x8000000000000}, @vmwrite={0x8, 0x0, 0x2, 0x0, 0x3, 0x0, 0xfff, 0x0, 0x10001}], 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_G_CTRL(r4, 0xc008561b, &(0x7f0000000040)={0x7fff, 0x8}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r2}, 0x68) 03:45:20 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0xfa00]}, 0x48) 03:45:20 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0xfc, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) [ 2837.688086] protocol 88fb is buggy, dev hsr_slave_0 [ 2837.688122] protocol 88fb is buggy, dev hsr_slave_0 [ 2837.693227] protocol 88fb is buggy, dev hsr_slave_1 [ 2837.698277] protocol 88fb is buggy, dev hsr_slave_1 [ 2837.703317] protocol 88fb is buggy, dev hsr_slave_0 [ 2837.708373] protocol 88fb is buggy, dev hsr_slave_0 [ 2837.713292] protocol 88fb is buggy, dev hsr_slave_1 [ 2837.718341] protocol 88fb is buggy, dev hsr_slave_1 03:45:20 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') exit(0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000080)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000000c0)=0x28) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000340)=""/208, 0xd0}], 0x1, 0x1) 03:45:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}}, 0xf00000000000000) 03:45:20 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0xff00]}, 0x48) 03:45:20 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000000c0)={0x9, 0x9, 0x0, 0x1ff}, 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r2}, 0x68) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000000)={0x0, r0, 0x200, 0x0, 0x2, 0x2}) 03:45:20 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x12c, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) 03:45:21 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) pipe2(&(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r2, &(0x7f0000000a40)=ANY=[@ANYRES32=r1, @ANYRES64=0x0], 0xfffffff6) recvmmsg(r2, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/156, 0x10}], 0x1}}], 0x1, 0x0, 0x0) 03:45:21 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x50c1b]}, 0x48) 03:45:21 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB]) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:45:21 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x300, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) 03:45:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}}, 0x1000000000000000) 03:45:21 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x8e686]}, 0x48) 03:45:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}}, 0x3f00000000000000) 03:45:21 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x500, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) 03:45:21 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x1f6) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@empty, @in=@broadcast}}, {{@in6=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000040)=0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:45:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}}, 0x9effffff00000000) 03:45:21 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') lseek(r0, 0x0, 0x7) exit(0x0) r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x8000) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f00000000c0)={'ip6gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x21}}}) times(&(0x7f0000000100)) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000340)=""/208, 0xd0}], 0x1, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000440)={{0x8, 0x0, 0x1ff, 0x7, 'syz1\x00', 0x3}, 0x0, [0x5, 0x9, 0x8, 0x3, 0x100000000, 0x0, 0x0, 0x6, 0xa, 0x40, 0x6, 0x1, 0x31db, 0x800, 0x100000001, 0x8, 0x1, 0x0, 0x8, 0x4, 0x7, 0xd98, 0x45, 0x2, 0x0, 0x5, 0x9, 0x589, 0x87, 0x8aa, 0x1, 0xffffffff, 0x100000001, 0x1, 0x400, 0x1000, 0x10000, 0x3, 0x4508d153, 0x6, 0x7, 0x3, 0x80000001, 0xfff, 0x6, 0xce4b, 0xff, 0x4, 0x9, 0x6, 0xfffffffffffffffd, 0x100000001, 0x8000, 0x0, 0x8, 0xfffffffffffffffe, 0x8001, 0x9, 0x100, 0x101, 0x3, 0x10001, 0x19, 0xc7, 0x3, 0xfffffffffffffffa, 0x6, 0x1f, 0x3, 0x401, 0x20, 0x20, 0x2, 0x40, 0x8, 0x5, 0x55, 0x7, 0x81b9, 0x5, 0xf664, 0x8, 0x8001, 0x3, 0xfffffffffffffffa, 0x8000, 0x5, 0x4, 0x4, 0x7, 0x1ff, 0x9, 0x100, 0x400, 0x9, 0x9, 0x1, 0x5, 0x1, 0x4a5, 0x3, 0x2, 0x2, 0x0, 0xfffffffffffffffd, 0x4, 0x1f, 0x9, 0x8000, 0x8fcb, 0xffff, 0x6, 0x3ff, 0x198, 0x80000001, 0x1, 0x8001, 0x2, 0x1, 0x0, 0x1, 0x7ff, 0x40, 0x200, 0x7, 0x7, 0x5, 0x3], {0x77359400}}) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000140)=0x6700, 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000180)={0x101, 0x7, 0xb84, 'queue0\x00', 0x40}) 03:45:21 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x100000]}, 0x48) 03:45:22 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) set_mempolicy(0x1, &(0x7f0000000000)=0x3, 0x8) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r1, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1) 03:45:22 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x200000]}, 0x48) 03:45:22 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r0, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500)}, 0x68) 03:45:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}}, 0xc00e000000000000) 03:45:22 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x5b4, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) 03:45:22 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x1000000]}, 0x48) 03:45:22 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='\x00']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) r3 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$inet6_opts(r3, 0x29, 0x37, &(0x7f0000000040)=@srh={0xaf, 0x6, 0x4, 0x3, 0x81, 0x10, 0x2, [@empty, @ipv4={[], [], @loopback}, @empty]}, 0x38) 03:45:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}}, 0xf0ffffff00000000) 03:45:22 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x5b6, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) 03:45:22 executing program 5: clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ptrace$setopts(0x4206, r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) tkill(r0, 0x1b) ptrace$cont(0x18, r0, 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0xaf, 0x0, 0xca}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) socketpair(0x8, 0x0, 0x0, 0x0) ptrace$cont(0x1f, r0, 0x0, 0x0) 03:45:22 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') exit(0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d91f63190400000000000000fb120001000e00da1b40d819a9060015000000", 0x2e}], 0x1}, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000340)=""/208, 0xd0}], 0x1, 0x1) 03:45:22 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x2000000]}, 0x48) 03:45:22 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x5b4, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) 03:45:22 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000020000000000000000000100000000004000000000000000040000000000000000000a08000000000000000000000000000000000000000000000000000000000000000000000000590300000000000009000000000000000000000000000000041f000500000000000000000000000000000000000000000000000000000000000000000000000095d398135fc08fa45d717df00dc3b193a4ae7584fbb1b8bb88ef5fd9a8b542e53304b18cd837732bfa801c3ab846480de512f8447489b57ab5fd0ae7f900a1e9b635e468487dd611047bacac42"]) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:45:22 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x600, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) 03:45:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}}, 0xffffff7f00000000) 03:45:22 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x3000000]}, 0x48) 03:45:23 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f00000000c0)=ANY=[@ANYBLOB="625d6ddaecdb7ab811f31abfa2b1fe81c0a5cc806e1f4fdfb18492f40f451cb101d7541873e07753b983acde51f52e3e78930670110ee4256b2c20a09b0b9eda2ed2686577eaaa110424c9e5561831f9edfd7e54b8b8ee0b2a1bcf75eb47deeb92d82eda57944aa5570716c839994b2383ead612f08b32898e96fbfd08733ae8f6e6ec58"]) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x2, 0x8000000000002000, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x48000, 0x0) sendto$llc(r3, &(0x7f0000000180)="3eca0395e8c2578d33ce0782d770b14c1b41d128410efb3752b1bed9d9f078e0198b660b19a017bbcea672a1a9d0c4f8daf3426e433c8c30700f3586b178978a50eaea", 0x43, 0x4000, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:45:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}}, 0xfffffffffffff000) 03:45:23 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x700, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) 03:45:23 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x5b6, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) 03:45:23 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x4000000]}, 0x48) 03:45:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0xfffffffffffffffc, 0x800) ioctl$UI_SET_RELBIT(r2, 0x40045566, 0xb) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}}, 0x0) 03:45:23 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r0, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500)}, 0x68) 03:45:23 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x300, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) 03:45:23 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x900, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) 03:45:23 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) rt_sigpending(&(0x7f0000000200), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) fremovexattr(r1, &(0x7f0000000000)=@known='system.sockprotoname\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000003000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000140)="0f353ef20f5a5a7bf30f01b80b41581339e6b8010000000f01c1b9b9090000b800000000ba000000800f300f8efe2d78f4b9220300000f320f01b703000000c4e1ad73d47a", 0x45}], 0x1, 0x0, &(0x7f0000000200), 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x1, 0x0) getsockopt$rose(r3, 0x104, 0x6, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 03:45:23 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x5000000]}, 0x48) 03:45:23 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x6000000]}, 0x48) 03:45:23 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x4200, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f00000000c0)={0x6, &(0x7f0000000040)=[0x1, 0x8, 0x8, 0x80000000, 0xa0, 0x9]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r2, 0x30f}, 0x14}}, 0x0) 03:45:23 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c, 0x80800) r0 = socket$inet6(0xa, 0x8000f, 0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r2}, 0x68) 03:45:23 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='\x00']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:45:24 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0xa00, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) 03:45:24 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x7000000]}, 0x48) 03:45:24 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x10, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) 03:45:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000240)=ANY=[]}}, 0x0) mq_open(&(0x7f0000000080)='IPVS\x00', 0x0, 0x14, &(0x7f00000000c0)={0x651, 0x7, 0x0, 0x3, 0x10000, 0x200, 0x1, 0xfffffffffffffc00}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) ioctl$VIDIOC_G_SLICED_VBI_CAP(r1, 0xc0745645, &(0x7f00000001c0)={0x9db4, [0x6, 0x8, 0x0, 0x9, 0x5, 0x38c2, 0x3, 0x9, 0x3, 0x3, 0x2, 0x1, 0x5, 0x2, 0x7fffffff, 0x101, 0x3, 0x9, 0x24b, 0x0, 0x5, 0x0, 0x101, 0x80000000, 0xa74, 0x54d, 0xfffffffffffffffd, 0x6, 0x7fc0000000, 0x4, 0x1, 0x7, 0x100000000, 0x400, 0x1, 0x1fffffffc000, 0x2, 0x3, 0x8, 0x2, 0x1, 0xfff, 0x100, 0xf3, 0x6, 0x0, 0x80000001, 0x1], 0xf}) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x426800, 0x0) 03:45:24 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x5, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) 03:45:24 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) fsetxattr$security_evm(r0, &(0x7f0000000040)='security.evm\x00', &(0x7f00000000c0)=@sha1={0x1, "403186d071aef9164f08ff17c17a2642b1109181"}, 0x15, 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000000)) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r2}, 0x68) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00') getsockopt$nfc_llcp(r4, 0x118, 0x7, &(0x7f0000000140)=""/15, 0xf) 03:45:24 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0xa000000]}, 0x48) 03:45:24 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0xe00, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) 03:45:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}}, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) getsockname$unix(r2, &(0x7f00000000c0), &(0x7f0000000040)=0x6e) 03:45:24 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000000)=ANY=[@ANYBLOB="658aa84047dd5f747f402baaf611ff2735ac638dc9bbe1e5fd3fd798fd3d80c6c35f000000000000"]) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:45:24 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0xa00, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) 03:45:24 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0xf000000]}, 0x48) 03:45:24 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x4, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) 03:45:24 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0xf00, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) 03:45:24 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000380)='/dev/audio\x00', 0x2, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000003c0)={0x8, 0x1, 0x7, 0x2, 0xa, 0x4, 0x1, 0xfffffffffffffffc, 0x6, 0xc0, 0x5, 0x2c6f}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r2, @ANYBLOB="080029bd7000fddbdf2512000000c800040034000700080003001f00000008000100190000000800040007000000080001001d000000080001000e00000008000200020000001c0007000800040000000000080004008f890000080001001f0000003400070008000200060000000800030007000000080001001b0000000800040001000100080002000900000008000200000000000c00010073797a31000000003400070008000100000000000800020009000000080004000300000008000300030000000800030000f8ffff08000400827a0000"], 0xdc}, 0x1, 0x0, 0x0, 0x40011}, 0x4000080) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="0f0300000000000000a771000000"], 0x14}}, 0x0) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$TUNDETACHFILTER(r4, 0x401054d6, 0x0) userfaultfd(0x80000) futex(&(0x7f0000000000)=0x1, 0x3, 0x0, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f00000000c0)=0x1, 0x0) 03:45:24 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = getpid() ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f0000000000)={0x7d}) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r5, 0x10000, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @multicast2}, @ib={0x1b, 0x6, 0xff, {"be6e40246f6c8ac674925670bf637959"}, 0x7276, 0x10000, 0x4}}}, 0x118) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r2}, 0x68) 03:45:24 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x10000000]}, 0x48) 03:45:24 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000000)=ANY=[@ANYBLOB="658aa84047dd5f747f402baaf611ff2735ac638dc9bbe1e5fd3fd798fd3d80c6c35f000000000000"]) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:45:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000000)={0x10000}, &(0x7f00000000c0), &(0x7f0000000140)={r2, r3+30000000}, 0x8) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}}, 0x0) 03:45:24 executing program 3: r0 = socket$inet6(0xa, 0x200000000003, 0x85) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x8000000000010, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 03:45:24 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x18100000]}, 0x48) 03:45:24 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = dup2(r0, r0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x208000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000740)={0x264, r2, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}, @TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80000000}]}, @TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4a76}]}, @TIPC_NLA_LINK={0x60, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffff984}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0x78, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x927a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8000}]}, @TIPC_NLA_BEARER={0xa4, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @local}}, {0x14, 0x2, @in={0x2, 0x4e20, @loopback}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x1000, @mcast2}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x162}]}]}]}, 0x264}, 0x1, 0x0, 0x0, 0x4}, 0x810) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) io_setup(0x0, &(0x7f0000000140)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r3}, 0x68) 03:45:25 executing program 5: getpgid(0x0) setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, 0x0) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000080)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400009) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f0000000240)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000280)={'TPROXY\x00'}, &(0x7f00000002c0)=0x1e) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) stat(&(0x7f0000000480)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x17, 0x0, 0x1b, 0x2, 0x2a, 0xffffffffffffffff, 0x7}, 0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x2ecdad6e) ioctl$RTC_IRQP_SET(r2, 0x4008700c, 0x198f) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000000)={0x5, 0x3, 0x7, 0xfffffffffffffff9, 0x2b3}) close(0xffffffffffffffff) 03:45:25 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x1b0c0500]}, 0x48) 03:45:25 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x1100, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) 03:45:25 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x20000000]}, 0x48) 03:45:25 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000000)=ANY=[@ANYBLOB="611b226a3ccc6d2a014e2d6cfe9345e443b746c15630e94a2a26b8b5a4653939cc81b40aed73f86ff7c1139cb9c74694337141f7b9"]) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:45:25 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x2000, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) 03:45:25 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580)='/dev/net/tun\x00', 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x80, 0x0) r3 = getpgrp(0x0) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000140)=r3) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x0, 0x1000, 0x7bfffffc, &(0x7f0000ffb000/0x1000)=nil) shmget$private(0x0, 0x3000, 0x200, &(0x7f0000ffb000/0x3000)=nil) r4 = shmget(0x0, 0x1000, 0x4, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_STAT(r4, 0x2, &(0x7f0000000080)=""/19) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x200001, 0x0) socket$inet(0x2, 0x3, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) r5 = syz_open_dev$adsp(&(0x7f00000002c0)='/dev/adsp#\x00', 0x3ff, 0x1) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5387, &(0x7f0000000300)) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x20100, 0x0) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000200)={'bridge_slave_0\x00'}) getsockname(r5, &(0x7f00000004c0)=@ipx, &(0x7f0000000380)=0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00'}) ptrace$peek(0x1, r3, &(0x7f00000001c0)) semop(0x0, &(0x7f0000000040)=[{0x0, 0x7fffffff}, {}], 0x2) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x1]) 03:45:25 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x2e000000]}, 0x48) 03:45:25 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x8, 0x40000) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x9, 0x6, 0x8000, 0x1ff, 0x20}, &(0x7f00000000c0)=0x14) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r1, 0xfffffffffffeffff}, &(0x7f0000000140)=0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r3, 0x30f}, 0x14}}, 0x0) 03:45:25 executing program 3: socketpair$unix(0x1, 0x100000080002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$capi20(0xffffffffffffff9c, &(0x7f00000063c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r1, 0xc0044308, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000000)=0x59f, 0x4) 03:45:25 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f0000000000)=0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:45:25 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x3c000000]}, 0x48) 03:45:25 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x2c01, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) 03:45:25 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x2000, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) 03:45:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={0x0, 0x4}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000100)={0x4f4b, 0x9, 0x8005, 0x7, 0x3, 0x9592, 0x8, 0xfff, r3}, &(0x7f0000000140)=0x20) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}}, 0x0) [ 2843.209852] net_ratelimit: 25 callbacks suppressed [ 2843.209861] protocol 88fb is buggy, dev hsr_slave_0 [ 2843.220017] protocol 88fb is buggy, dev hsr_slave_1 03:45:26 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x3d000000]}, 0x48) 03:45:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x108c0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x2000)=nil, 0xecf1, 0x3, 0x1, &(0x7f0000fec000/0x14000)=nil, 0x4948}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r2, 0x30f}, 0x14}}, 0x0) 03:45:26 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x8000, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000a00)='/selinux/avc/hash_stats\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000b40)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) ioctl$SIOCRSGCAUSE(r3, 0x89e0, &(0x7f0000000100)) 03:45:26 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r2, 0x401, 0x0, 0x0, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x0, 0xfffffffffffffffe, 0x0, 0x7}}}}, 0x30}}, 0x0) 03:45:26 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd<', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r0, &(0x7f00000020c0), 0xfffffd41) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x15) read$FUSE(r0, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, 0x2}, 0x50) 03:45:26 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x3f00, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) 03:45:26 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x3f000000]}, 0x48) 03:45:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000a433285e59af5349cbbd1dc13b1e70f8ef463ad3f5fa8bbb8053b0c2939f14e7d286f6009767bba52b1c04bbad2c98193045f69e95e607300ee130d795cc8f3c3e7dd1c4617e4776f254924a8fe5502d17fb01759ff91428de7e61fe0b00dbd43abd971ec9961dd452b1194a04a98a33711709bce3e5f01127e40e6c8a72a1f28fb2f8af6fc9f9a2697decc48580a80887c0fdc8c6f5f526a22522074ab5608bc3825fcbcb15863776751c27a9e9dcc34b4a12793ab73a0c4140627640ace01cffc63d0fb5f2dc5ce8ac11ef0575a1409971a2bbb41a9a", @ANYRES16=r1, @ANYBLOB="0f03000000000000000008000000"], 0x14}}, 0x0) 03:45:26 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x2, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x5, 0x40000) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:45:26 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x40) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, &(0x7f0000000100)={0x3, 0x0, 0x10000, 0x157b}) modify_ldt$read_default(0x2, &(0x7f0000000000)=""/186, 0xba) mmap(&(0x7f000017a000/0x1000)=nil, 0x1000, 0x2, 0x32, 0xffffffffffffffff, 0xfffffffffffffffd) msgget(0x2, 0x82) 03:45:26 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f000001bfc8)={0x0, 0xfffffe66, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000100001080000000000ff000000000000b6479fb0a4d11ae9bb8e50900710b00f8c6e6480", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000008000a0014000000"], 0x125}}, 0x0) 03:45:26 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x40000000]}, 0x48) 03:45:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x28, r1, 0x110, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}]}, 0x28}}, 0x1) getpeername(r0, &(0x7f0000000040)=@ax25={{0x3, @bcast}, [@rose, @remote, @null, @bcast, @remote, @null, @null, @null]}, &(0x7f0000000100)=0x80) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x40) ioctl$TIOCSBRK(r2, 0x5427) 03:45:26 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x4000, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) 03:45:26 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x48000000]}, 0x48) 03:45:26 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000040)=0x1, 0x4) 03:45:26 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x80000) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001080)={r1, 0x10, &(0x7f0000001040)={&(0x7f0000000040)=""/4096, 0x1000, 0xffffffffffffffff}}, 0x10) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/full\x00', 0x400000, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000001100)={0x0, 0xf3}, &(0x7f0000001140)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000001180)=@assoc_value={r3, 0x6}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2402, 0x0) 03:45:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') r2 = creat(&(0x7f0000000040)='./file0\x00', 0x4) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f00000000c0)={0xff, 0x6, 0x9, 0x7}) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x8, r1, 0x30f}, 0x14}}, 0x0) [ 2843.928191] protocol 88fb is buggy, dev hsr_slave_0 [ 2843.929700] protocol 88fb is buggy, dev hsr_slave_0 [ 2843.933341] protocol 88fb is buggy, dev hsr_slave_1 [ 2843.933518] protocol 88fb is buggy, dev hsr_slave_0 [ 2843.938595] protocol 88fb is buggy, dev hsr_slave_1 [ 2843.943648] protocol 88fb is buggy, dev hsr_slave_1 [ 2843.949095] protocol 88fb is buggy, dev hsr_slave_0 [ 2843.964490] protocol 88fb is buggy, dev hsr_slave_1 03:45:26 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x4c000000]}, 0x48) 03:45:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000440)='/dev/zero\x00', 0x2000, 0x0) getdents(r1, &(0x7f0000000480)=""/59, 0x3b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = gettid() r3 = syz_open_dev$usbmon(&(0x7f0000000300)='/dev/usbmon#\x00', 0x7ffffe, 0x0) preadv(r3, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/222, 0xde}], 0x1, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r2, 0x2000000000000015) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f00000001c0)=0x3, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="ba4300b00bee660f3a172e0010000f32652e0f0866b83c4a00000f23c80f21f866350c0030000f23f83e0b450eb804010f00d00f01f60f3800210f01cf", 0x3d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000180)) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) add_key(0x0, &(0x7f0000000340)={'syz'}, &(0x7f0000000380), 0x0, 0xfffffffffffffff8) ioctl$VIDIOC_S_PRIORITY(r3, 0x40045644, 0x1) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) utimensat(r3, &(0x7f0000000380)='./file0\x00', &(0x7f0000000400)={{0x77359400}, {r5, r6/1000+10000}}, 0x0) 03:45:26 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='\x00']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00') ioctl$IOC_PR_CLEAR(r3, 0x401070cd, &(0x7f0000000040)={0x8}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x10203, 0x1, 0x11f001, 0x2000, &(0x7f000000b000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:45:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r0}) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @remote, 0x5}, 0x1c) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0xffffffffffffff0d, &(0x7f0000000e40)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRESDEC=r1, @ANYRESDEC=r0], 0x3}}, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$BLKFLSBUF(r3, 0x1261, &(0x7f0000000040)=0x7fff) 03:45:27 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x6000, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) 03:45:27 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000002c0)={0xe, 0x4, {0x0, 0x8, 0x0, {0x400}, {0x9, 0x17}, @ramp={0x7, 0x0, {0x0, 0xfffffffffffff800, 0x0, 0x7fffffff}}}, {0x55, 0x0, 0xf36d, {0x1, 0x9}, {}, @period={0x0, 0xfffffffffffff113, 0x7, 0xda7, 0x4, {0x8, 0x8001, 0x0, 0x6}, 0x0, 0x0}}}) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980), 0x0, 0x0, 0xfffffffffffffe03}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r0, &(0x7f00000001c0)=""/46, 0xffffffffffffff6b) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x7706, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$VIDIOC_G_JPEGCOMP(r1, 0x808c563d, &(0x7f0000000200)) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000340)={'team_slave_1\x00', 0x4000}) syz_open_procfs(0x0, 0x0) getpgrp(0x0) 03:45:27 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x61000000]}, 0x48) 03:45:27 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000000)=ANY=[@ANYBLOB="4439f39bfcd855620200642c155c3e0704c892635bcde04556081f0b78c49d66da61c196526bd01e784209945b"]) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:45:27 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0xfffffffffffffff9, r1) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000300)={0x2, 0x0, [{0x0, 0x1ff, 0x4, 0x6, 0x5, 0x31e437ab, 0xa}, {0x80000007, 0x7, 0x0, 0x10001, 0x30000000000, 0x4, 0x2}]}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x3) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x68) r3 = socket(0x20000000000000a, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x40000000001f, &(0x7f00000001c0)=0x100000000, 0x1b4) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000040), 0x4) fallocate(r1, 0x22, 0x1ff, 0x0) getsockopt$packet_int(r3, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f0000000280)={{0x2, 0x4e21, @loopback}, {0x7}, 0x4, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x14}}, 'hsr0\x00'}) 03:45:27 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f0000009000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:45:27 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x63000000]}, 0x48) 03:45:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}}, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000001c0)={0x9, 0xac2e, 0x1, 0x100000001, 0x8, [{0x7, 0x5, 0x2, 0x0, 0x0, 0x2601}, {0x5, 0x3, 0xfe, 0x0, 0x0, 0x1}, {0x1, 0x2, 0x2, 0x0, 0x0, 0x1000}, {0x3, 0x8, 0xffffffff80000000, 0x0, 0x0, 0x1}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, {0x6, 0x2, 0xd51b, 0x0, 0x0, 0x2000}, {0xc65, 0x400, 0x11, 0x0, 0x0, 0x1}, {0x2, 0x1, 0x9, 0x0, 0x0, 0x82}]}) 03:45:27 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x80fe, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) 03:45:27 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x68000000]}, 0x48) 03:45:27 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) accept$alg(r0, 0x0, 0x0) close(r0) close(r0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) 03:45:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}}, 0x0) 03:45:27 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:45:28 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x0, 0x400000000004}, 0x2c) mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x0, @broadcast}}, 0x1, 0xff, 0x4}, 0x98) perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x8a8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xbd1b) prctl$PR_SVE_GET_VL(0x33, 0x1b2c2) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) ustat(0x852, &(0x7f0000000140)) r2 = accept4(r1, 0x0, 0x0, 0x80800) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x50, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}}, 0x98) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000180)={0x32, 0x0, 0x0, 0x0, 0x4, 0x101, 0x0, 0x0, 0xffffffffffffffff}) syz_open_procfs(0x0, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r1, 0x641e) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x920}, 0xc, &(0x7f00000002c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r3, @ANYBLOB="200027bd7000fcdbdf0e00000028000600080001000300000004000200040002000400020004000200040002000800010002000000300005002c00020008000400872b00000800020047ffff05090003001c09000008ba23d2a24c753c9333ee798233159c00040000000000080001001d0000000800060004000200500004004c0007000800020007000000080002000200000008ad8e98d94ed3898200020000000000080002000000000008000400010000000800010000000000080009001a000000080001000f00000008000300228e000097994cd4c8d48379e51e4f3dd45860446cc2719e3f4970f0a16c4659d5805d7e00d5042e92085787e43398120b30648ce750b4269997fea06915f5f6ab6d7069699bde993ac6a9be2d23f15d39f089e8859f721cb77ec0cb5ed6ba86e7dc1555f05995cd6550d82fb42acc21c4264873c39118c78f6842535edaa94cc8dc11f72a1ec68d9d6ced13b81c0959fb6c0f83d341ca6aa75c209a88dad9471bab5328a7a17b0af939f256148ca91bd159833833cce30d8f17e08987a67d048a0e913e42dfff27befbd5b6425f0e96552e11ae7bd0c9e23565ff266b3303cdad5ab4516e874970ed04692d0a735c7727b05f9c1a825a222363ba57c2a985ac4d139cf9fd015351c74afe645ef13d9113fff7819b0e83130bc9bebbe6d0a5001d189c832ef1333bbd22693f738899d8e7713a9423281c8470093e465ac7fc263d0fd64317813087806db0512bcb19b5541609a437a10035c6f2b6918d524fa1bf16596688eb38"], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000040) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000540)=ANY=[@ANYBLOB="3a0b0aaed19556de29c5513938c443e18c9b91aa5ee6cb5b6a080d5519b536e739c5513de171cb434e4a38236ce62c32b72b56a7e6ba2ed7b95abeba89295e6b9d9667ed5c8b6966db28bf18de95104242141892a0cd94e025af5812e0f6ca2bff6c9d994d45ce7d5fa4bfb0de5cd975c5aa1ef9bef3ce38f7c06a778750ac862d34918977a4c1bf5c458e44ec4ed076344f86afabdda4da5d3261e18004ba029e10ce08120e0c3ba8108c0d40731713e1b1d29e7cd9ac04aa7dba86192718770a41cdbdc0d0df443a55dee06e14421fd4abee1e34a5a69a6b92bec02218e40591113246a74d3b84b0d0ddc6ba105e6f77cce85b97796eca1a21f06fbabc38350c9c901059fabbdefa7cef65e271f15b13f9ffdc714c1f7560796d34eb5600289b5ff2200d5c4a255f16678de5745c8942460b7c14368e36f38e380d47304c9e58ee2423aba50bc09d847eaba45987057839990be87c704b640ab8fc2458952114dec60b9df1693943cb807f075bd6a8de86d5fbae8877272d50c244a914fb0de9b5eb7d38037d4fea1f1f91d8fa8157318a2eabb6faa4f60b37523b81ef97f3213a3ef4eaa5", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x8, 0x20c001) 03:45:28 executing program 1: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000100)={0x5, [0x8, 0x3ff, 0x6, 0x8000, 0x5]}, 0xe) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f00000001c0)={0x3f, 0x3, 0x3f, 'queue1\x00', 0x5}) ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f0000000040)={0x1, 0xa2, 0x6, 0x40}) bind$rose(r0, &(0x7f00000000c0)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r2, 0x30f}, 0x14}}, 0x0) 03:45:28 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x6c000000]}, 0x48) 03:45:28 executing program 3: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000200)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980)={0x8, "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", 0xfffffffffffffd14}, 0x10a9) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000100)=0x4, 0x4) truncate(&(0x7f0000000080)='./bus\x00', 0x200) sendmsg(0xffffffffffffffff, 0x0, 0x4000000) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, 0x0) socket(0x5, 0x0, 0x70) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, 0x0) lsetxattr$security_capability(&(0x7f0000000140)='./file1\x00', &(0x7f0000000240)='security.capability\x00', &(0x7f0000000280)=@v1={0x1000000, [{0x7970, 0x7ff}]}, 0xc, 0x1) unlink(&(0x7f00000002c0)='./bus\x00') mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil) sendfile(r1, r1, &(0x7f00000000c0), 0x808100000000) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) 03:45:28 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0xb405, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) 03:45:28 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c12a41d88b070") r2 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000100)={0x0}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000400)=ANY=[@ANYBLOB="61065fd1d8e6214397b491ac09000000000000004fd314a74979b8"]) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x140, 0x0) ioctl$VIDIOC_EXPBUF(r5, 0xc0405610, &(0x7f0000000140)={0x7, 0x442a, 0x100000000, 0x80000, 0xffffffffffffff9c}) ioctl$VIDIOC_EXPBUF(r6, 0xc0405610, &(0x7f0000000180)={0x7, 0x3859a3c2, 0xe084, 0x800, r7}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f0000001000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r3}, 0x68) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f00000001c0)={0x6, 0x9, 0x202, 0x81, 0x4, 0x2, 0x1ff, 0x9, 0x0}, &(0x7f0000000200)=0x20) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000000240)=@assoc_value={r8, 0x10000}, &(0x7f0000000280)=0x8) 03:45:28 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x71000000]}, 0x48) 03:45:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000040)=ANY=[@ANYBLOB="e3cf97183f", @ANYRES16=r1, @ANYBLOB="0f03000000000000000008000000"], 0x14}}, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f00000001c0)="4cece349a0a47bc77c563992d1f8218df5997df7c34f560e9b2fd606050d11530b263c0d834352a842b3e33e120fb9e08cb023541b9691e93ad0072f77bdae8619f0b64d266268e4fc0baf0497d12ceb93ff844ce791f65a3231f5f56ff7ba779d79d731fe472d43ef62209150389c026c98509a21eb8e32442af4e24d2a47533bc10b83a348372a58af4afb73a5e92c4f1ffdd9866e3065625233b46ca3ca6eb59467f6b1f27cf76b98993a2e8d828f97a68d654c262001ccb165fd640003046d9da39d9057acb7", 0xc8) 03:45:28 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:45:28 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0xb605, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) 03:45:28 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x73000000]}, 0x48) 03:45:28 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x800000000000) getsockopt$inet6_int(r1, 0x29, 0x49, &(0x7f0000534000), &(0x7f0000000080)=0xfffffe69) [ 2845.967965] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 2845.978198] FAT-fs (loop3): Filesystem has been set read-only 03:45:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0f030800000000000000080000003c393b6b1a7fcdef472b93fd4077effc235caefc8dfb0966d7596f9cdf57beb34b5743b74b9f5612af526ea94c8efc001071dae74df9d23b6283cfd1937b5c1d93176ce6cc65cb6bea91c1"], 0x14}}, 0x0) 03:45:28 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0xfffffffffffffff9, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000017000/0x3000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:45:28 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x74000000]}, 0x48) 03:45:28 executing program 3: r0 = syz_open_dev$dmmidi(0x0, 0x0, 0x8001) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f00000003c0)=ANY=[], 0x0) ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000000200)) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000400)={0x9, @output={0x1000, 0x1, {0x6, 0x8001}, 0x8c, 0x8}}) r1 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x200800) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000000)={0x0, 0x0, 0x0, @thr={&(0x7f0000000040), 0x0}}, 0x0) sync_file_range(r2, 0x1, 0x7, 0x5) r3 = socket$inet6(0xa, 0x40000080806, 0x0) faccessat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x8, 0x400) bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r3, 0x20000000) r4 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r4, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = accept4(r3, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, &(0x7f00000000c0)}) setsockopt$inet6_int(r5, 0x29, 0x33, &(0x7f0000000040)=0x100000000001f, 0x87) sendmmsg(r5, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x3800000000000000}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, &(0x7f0000000280)={0x5, 0x100000001}) lseek(r6, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000080)=0xe8) r8 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0x0) keyctl$get_persistent(0x16, r7, r8) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x10000, 0x0) r9 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x1) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f00000000c0)) ioctl$FS_IOC_FSGETXATTR(r9, 0x80045505, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff}) 03:45:29 executing program 5: unshare(0x40400) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0xaf01, 0x0) r1 = syz_open_dev$media(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mq_open(0x0, 0x0, 0x0, 0x0) clone(0x102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00?', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',\x00']) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg(r3, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x200056d0, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x1a9, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) ioctl$sock_netrom_SIOCDELRT(r1, 0x890c, &(0x7f00000000c0)={0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0='bpq0\x00', 0x0, 'syz0\x00', @null, 0x1, 0x8, [@default, @null, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @bcast]}) 03:45:29 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0xc0fe, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) 03:45:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000040)=ANY=[@ANYPTR, @ANYRES16=r1, @ANYBLOB="0f03000000000008000008000000"], 0x3}}, 0x4) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x10000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000000c0)={0x4, 0xfffffffffffffffe, 0x8000, 'queue1\x00', 0x8}) 03:45:29 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x7a000000]}, 0x48) 03:45:29 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r2}, 0x68) 03:45:29 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0xfc00, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) [ 2846.473397] usb usb3: usbfs: interface 0 claimed by hub while 'syz-executor.3' sets config #0 03:45:29 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x85ffffff]}, 0x48) 03:45:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = semget$private(0x0, 0x200000000000001, 0x0) semctl$GETNCNT(r1, 0x0, 0xe, &(0x7f0000000080)=""/63) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0xfffffffffffffffa, 0x2}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={r3, @in6={{0xa, 0x4e22, 0x1000, @mcast2, 0x40}}, 0x3, 0x1ff, 0x8, 0x3, 0x1}, &(0x7f0000000100)=0x98) semget$private(0x0, 0x1, 0x3) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000140)={0x0, 0xfffffffffffffe19, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYRES16=r0, @ANYRESHEX=r0, @ANYBLOB="0f03000000000000000d96194110d293b9a1d3ba374226224d09ba8786d748891b38348b691f4f5c350f731ce67e042fca20390d44cd1e37ec063131bb0ab20903e0cfb405f90f00009e08da0cfd281b42b7a8a27d"], 0x3}}, 0x81) 03:45:29 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="ab"]) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:45:29 executing program 5: unshare(0x40400) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0xaf01, 0x0) r1 = syz_open_dev$media(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mq_open(0x0, 0x0, 0x0, 0x0) clone(0x102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00?', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',\x00']) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg(r3, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x200056d0, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x1a9, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) ioctl$sock_netrom_SIOCDELRT(r1, 0x890c, &(0x7f00000000c0)={0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0='bpq0\x00', 0x0, 'syz0\x00', @null, 0x1, 0x8, [@default, @null, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @bcast]}) 03:45:29 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x86e60800]}, 0x48) 03:45:30 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="5500000018007f1412fe01b2a4a280930a06000000a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0001400000060cec4faba7d4", 0x55}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000180)=""/252) ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f0000000080)=0x2) accept4$netrom(r1, &(0x7f0000000280)={{0x3, @rose}, [@null, @rose, @remote, @default, @default, @null, @bcast, @netrom]}, &(0x7f00000003c0)=0x48, 0x80000) accept$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000380)={@empty, 0x1a, r2}) getitimer(0x1, &(0x7f0000000100)) 03:45:30 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0xfe80, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) 03:45:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x84800, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000040)=0x5, 0x4) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}}, 0x0) 03:45:30 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='5']) r2 = dup3(r0, r0, 0x80000) syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1, 0x100) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x181000, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:45:30 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x9cffffff]}, 0x48) 03:45:30 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f00000003c0)="fc0000004800070fab092500090007000a060000702600000000369321000100ff0100000405d00000000000000398996c92773411419da79bb94b46fe000000bc00020000036c6c256f1a272f2e117c22ebc205214000000000008934d07302ad031720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a00000000566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fb8d38a873cf1587c3b41", 0xfc) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x60000100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0xa, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x400}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x50) [ 2847.126025] usb usb3: usbfs: interface 0 claimed by hub while 'syz-executor.3' sets config #0 [ 2847.290275] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 03:45:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0f0349ca00000a0000000800f1ff"], 0x14}}, 0x0) 03:45:30 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(r0, &(0x7f0000000440)="af", 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f00000004c0)="dfb2d5a437013b5465a56f8a829f5c90571d532d139989a26a1ef24454e04802ef6bf23ebc06fb189f6fa96ff204e211a806a3fdce11998f3f74ed846f3b750ea8fbba0757fd9ee8", 0x48, 0x4200010, 0x0, 0x0) 03:45:30 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x9fffffff]}, 0x48) 03:45:30 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x5, 0x200000) write$P9_RLERRORu(r1, 0x0, 0x31) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f00000000c0)=ANY=[@ANYBLOB="074b85e34b539769882749d8f6c514432a72d1d51d18116eaaa7b3ab4b6d67ba20ca1709eb8ca958e7ace6c34fb8e6f09951027891961464ad364389c1f6807c61424d5b7c1475dfb7fa342e7dfb51b74f54a892e8460d71868b444a6b44c5ba947c003d02f647bd360fecb61607"]) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) syncfs(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r2}, 0x68) 03:45:30 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0xfec0, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) [ 2847.331648] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 2847.368553] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2847.397124] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 2847.429585] netlink: 'syz-executor.3': attribute type 21 has an invalid length. 03:45:30 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0xe4ffffff]}, 0x48) [ 2847.469564] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 03:45:30 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)='\xe2\xadG\xf3\xa8Y\tY\xdb\xcfj\x1ab\xaf\xadv\xcc\xb5c\x00\x00\x00u)\xe9\x0f\x14\xdar\xa7B\xd1Y\x82\x9a', 0x0) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f00000003c0)) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="000006000000"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb}, 0xb) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000200)={0xe, 0x6, 0x8, 0x10000, 0x2b, "5e739e98369c92a0af637f44eeea081b6e5a3d5320aedac129abfe74ee6522ced5c7fbab225fa4fbb7ac6f"}, 0x37) r2 = getpgrp(0xffffffffffffffff) sched_setattr(r2, &(0x7f00000001c0)={0x30, 0x0, 0x0, 0x3, 0x500000, 0x0, 0x8, 0xffff}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000340)=0xe8) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000380)={0x3, @default, r3}) sendfile(r0, r1, &(0x7f00000004c0), 0x7) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x4000, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r4, 0xc058534f, &(0x7f0000000140)={{0x401, 0x8}, 0x0, 0xffffffffffffffff, 0x7, {0x80000000, 0xd1e6}, 0x9, 0xb15}) 03:45:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') r2 = accept4(r0, &(0x7f0000000000)=@ipx, &(0x7f00000000c0)=0x80, 0x80800) bind$bt_rfcomm(r2, &(0x7f0000000100)={0x1f, {0x3, 0xc3, 0x9, 0x9, 0x0, 0x3ff}, 0x6}, 0xa) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}}, 0x0) 03:45:30 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x8000000000010, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x1, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f00000001c0)=""/253) prctl$PR_SET_ENDIAN(0x14, 0x1) 03:45:30 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sysfs$2(0x2, 0xdd56, &(0x7f0000000000)=""/119) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000001040)={0x0, 0x0, 0x2080}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) socket$isdn_base(0x22, 0x3, 0x0) 03:45:30 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0xfa000000]}, 0x48) 03:45:30 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0xff00, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) 03:45:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8100202}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r2, 0x202, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x10) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}}, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nullb0\x00', 0x40, 0x0) ioctl$IOC_PR_CLEAR(r3, 0x401070cd, &(0x7f0000000200)={0x100}) 03:45:30 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000300)=ANY=[@ANYBLOB="3daf15a86c864f94c2deb314bf676ae60fa4deddeb1f39385e81d953f144fbbb2310f756d43cb13dc05232ca6edc37e5a98e03dac8a0bbd3e365a7020089d98cdc0c7d0200000000000000b5d901ef4af91c37d30af011b5190e0aede2b6de4bc6b0672cc940b4012a4ea8aae43f2c3d9dacc540396967413f3109bc551031f22151a2197590f36ee018bf3adc0932e50064fdfd03078fae89a7802b4df56d187d3fb13a56355376881b781034409dcc8543f1c022079673bcad2626488782f81cd34d51ffa663e80c9c4d7fd77b6e09523f0202a18707bb4d62f71f5b2a7ebdaf0000001eed199e17797d8e65893d85852a02bf80785ebe6ef598c65f17968516f808868492f84db78a92a793fb07f7a0b2c34a44632638017f4440d870a32a7144f58266e8650e742f985d1c328d765c6e5250c90c35c3c0"]) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/commit_pending_bools\x00', 0x1, 0x0) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000000)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0\x00', 0x8, 0x3) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x600000, 0x0) r4 = dup(r0) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)={0x12, 0x8001, 0x8, 0x1, 0x30, r3}, 0x2c) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000000c0)={{0x110003, 0x3000, 0xa, 0x0, 0x2, 0x0, 0x4, 0xffffffffffff06de, 0x8e78000, 0x100000000, 0xffff, 0xffffffffffffffc1}, {0xf000, 0xd000, 0xf, 0xd7, 0x7, 0x8, 0x9, 0x8, 0x77, 0x9d, 0x8, 0xffffffffd23cda55}, {0x0, 0xf004, 0x0, 0x4, 0x7, 0x3e, 0x6, 0x613d4786, 0xd436, 0x9, 0x4, 0x2}, {0xf000, 0x0, 0xe, 0x9, 0x4, 0x0, 0xfffffffffffffff8, 0x20, 0x1, 0x9, 0x0, 0x2}, {0x0, 0x5000, 0x8, 0x7fff, 0x3, 0x1f, 0xfffffffffffffffa, 0x5, 0xf, 0xe52a, 0x80, 0x6}, {0x1, 0x0, 0xa, 0xfff, 0x9bcd, 0x7, 0x3, 0x16c2c018, 0xffffffff, 0x5, 0x2, 0xc2}, {0x5000, 0xf000, 0x0, 0x1, 0x8, 0x5, 0x5, 0x3eede493, 0x72, 0xd9, 0x9, 0x100000001}, {0x4, 0xf000, 0x0, 0x7ce05f9c, 0x9, 0x40, 0x8, 0x4, 0x5, 0x0, 0x892c, 0x5}, {0x2, 0x1}, {0x101000, 0x3000}, 0x4, 0x0, 0x7000, 0x10009, 0x6, 0x1, 0x106002, [0x9, 0x5, 0x400, 0xffffffff]}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000280)="69e6b1e842ebff2b70620484557f8990", 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_config_ext, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r2}, 0x68) 03:45:30 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r1, 0x215, 0x0, 0x0, {0x12}}, 0x14}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4002008}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd4, r1, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK={0x30, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x1c, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xa3c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffffffffff7f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x85a}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x240040c4}, 0x40) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/null\x00', 0x0, 0x0) ioctl$KVM_GET_REG_LIST(r2, 0xc008aeb0, &(0x7f0000000300)={0x1, [0x2]}) 03:45:30 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0xff000000]}, 0x48) 03:45:30 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') 03:45:30 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x40000, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) 03:45:30 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='c']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:45:30 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10, 0x4, 0x4, 0x3}, 0x2c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) r0 = bpf$MAP_CREATE(0x2, &(0x7f0000000000)={0x3, 0x0, 0x77fffb, 0x0, 0x820005, 0x0}, 0x2c) bpf$MAP_CREATE(0x4, &(0x7f0000000040)={0x3, 0x0, 0x740012, 0x0, 0x20820000, r0}, 0x2c) 03:45:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x321, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x800) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}}, 0x0) 03:45:31 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffffff85]}, 0x48) 03:45:31 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x80, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:45:31 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000025c0)=0x204, 0x4) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @rand_addr=0x2}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xe4}, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) r1 = syz_open_dev$media(&(0x7f0000000200)='/dev/media#\x00', 0xfffffffffffffffb, 0x200) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f00000002c0)) r2 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0x3, 0x2) ioctl$KVM_GET_SREGS(r2, 0x8138ae83, &(0x7f0000000400)) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) ioctl$VIDIOC_G_MODULATOR(0xffffffffffffffff, 0xc0445636, 0x0) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0xf003}, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) setsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f00000001c0), 0x4) sendmsg(0xffffffffffffffff, 0x0, 0x0) write$P9_RSTATFS(0xffffffffffffffff, 0x0, 0x0) 03:45:31 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x100000, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) 03:45:31 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = syz_open_dev$admmidi(&(0x7f00000004c0)='/dev/admmidi#\x00', 0x6, 0x400000) r2 = getuid() ioctl$SIOCAX25GETUID(r1, 0x89e0, &(0x7f0000000500)={0x3, @bcast, r2}) syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x8001, 0x1) getsockopt$sock_buf(r0, 0x1, 0x1f, 0x0, &(0x7f0000000080)) 03:45:31 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) nanosleep(&(0x7f0000000000)={0x0, 0x989680}, 0x0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000100)={0x12, 0x4, 0x4, 0xfff, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x5f, 0xa]}, 0x2c) 03:45:31 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x80002, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000000)=ANY=[@ANYBLOB="e328ca3f1c23c7714a19b027cf"]) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:45:31 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffffff9c]}, 0x48) 03:45:31 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x1000000, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) 03:45:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000200)=""/27) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}}, 0x0) restart_syscall() sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x30}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x88, r1, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'lo\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_0\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x40001) 03:45:31 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffffff9f]}, 0x48) 03:45:31 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000000)=ANY=[@ANYBLOB="a42056db01004206e81ad5f1c40cc4c4e0d77e679a547ff9038c92a54576648d6037b4e089ab03"]) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) 03:45:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x4000, 0x0) getsockname(r0, &(0x7f0000000b00)=@ll={0x11, 0x0, 0x0}, &(0x7f0000000b80)=0x80) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000bc0)={0x0, 0x0}, &(0x7f0000000c00)=0xc) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000c40)={{{@in=@multicast1, @in=@multicast2, 0x4e21, 0x10000, 0x4e22, 0x800, 0x2, 0x0, 0x80, 0x0, r3, r4}, {0x6, 0x1, 0x80000000, 0x100, 0x1, 0x0, 0x0, 0x8000}, {0x4, 0x9, 0x9, 0x81b}, 0x200, 0x6e6bb6, 0x2, 0x1, 0x2, 0x3}, {{@in6=@remote, 0x4d4, 0xff}, 0xa, @in6=@remote, 0x3505, 0x3, 0x3, 0x4, 0xfffffffffffffffa, 0x6, 0x9}}, 0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'eql\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@loopback}}, &(0x7f00000000c0)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24, 0x4, 0xdf4, 0x1, 0x2, 0xa0, 0x80, 0x3b, r5, r6}, {0x2, 0x8, 0x6, 0x8, 0xffff, 0x0, 0x7, 0x4}, {0x7, 0x2, 0x5, 0x5}, 0x5, 0x0, 0x2, 0x1, 0x3, 0x3}, {{@in6=@mcast2, 0x4d3, 0xff}, 0x2, @in=@remote, 0x34ff, 0x0, 0x0, 0x8e, 0x6, 0x40, 0xc80}}, 0xe8) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000100)={0x1, 0x70, 0x34, 0x5, 0xde, 0x5, 0x0, 0x80000001, 0x4000, 0x4, 0xffffffffffffffe0, 0x6, 0x3, 0x4, 0x800000000000000, 0xf6a, 0x3f, 0x5, 0x7, 0x1f, 0x101, 0x1, 0x3, 0xba, 0x631, 0x9, 0x0, 0x8, 0xffffffffffffff71, 0xf04e, 0x6, 0x3ff, 0x7fffffff, 0x0, 0x5, 0x10000, 0x7, 0x16, 0x0, 0xc7e9, 0x3, @perf_config_ext={0x3, 0x5}, 0x8, 0xedbb, 0xbbcb, 0x7, 0x7, 0xffffffffffffff95, 0x7f}) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}}, 0x0) socket$l2tp(0x18, 0x1, 0x1) 03:45:31 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f00000000c0)={0x6, 0x600000000000000, [0x9e], [0xc2]}) [ 2849.448141] net_ratelimit: 24 callbacks suppressed [ 2849.448149] protocol 88fb is buggy, dev hsr_slave_0 [ 2849.458298] protocol 88fb is buggy, dev hsr_slave_1 03:45:32 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x2000000, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) 03:45:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) sendto$inet6(r1, &(0x7f00000001c0)="568c9d38a2af2c4cb6957ada577bdfd67054d2c4d22c1c4d612ed783fb1f629ae1099ac204123633d68d780d079036c008ff4f7cf2ab3381a3256cd70791a6733d4207ee39bd9f551d19188233929237830396b5038ecaba27c00142d9807060e4c6201b67d4f1a47ffbf3c5b6c9335590df4d505e03cc3b538308c4d55799f4e64a8ea11bc3d5fc6a0733260c60c45300085378830197e26d7fd8242d0f06a48ced2c48f40a18d3c5cb4049822dc9c2ac2cf2cf4a64922b5cf927fe5c94255c3c71197920f93f8834451c887877f34788faec311a85a756b6c7ccd4123059ed91f4d53e91846b0bc991afe017d4555744479f6541c68296", 0xf8, 0x4, &(0x7f0000000040)={0xa, 0x4e24, 0x9, @empty, 0x400}, 0x1c) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r2, 0x30f}, 0xffffffffffffff53}}, 0x0) write$UHID_SET_REPORT_REPLY(r1, &(0x7f00000000c0)={0xe, 0x3, 0x0, 0x4, 0x5b, "e3f4a9059626e0968cccce4947cbfbc71eff07e8b4daa52ada4a69ad39ccb896b40ad04b8d9a45d76afdd8a1d582f112d0493fba39dd9f2c824fda7da35331631419ca0f095b26c58e1d50d1ae1eedecdd257ddbe727d29784061d"}, 0x67) 03:45:32 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffffffe4]}, 0x48) 03:45:32 executing program 5: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$UHID_INPUT(r0, &(0x7f00000007c0)={0x8, "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", 0x1000}, 0x1006) r1 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) setxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='security.ima\x00', &(0x7f00000000c0)=@ng, 0x2, 0x0) r2 = dup2(r1, r0) write$binfmt_elf64(r1, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x4, 0x3, 0x7ff, 0x6, 0x3, 0x3, 0x3, 0xee, 0x40, 0x1cd, 0x80000000, 0x3, 0x38, 0x1, 0x7b1ac4ee, 0x3, 0x5}, [{0x70000000, 0x19c, 0x3, 0x8, 0xb28, 0x7fff, 0x10001, 0xfffffffffffffffc}, {0x1, 0x100000001, 0x6, 0xfffffffffffffffb, 0xfffffffffffffff7, 0x100000000, 0x8, 0xfff}], "d525a350c1f943c80b9ddb9b474ea7af0e84ec668bc7b4d9b49e7b4b9534db7eb5448b5260a736e0891dc5efa71b14d520d44092b70996e916b53057badc251c1aad22a4414b25c5cc247d112dbc8dd968fa83bb74c1e95c2670520a6aa40c78e7dd7b71335ba6fb581486ed55fc35d9d0a03ef8c6c903ca391cd26170ef5274ab08373728a98c644d49aaaadbd377e9442c8a4e0dfa669705a93c68ab94694bc460bac8a59ea0df22c02c5cbc343b35c620bbbccaa47a88d1ec78fdac11128e4f7abff79c68d44657cf634604db4a2ad889aac5b1d6cc42e181a481129da9ba5bd335c18a46a300a59442e101", [[], []]}, 0x39d) finit_module(r2, 0x0, 0x0) 03:45:32 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000000c0)={{{@in6, @in6=@loopback}}, {{@in6=@mcast1}, 0x0, @in=@dev}}, &(0x7f0000000040)=0xe8) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r2}, 0x68) 03:45:32 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) unshare(0x400) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_misc(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x209) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendto$inet(r2, &(0x7f00000012c0)="1d", 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f00000004c0)=ANY=[@ANYBLOB="70000000131605010000205e0000000000000000", @ANYRES32=r1, @ANYBLOB="000000000000000050002b004c00010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x70}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$EVIOCGSW(r3, 0x8040451b, &(0x7f0000000040)=""/97) 03:45:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}}, 0x0) 03:45:32 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x1000000000000]}, 0x48) 03:45:32 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x3000000, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) 03:45:32 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000000)=0x80000001) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x4, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) [ 2849.751667] audit: type=1804 audit(2000000732.593:471): pid=17788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir701892627/syzkaller.B1rdvy/4064/bus" dev="sda1" ino=17781 res=1 [ 2849.800193] audit: type=1400 audit(2000000732.633:472): avc: denied { module_load } for pid=17784 comm="syz-executor.5" path="/root/syzkaller-testdir701892627/syzkaller.B1rdvy/4064/bus" dev="sda1" ino=17781 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=system permissive=1 [ 2849.863573] audit: type=1804 audit(2000000732.633:473): pid=17788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir701892627/syzkaller.B1rdvy/4064/bus" dev="sda1" ino=17781 res=1 03:45:32 executing program 5: setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @mcast1}, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}, 0x5c) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket(0x840000000002, 0x3, 0x200000000000ff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='erspan0\x00', 0x1024d) recvfrom$inet6(r1, &(0x7f0000000000)=""/86, 0x56, 0x40000060, &(0x7f0000000080)={0xa, 0x4e20, 0xffffffffffffff47, @mcast1, 0x1}, 0x1c) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r0, &(0x7f00000000c0), 0x30, 0x0, 0x0, 0x120) 03:45:32 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000100)=ANY=[@ANYBLOB="6a7772a48f59bdd1988e9bffad6568618a2eef7ba64a205ae9ac0d9679853c27e8480180ba3929392c27c1026f251676187bf398bb41e7e745b415923e232637ef35008529f56cfceee1c78a8d98334518fe200f80a4f2fd608384886478d793488282e4ddec49302bb569d6049817000000000000000000001e879b7a6440a0ffa9f54affa74c0ab94299981a051033ab00a17008de38c2546e30c4eb1886ecf987d46732f5258d6fcb544f0f119631e1d6661ff085cb2b7018294d6369a5ec2c49bf09738a9b21addc0489a2b66d23357176ba"]) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r2}, 0x68) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) syz_open_procfs(r4, &(0x7f00000000c0)='net/snmp\x00') [ 2849.994943] audit: type=1804 audit(2000000732.683:474): pid=17789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir701892627/syzkaller.B1rdvy/4064/bus" dev="sda1" ino=17781 res=1 03:45:32 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x10000000000000]}, 0x48) 03:45:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}}, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x80000, 0x0) 03:45:32 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x4000000, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) [ 2850.129218] audit: type=1400 audit(2000000732.793:475): avc: denied { getopt } for pid=17793 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 2850.168093] protocol 88fb is buggy, dev hsr_slave_0 [ 2850.168134] protocol 88fb is buggy, dev hsr_slave_1 03:45:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000000)=0x17, 0x4) r1 = syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x13, r1, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, 0x0) [ 2850.173228] protocol 88fb is buggy, dev hsr_slave_1 [ 2850.178272] protocol 88fb is buggy, dev hsr_slave_0 [ 2850.183285] protocol 88fb is buggy, dev hsr_slave_0 [ 2850.188279] protocol 88fb is buggy, dev hsr_slave_1 [ 2850.193287] protocol 88fb is buggy, dev hsr_slave_1 [ 2850.248251] protocol 88fb is buggy, dev hsr_slave_0 03:45:33 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000000)=ANY=[@ANYBLOB="61767e8dc49b"]) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) [ 2850.405333] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5651 sclass=netlink_route_socket pig=17782 comm=syz-executor.3 03:45:33 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@mcast1, @in=@local}}, {{@in6=@empty}, 0x0, @in=@multicast2}}, &(0x7f0000000040)=0xe8) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x5) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r3, &(0x7f0000000340)=ANY=[], 0xffffffc6) close(r0) r4 = socket$kcm(0x29, 0x5, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0x2) splice(r2, 0x0, r3, 0x0, 0x100000000, 0x0) 03:45:33 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x20000000000000]}, 0x48) 03:45:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = open(&(0x7f0000000000)='./file0\x00', 0x40040, 0x2) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000000c0)={0x1, 0xff, 0x8}) r2 = openat$cgroup_type(r1, &(0x7f00000001c0)='cgroup.type\x00', 0x2, 0x0) fcntl$setflags(r2, 0x2, 0x1) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') mq_open(&(0x7f0000000040)='IPVS\x00', 0x841, 0x12, &(0x7f0000000140)={0x0, 0x87c, 0x259cac1b, 0x3, 0xfffffffffffffe00, 0xffffffff, 0x3, 0x8}) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r3, 0x30f}, 0x14}}, 0x0) 03:45:33 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x5000000, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) 03:45:33 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000000c0), 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000580)) r1 = gettid() timer_create(0x0, &(0x7f0000000400)={0x0, 0x200000012, 0x0, @thr={&(0x7f00000005c0)="9727b4b9ac8c6339bfb4ef8b5aa133a029a487e31e972a15b7b12c54ead0c93a2389d318e5fad8300eaca78a7e9a8bd7a494f65c8a43b9639ae9d87aad7810f3045523ec215f160e04a82220e2b6897cd79f7c46c9557aa87e79a23755d2694c72c10134a41ff7e3a0c39adbf2dd6f37dc4c691069f1d06e0aae0dfaae9f1cbbff788ef8fc40621d6f7e8c971aea592012ae5589cf4bd07bf67aa5f070a8f5832d28ca8753e88a589275c675", 0x0}}, &(0x7f0000000440)) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000040)={@reserved}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r3, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838fc3059266fa170e288efe205f36906f37f08a2db6", 0x1d) setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f0000000200)={0x2, 'team_slave_0\x00'}, 0x18) bind$inet(r5, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) r6 = dup(r2) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, &(0x7f00000003c0)={0x8}, 0x172) sendto$inet(r5, &(0x7f0000a88f88), 0x0, 0x2000f401, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(r4, 0x40e, &(0x7f0000000000)) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000000340)={0x9, &(0x7f0000000180)=[{0x81, 0x0, 0x5, 0x6a}, {0xec, 0x0, 0x6, 0x3}, {0x836, 0xbfa, 0x2, 0x10000}, {0x3ff0, 0x4763, 0x4, 0xc0b}, {0x1, 0x73, 0x8, 0x9}, {0x101, 0x9, 0x9}, {0xeb, 0x1, 0x100000000, 0x81}, {0x8, 0x7, 0x9, 0x2}, {0x1, 0x0, 0x3c0, 0x8}]}, 0x8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000240)={0xfffffffffffffff7, 0x0, 0x0, 'queue1\x00'}) shutdown(r5, 0x1) r8 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x3f, 0x240001) setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f0000000380)={0x0, 'team0\x00', 0x3}, 0x18) ioctl$VT_RESIZEX(r8, 0x560a, &(0x7f00000000c0)={0x9, 0x2, 0x10001, 0x7f, 0x1, 0x200000}) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x0, @my}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x100028) 03:45:33 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000400)=ANY=[@ANYBLOB="6299a9"]) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000000)={0x80002, 0x0, [0xfff, 0x2, 0x0, 0x1000, 0x9, 0xc3c, 0x401, 0x2c6]}) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/checkreqprot\x00', 0x101000, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) modify_ldt$read(0x0, &(0x7f0000000500)=""/219, 0xdb) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r1}, 0x68) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f00000000c0)={0x80000000000000, 0xd004, 0x0, 0x4, 0xf}) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000100)={0x0, 0x7d, "0b2c627591d130ac9e3e3a328ff670bd24210b8f8796a197fffb3d32c3c6c44f046e385c375ece5ea994b6ae7ceea8201c98f575ffaff8944f72f288d26e0064682ff59fda64421d08cb231c1ddff4db14d41bdf31a47899cd465d5de48986f5c249ec3fcde61c741b2ac53f31b5ffe6dd5873008bf7ade0981bdeac72"}, &(0x7f00000001c0)=0x85) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000200)={r4}, &(0x7f0000000240)=0x8) 03:45:33 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x100000000000000]}, 0x48) 03:45:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000300), 0x4) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000002", @ANYRES16=r1, @ANYBLOB="0f03000000000000000008000000"], 0x14}}, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xffffffffffff8001, 0x80800) write$P9_RFSYNC(r3, &(0x7f0000000040)={0x7, 0x33, 0x1}, 0x7) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x68, 0x0, &(0x7f00000001c0)=[@register_looper, @free_buffer={0x40086303, r4}, @reply_sg={0x40486312, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x30, 0x8, &(0x7f0000000100)=[@fd={0x66642a85, 0x0, r3, 0x0, 0x3}, @fd={0x66642a85, 0x0, r3, 0x0, 0x3}], &(0x7f0000000140)=[0x38]}, 0xba}}, @dead_binder_done={0x40086310, 0x2}], 0x12, 0x0, &(0x7f0000000240)="322e6b48949028258fdca5dc7d0716c897b0"}) 03:45:33 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x6000000, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) 03:45:33 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x400540, 0x0) r1 = accept(r0, 0x0, &(0x7f0000000040)) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000000500), 0x0, r3}, 0x68) 03:45:33 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x5000000, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) 03:45:33 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x200000000000000]}, 0x48) 03:45:34 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000100)=""/38, 0x26) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e23, 0x65f, @ipv4={[], [], @loopback}, 0x80000001}}, [0x1, 0x7, 0x2f51fac, 0x1, 0x8, 0x685, 0xe3c5, 0x8185, 0x2, 0x8, 0x0, 0x1f, 0x3, 0x9b2, 0xbe]}, &(0x7f0000000280)=0x100) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000002c0)={r2, 0x100000001}, 0x8) r3 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xeb, 0x10003) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000040)=0x5) ioctl$UI_BEGIN_FF_ERASE(r0, 0x4004556a, &(0x7f00000000c0)) 03:45:34 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x300000000000000]}, 0x48) 03:45:34 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/audio\x00', 0x0, 0x0) getpeername$llc(r0, &(0x7f0000000280)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f00000002c0)=0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000000)=ANY=[@ANYBLOB="0e000000d9e66554f07bc918fe076e0b36f4f23f88235d9a38d4665a4f57030fadc362fd25dec6cd8a2b0d6b7c5f4f20f2151f3b4940706394f676c0e048e2d8eee8e342c97375f906be22f802edbb757bcea6a6141c72bc562a17ef2ae46037254a86acb0ddbd4c06db4bdfc3b41ec6cdf0302aa0f697b126069945afb800c979938b2a1cfe2ed15ca7f0fcb5116c5ae3a827fff7311eb39bd8b397bf21706e97eb462f88a3a8903e7448d84a5b8317ce804d8eabb97941e2ea9f5245e0902cc0a07f2a9ebbe44ddbbfeb29708b3c492af7f6bf38f7bd8998663f47127cbacb5959ee3d9a2f", @ANYRES16=r2, @ANYBLOB="0f0300000000000000f0090000006ce13b"], 0x14}}, 0x0) fstat(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$security_capability(r1, &(0x7f0000000100)='security.capability\x00', &(0x7f0000000140)=@v3={0x3000000, [{0x1, 0x4}, {0x3ff, 0x81}], r3}, 0x18, 0x3) 03:45:34 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='a']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000000b000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f0000014000/0x2000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f000000c000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000016000/0x400000)=nil, &(0x7f0000000500), 0xfd76, r1}, 0x68) 03:45:34 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000780)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000010000000000000000000000000000000027000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x32, &(0x7f0000000200)={@remote, 0xe}, 0x20) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=0x0, &(0x7f0000000040)=0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000080)={r3, 0x6d}, &(0x7f0000000100)=0xc) 03:45:34 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x7000000, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) [ 2851.562024] audit: type=1400 audit(2000000734.403:476): avc: denied { setattr } for pid=17871 comm="syz-executor.1" name="NETLINK" dev="sockfs" ino=334042 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 03:45:34 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x1, 0x10000) setsockopt$inet6_buf(r0, 0x29, 0x0, &(0x7f0000000080)="e0570bdfc3994460dab17e8d75f1877c4faa25ca475095cb004f8ba04f006b61411211e6d8ae0572e2039304cbc535918069d716d17d85966f655725e3f1f6dd982c4708a3ec38414ea24bfa527724534b89f90d351222c939c458ace768a3bd244ac2727dec0164b83a8f293743", 0x6e) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000440)={0x0, @motion_det}) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @remote}, 0xc) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r2, &(0x7f0000000480), 0x10000000000002a1, 0x0) write$FUSE_ATTR(r2, 0xffffffffffffffff, 0x0) 03:45:34 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/status\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(r3, 0x8040ae69, &(0x7f0000000200)={0x8001, 0x2, 0x80, 0x4, 0x80000001}) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_mr_cache\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) preadv(r4, &(0x7f00000017c0), 0x1be, 0x400000000074) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0xd) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x0, 0x0) ioctl$KDSKBMODE(r5, 0x4b45, &(0x7f0000000100)=0xa9) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) getresuid(&(0x7f00000003c0)=0x0, &(0x7f0000000400), &(0x7f0000000440)) fstat(r5, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) r9 = geteuid() fstat(r3, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000640)={{{@in=@loopback, @in6=@ipv4={[], [], @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@local}}, &(0x7f0000000740)=0xe8) getresgid(&(0x7f0000000780), &(0x7f00000007c0), &(0x7f0000000800)=0x0) getresgid(&(0x7f0000000840), &(0x7f0000000880)=0x0, &(0x7f00000008c0)) setxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000900)={{}, {0x1, 0x4}, [{0x2, 0x4, r6}, {0x2, 0x2, r7}, {0x2, 0x2, r8}, {0x2, 0x2, r9}, {0x2, 0x6, r10}, {0x2, 0x5, r11}, {0x2, 0x0, r12}], {0x4, 0x7}, [{0x8, 0x1, r13}, {0x8, 0x2, r14}], {0x10, 0x1}, {0x20, 0x1}}, 0x6c, 0x1) bind$inet(r3, &(0x7f0000000980)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x400}}, 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000380)={&(0x7f0000000000)=@in={0x2, 0x4e23, @local}, 0x10, 0x0}, 0x20044000) setsockopt$llc_int(r3, 0x10c, 0x0, &(0x7f0000000080)=0x8, 0x4) dup2(r0, r2) 03:45:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="85000000130000005d00000000000089e2943aba75833fa3b5b4cdf8069500000000000000"], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x0, 0xe, 0x0, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8", 0x0, 0x4af}, 0x28) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}}, 0x0) fremovexattr(r0, &(0x7f0000000040)=@known='trusted.overlay.origin\x00') 03:45:34 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x1, 0x101000) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000140)={r3, 0x1, 0xea}, &(0x7f0000000180)=0x8) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r4 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) ftruncate(r4, 0x40) sendfile(r1, r4, 0x0, 0x3c) 03:45:34 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x400000000000000]}, 0x48) 03:45:34 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x8000000, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) 03:45:34 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x500000000000000]}, 0x48) 03:45:34 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4009}) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000080)=0x7fff) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000140)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="86f5321fdb2fee6dd68da93aa4a5830b5ec8e73765472feec12affe88997ee140d5a452105535af0f004b47cc30546ee50dd423f73b32e01353b17673e0cdd5e9687b3bbf3377cba694471007f6691b290aceb55ac92f915fe898c564ad8856483c6a015b69436587ae5897874d14cdffe9ae78f8e92c95255da6cd3ccd2316485"], 0xfdef) 03:45:34 executing program 2: r0 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f0000000000)={0x28, 0x0, 0x2710, @reserved}, 0x10, 0x80000) ioctl(r0, 0x7, &(0x7f0000000080)="21df5eff87b4d92ecc877f64b683f6823b52932dad0c7daea7bf379f2bb2cc842f42444286307cc0a616f43bd0ddc1aaf92313b9d7da820f73b600c798cb232dbd7ba82987294e0d2ee07ce81e1405fb49156186fd4c0b6027cef903298f2d87bdadca08f75cd2287083f0085c9a29a682ff76bb3303e1c64e01d9804dcdffa61effc7ada89224520b593ac87e8e113c28dc790d602d4b9cbcb00ea42050711d5d00e7be704f699108d4d4a946ce3fcbc5376454b166b4bfcaea82f6c9efe843d7") clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000300)={{0x3, 0x1, 0x10000, 0x3, 0xe88}, 0x1000, 0x7ff, 'id1\x00', 'timer1\x00', 0x0, 0xd574, 0x7ff, 0x7, 0xfffffffffffffffc}) setsockopt$inet_mreqsrc(r1, 0x0, 0x2f, &(0x7f0000000200)={@rand_addr=0x10000, @broadcast, @remote}, 0xc) poll(&(0x7f0000000040)=[{r1, 0x1ca}, {r1, 0x600}, {r0, 0x8000}, {r0, 0x602}], 0x4, 0x5) ioctl(r1, 0x8000000000009371, &(0x7f0000000280)="0187df622400000018e5a6234e8c23128a03e64dc36017ac30b8413b4dcaa57323a76e30347a25be0d01b144a7ef5f715f807b3658d8a9e4c716020894ebae9defa55b7861651281995c393eca3a7bcb606ddaa57f60b3c5a6e4fbd50c342f53d56f92b6079efeb57b208e06c782") ioctl$KVM_KVMCLOCK_CTRL(r1, 0xaead) setsockopt$inet_udp_int(r1, 0x11, 0x0, &(0x7f0000000180)=0x800, 0x4) 03:45:34 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x9000000, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) 03:45:34 executing program 3: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r1, 0x800000c0045003, &(0x7f0000000000)=0x8001) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000180)={0xbc0000, 0x0, 0x80000001, [], &(0x7f0000000100)={0x9909cf, 0x4, [], @p_u32=&(0x7f0000000040)=0x1ff}}) read(r1, &(0x7f0000000140)=""/41, 0x29) 03:45:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}}, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x20a000, 0x129) write$selinux_user(r2, &(0x7f0000000040)={'system_u:object_r:user_cron_spool_t:s0', 0x20, 'system_u\x00'}, 0x30) 03:45:34 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x10, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x1}, 0x48) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='tmpfs\x00', 0x0, 0x0) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x1, 0x4) fchdir(r1) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) clone(0x2, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x1fffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rmdir(&(0x7f0000000000)='./file0/file0\x00') ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000740)={0x7ff, 0x8, 0x587602a5, 0x197, [], [], [], 0x1, 0x9, 0x0, 0xd4e1, "9acbda68b9e6eaf201883ed741b93e44"}) 03:45:34 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x600000000000000]}, 0x48) 03:45:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}}, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x220042, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r2, 0xc10c5541, &(0x7f00000001c0)={0x4, 0x4, 0x6, 0x0, 0x0, [], [], [], 0xe3, 0x7f}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000300)={0x0, 0xa6, "5ee40dd552763b39d0a1672a1dd6ed2ab67923cc6f5e9d53d553d5ba6f8136f2029ea225e05fd571de2a2e6f82fd6cafdf9e0a733ccb0087df8fba966b347fcc6f5c18f91e62ec7d8b02fa96e6a52695d7f7c45ae985c4cc15bf27fa389473d894d1660170838755ad1774beaf9c82e9535db37871f9193183739e129ca4ae7f2ce66ec0e4a2dcb24e7ceab54b838e03322890fce3753720911135aaa7963a4d971f53f7ae67"}, &(0x7f0000000040)=0xae) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={r3, 0x4}, 0x8) connect(r2, &(0x7f00000000c0)=@in={0x2, 0x4e22, @remote}, 0x80) 03:45:35 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0xa000000, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) 03:45:35 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x700000000000000]}, 0x48) 03:45:35 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = getpid() get_robust_list(r1, &(0x7f0000000080)=&(0x7f0000000040), &(0x7f00000000c0)=0x18) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @mcast2}], 0x224) 03:45:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x280, r2, 0x700, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x30, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x401}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfdb}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x53c7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffffffffff25}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'teql0\x00'}}]}, @TIPC_NLA_NODE={0x30, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x36e9ddac}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK={0x120, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5b17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x67e381a5}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x49}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER={0x54, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x6fb7, @rand_addr="4d5c2370d60d9b4f8e6c8b1c55e6cd8b", 0x623}}}}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}]}]}, 0x280}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}}, 0x0) 03:45:35 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0xe000000, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) 03:45:35 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0xa00000000000000]}, 0x48) 03:45:35 executing program 5: socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1fc, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda) r1 = socket(0x1e, 0x805, 0x0) r2 = dup(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x8000000000000002) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x100000000000000) r5 = gettid() dup3(r4, r0, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000080)={0x1, 0x1, 0x4, 0x80000000, r5}) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r5, 0x401104000000016) fcntl$getflags(r3, 0x409) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}, 0x48) r7 = socket(0x10, 0x802, 0x0) write(r7, &(0x7f0000000280)="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", 0xfc) syz_open_dev$audion(&(0x7f0000000240)='/dev/audio#\x00', 0x401, 0x1000000000000001) close(r6) 03:45:35 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4ff0015b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f9, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="000000000a000400000000000000000000003b830c59400374ff9b3b00000000000000000000200000000000"]}) 03:45:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}}, 0x0) r2 = geteuid() setuid(r2) [ 2852.815411] overlayfs: workdir and upperdir must reside under the same mount [ 2852.837467] netlink: 180 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2852.953164] netlink: 180 bytes leftover after parsing attributes in process `syz-executor.5'. 03:45:35 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0xf00000000000000]}, 0x48) 03:45:35 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0xf000000, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) 03:45:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r2, 0xf11, 0x70bd26, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x40) 03:45:35 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000180)='cgroup.clone_children\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000000)=0xfffffffffffffffe, 0x12) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000002c0)={@in6={{0xa, 0x4e21, 0x200, @empty, 0x69}}, 0x0, 0x4, 0x0, "66ea3326898a128a3e07cc65c10afc3d8edc2d8a41b9482db40b6beab63e97d02b0427882c74e9c3b5566d4348422b5cd0eae997c781ac60b971732214a412b11cef8dcd494919c4f61b17feb17e8194"}, 0xd8) r3 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x1, 0x1) ioctl$BLKBSZSET(r3, 0x40081271, &(0x7f0000000080)=0x8) 03:45:35 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x10, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x1}, 0x48) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='tmpfs\x00', 0x0, 0x0) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x1, 0x4) fchdir(r1) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) clone(0x2, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x1fffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rmdir(&(0x7f0000000000)='./file0/file0\x00') ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000740)={0x7ff, 0x8, 0x587602a5, 0x197, [], [], [], 0x1, 0x9, 0x0, 0xd4e1, "9acbda68b9e6eaf201883ed741b93e44"}) 03:45:35 executing program 5: socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1fc, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda) r1 = socket(0x1e, 0x805, 0x0) r2 = dup(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x8000000000000002) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x100000000000000) r5 = gettid() dup3(r4, r0, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000080)={0x1, 0x1, 0x4, 0x80000000, r5}) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r5, 0x401104000000016) fcntl$getflags(r3, 0x409) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}, 0x48) r7 = socket(0x10, 0x802, 0x0) write(r7, &(0x7f0000000280)="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", 0xfc) syz_open_dev$audion(&(0x7f0000000240)='/dev/audio#\x00', 0x401, 0x1000000000000001) close(r6) 03:45:36 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x1000000000000000]}, 0x48) 03:45:36 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda) r1 = socket(0x2000000000001e, 0x805, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) r3 = gettid() r4 = dup3(r2, r0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) tkill(r3, 0x401104000000016) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'bridge0\x00', 0x800000000000}) connect(r4, &(0x7f0000000300)=@nfc={0x27, 0x0, 0x0, 0x7}, 0x80) close(0xffffffffffffffff) accept4$x25(r0, &(0x7f0000000080), &(0x7f0000000100)=0x12, 0x4803) r5 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r5, &(0x7f000000ac80), 0x66, 0x0) fadvise64(r5, 0x0, 0x1000, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, &(0x7f00000002c0)) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) 03:45:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="003e49c60500882d802a5cc86043"], 0x14}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@loopback, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@initdev}}, &(0x7f0000000000)=0xe8) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r3, 0x800, 0x70bd27, 0x25dfdbfd, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x7}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x800) r4 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$get_persistent(0x16, r2, r4) [ 2853.312385] netlink: 180 bytes leftover after parsing attributes in process `syz-executor.5'. 03:45:36 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x10000000, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) 03:45:36 executing program 5: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sndpcmp(0x0, 0x3, 0x2) fcntl$setpipe(r0, 0x407, 0x0) readahead(r0, 0x5, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x40000000000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x373, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd040, 0xc1d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa00000400, 0x0, 0x8000010004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nfs\x00', 0xfffffffffffffffe, &(0x7f0000000040)) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000100)) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0x80dc5521, &(0x7f0000000240)=""/227) write$FUSE_WRITE(r1, &(0x7f0000000000)={0x18}, 0x18) 03:45:36 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x1810000000000000]}, 0x48) 03:45:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)=ANY=[@ANYBLOB="88ecd3ff", @ANYRES16=r1, @ANYBLOB="0f03000000000000000008000000"], 0x14}}, 0x0) 03:45:36 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x4, 0x80}], 0x1, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x6, 0x8a802) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f0000000200)={{0x2, 0x4e21, @broadcast}, {0x2}, 0x2, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x19}}, 'gretap0\x00'}) recvmmsg(r1, &(0x7f0000009940)=[{{0x0, 0x99, &(0x7f0000009780)=[{&(0x7f0000009340)=""/153, 0x7ffff000}], 0x1}}], 0x1, 0x0, 0x0) 03:45:36 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda) r1 = socket(0x2000000000001e, 0x805, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) r3 = gettid() r4 = dup3(r2, r0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) tkill(r3, 0x401104000000016) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'bridge0\x00', 0x800000000000}) connect(r4, &(0x7f0000000300)=@nfc={0x27, 0x0, 0x0, 0x7}, 0x80) close(0xffffffffffffffff) accept4$x25(r0, &(0x7f0000000080), &(0x7f0000000100)=0x12, 0x4803) r5 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r5, &(0x7f000000ac80), 0x66, 0x0) fadvise64(r5, 0x0, 0x1000, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, &(0x7f00000002c0)) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) 03:45:36 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x1b0c050000000000]}, 0x48) 03:45:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x14, r1, 0x30f}, 0x14}}, 0x0) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000040), 0x4) 03:45:36 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x11000000, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) 03:45:36 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x2000000000000000]}, 0x48) 03:45:36 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)) creat(&(0x7f0000000000)='./file0\x00', 0x198) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x20000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x380000000000000) r1 = socket$inet6(0xa, 0x1000000000003, 0x7) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000040)={'bridge0\x00\x00\x00\x00\x80\x00', &(0x7f0000000100)=@ethtool_cmd={0x6, 0x0, 0x70cd00}}) syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x39, 0x103000) 03:45:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") perf_event_open(&(0x7f00004e7000)={0x2, 0x70, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000009000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000009000/0x1000)=nil, &(0x7f0000ff8000/0x1000)=nil, 0x0}, 0x68) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000079000/0x3000)=nil, 0x3000, 0x0, 0x8132, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x40002, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f00000000c0)={0x547, 0x6, 0x800, 0x3}) modify_ldt$read_default(0x2, &(0x7f00000012c0)=""/4096, 0xfffffffffffffdc7) 03:45:36 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x84001, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x4}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000480)={r2, 0x0, 0x30}, &(0x7f00000004c0)=0xc) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000000c0)={r2, @in6={{0xa, 0x4e21, 0x3, @mcast1, 0x9}}, 0x200, 0x5, 0xb728, 0xfffffffeffffffff, 0x4}, &(0x7f0000000200)=0x98) recvfrom$inet(r0, &(0x7f00000003c0)=""/152, 0x98, 0x10000, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={r3, @in={{0x2, 0x4e24, @broadcast}}, 0xff, 0x4, 0xcedf, 0x8af, 0x18}, &(0x7f0000000340)=0x98) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="cc"], 0x1) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:45:36 executing program 3: ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040)) syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = mq_open(&(0x7f0000000080)='eth0\x00', 0x0, 0x0, &(0x7f0000000000)) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/rfkill\x00', 0x0, 0x0) openat$cgroup(r2, &(0x7f0000000880)='syz0\x00', 0x200002, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000680)) listen(r3, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) close(r3) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e24, @empty}}, [0x200, 0x80000000000000, 0x10004, 0x3, 0x7, 0x2, 0x40, 0x80, 0x5, 0x7ff, 0x10001, 0x21540, 0x9, 0x10000, 0x7c]}, &(0x7f0000000280)=0x100) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000380)={r5, 0x5}, 0x8) getpeername(r4, 0x0, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0x1) fsetxattr(r0, &(0x7f00000000c0)=@known='trusted.syz\x00', &(0x7f0000000100)='em0\x00', 0x4, 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x8, 0xfff}, 0xa) lstat(&(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)) rmdir(&(0x7f0000000340)='./file0//ile0\x00') creat(&(0x7f0000000d00)='./file0//ile0\x00', 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x40000000040201, 0x0) r7 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) write$P9_RWSTAT(r6, &(0x7f00000004c0)={0x7}, 0x7) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, 0x0, 0x0) 03:45:37 executing program 4: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x2e00000000000000]}, 0x48) 03:45:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0f03000000000000000008000000f40c0fac"], 0x14}}, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000040)=0x10000) 03:45:37 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x20000000, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) [ 2855.688132] net_ratelimit: 22 callbacks suppressed [ 2855.688140] protocol 88fb is buggy, dev hsr_slave_0 [ 2855.698293] protocol 88fb is buggy, dev hsr_slave_1 [ 2856.408161] protocol 88fb is buggy, dev hsr_slave_0 [ 2856.408166] protocol 88fb is buggy, dev hsr_slave_0 [ 2856.408212] protocol 88fb is buggy, dev hsr_slave_1 [ 2856.413282] protocol 88fb is buggy, dev hsr_slave_1 [ 2856.418442] protocol 88fb is buggy, dev hsr_slave_0 [ 2856.423452] protocol 88fb is buggy, dev hsr_slave_0 [ 2856.428406] protocol 88fb is buggy, dev hsr_slave_1 [ 2856.433468] protocol 88fb is buggy, dev hsr_slave_1 [ 2861.928164] net_ratelimit: 26 callbacks suppressed [ 2861.933161] protocol 88fb is buggy, dev hsr_slave_0 [ 2861.938309] protocol 88fb is buggy, dev hsr_slave_1 [ 2862.648131] protocol 88fb is buggy, dev hsr_slave_0 [ 2862.648137] protocol 88fb is buggy, dev hsr_slave_0 [ 2862.648228] protocol 88fb is buggy, dev hsr_slave_1 [ 2862.653233] protocol 88fb is buggy, dev hsr_slave_1 [ 2862.658338] protocol 88fb is buggy, dev hsr_slave_0 [ 2862.663355] protocol 88fb is buggy, dev hsr_slave_0 [ 2862.668340] protocol 88fb is buggy, dev hsr_slave_1 [ 2862.673366] protocol 88fb is buggy, dev hsr_slave_1 [ 2868.168175] net_ratelimit: 25 callbacks suppressed [ 2868.173165] protocol 88fb is buggy, dev hsr_slave_0 [ 2868.178225] protocol 88fb is buggy, dev hsr_slave_1 [ 2868.888160] protocol 88fb is buggy, dev hsr_slave_0 [ 2868.888165] protocol 88fb is buggy, dev hsr_slave_0 [ 2868.888272] protocol 88fb is buggy, dev hsr_slave_1 [ 2868.893248] protocol 88fb is buggy, dev hsr_slave_1 [ 2868.898359] protocol 88fb is buggy, dev hsr_slave_0 [ 2868.903361] protocol 88fb is buggy, dev hsr_slave_0 [ 2868.908343] protocol 88fb is buggy, dev hsr_slave_1 [ 2868.913328] protocol 88fb is buggy, dev hsr_slave_1 [ 2874.408143] net_ratelimit: 25 callbacks suppressed [ 2874.408149] protocol 88fb is buggy, dev hsr_slave_0 [ 2874.418221] protocol 88fb is buggy, dev hsr_slave_1 [ 2875.128119] protocol 88fb is buggy, dev hsr_slave_0 [ 2875.128127] protocol 88fb is buggy, dev hsr_slave_0 [ 2875.128163] protocol 88fb is buggy, dev hsr_slave_1 [ 2875.133234] protocol 88fb is buggy, dev hsr_slave_1 [ 2875.138285] protocol 88fb is buggy, dev hsr_slave_0 [ 2875.143407] protocol 88fb is buggy, dev hsr_slave_0 [ 2875.148338] protocol 88fb is buggy, dev hsr_slave_1 [ 2875.153348] protocol 88fb is buggy, dev hsr_slave_1 [ 2880.648139] net_ratelimit: 26 callbacks suppressed [ 2880.653341] protocol 88fb is buggy, dev hsr_slave_0 [ 2880.658421] protocol 88fb is buggy, dev hsr_slave_1 [ 2881.368095] protocol 88fb is buggy, dev hsr_slave_0 [ 2881.368104] protocol 88fb is buggy, dev hsr_slave_0 [ 2881.368153] protocol 88fb is buggy, dev hsr_slave_1 [ 2881.373348] protocol 88fb is buggy, dev hsr_slave_1 [ 2881.378476] protocol 88fb is buggy, dev hsr_slave_0 [ 2881.383417] protocol 88fb is buggy, dev hsr_slave_0 [ 2881.388431] protocol 88fb is buggy, dev hsr_slave_1 [ 2881.393396] protocol 88fb is buggy, dev hsr_slave_1 [ 2886.888126] net_ratelimit: 26 callbacks suppressed [ 2886.888132] protocol 88fb is buggy, dev hsr_slave_0 [ 2886.898402] protocol 88fb is buggy, dev hsr_slave_1 [ 2887.608125] protocol 88fb is buggy, dev hsr_slave_0 [ 2887.608189] protocol 88fb is buggy, dev hsr_slave_0 [ 2887.613276] protocol 88fb is buggy, dev hsr_slave_1 [ 2887.618301] protocol 88fb is buggy, dev hsr_slave_1 [ 2887.623321] protocol 88fb is buggy, dev hsr_slave_0 [ 2887.628377] protocol 88fb is buggy, dev hsr_slave_0 [ 2887.633256] protocol 88fb is buggy, dev hsr_slave_1 [ 2887.638323] protocol 88fb is buggy, dev hsr_slave_1 [ 2893.128162] net_ratelimit: 26 callbacks suppressed [ 2893.128169] protocol 88fb is buggy, dev hsr_slave_0 [ 2893.138283] protocol 88fb is buggy, dev hsr_slave_1 [ 2893.848129] protocol 88fb is buggy, dev hsr_slave_0 [ 2893.848174] protocol 88fb is buggy, dev hsr_slave_0 [ 2893.853291] protocol 88fb is buggy, dev hsr_slave_1 [ 2893.858342] protocol 88fb is buggy, dev hsr_slave_1 [ 2893.863343] protocol 88fb is buggy, dev hsr_slave_0 [ 2893.868397] protocol 88fb is buggy, dev hsr_slave_0 [ 2893.873332] protocol 88fb is buggy, dev hsr_slave_1 [ 2893.878375] protocol 88fb is buggy, dev hsr_slave_1 [ 2899.368106] net_ratelimit: 26 callbacks suppressed [ 2899.373161] protocol 88fb is buggy, dev hsr_slave_0 [ 2899.378325] protocol 88fb is buggy, dev hsr_slave_1 [ 2900.088083] protocol 88fb is buggy, dev hsr_slave_0 [ 2900.088114] protocol 88fb is buggy, dev hsr_slave_0 [ 2900.093374] protocol 88fb is buggy, dev hsr_slave_1 [ 2900.098558] protocol 88fb is buggy, dev hsr_slave_1 [ 2900.103456] protocol 88fb is buggy, dev hsr_slave_0 [ 2900.108523] protocol 88fb is buggy, dev hsr_slave_0 [ 2900.113431] protocol 88fb is buggy, dev hsr_slave_1 [ 2900.118476] protocol 88fb is buggy, dev hsr_slave_1 [ 2905.608270] net_ratelimit: 26 callbacks suppressed [ 2905.613494] protocol 88fb is buggy, dev hsr_slave_0 [ 2905.618579] protocol 88fb is buggy, dev hsr_slave_1 [ 2906.328098] protocol 88fb is buggy, dev hsr_slave_0 [ 2906.328169] protocol 88fb is buggy, dev hsr_slave_0 [ 2906.333220] protocol 88fb is buggy, dev hsr_slave_1 [ 2906.338239] protocol 88fb is buggy, dev hsr_slave_1 [ 2906.343236] protocol 88fb is buggy, dev hsr_slave_0 [ 2906.348329] protocol 88fb is buggy, dev hsr_slave_0 [ 2906.353308] protocol 88fb is buggy, dev hsr_slave_1 [ 2906.358361] protocol 88fb is buggy, dev hsr_slave_1 [ 2911.848278] net_ratelimit: 26 callbacks suppressed [ 2911.853300] protocol 88fb is buggy, dev hsr_slave_0 [ 2911.858366] protocol 88fb is buggy, dev hsr_slave_1 [ 2912.568134] protocol 88fb is buggy, dev hsr_slave_0 [ 2912.568262] protocol 88fb is buggy, dev hsr_slave_0 [ 2912.573345] protocol 88fb is buggy, dev hsr_slave_1 [ 2912.578351] protocol 88fb is buggy, dev hsr_slave_1 [ 2912.583438] protocol 88fb is buggy, dev hsr_slave_0 [ 2912.588429] protocol 88fb is buggy, dev hsr_slave_0 [ 2912.593379] protocol 88fb is buggy, dev hsr_slave_1 [ 2912.598391] protocol 88fb is buggy, dev hsr_slave_1 [ 3006.648238] INFO: task syz-executor.0:7988 blocked for more than 140 seconds. [ 3006.655540] Not tainted 5.0.0-rc8+ #3 [ 3006.660630] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3006.668682] syz-executor.0 D24048 7988 1 0x00000004 [ 3006.674320] Call Trace: [ 3006.676901] __schedule+0x817/0x1cc0 [ 3006.680700] ? pci_mmcfg_check_reserved+0x170/0x170 [ 3006.685719] ? preempt_schedule+0x4b/0x60 [ 3006.689941] ? ___preempt_schedule+0x16/0x18 [ 3006.694453] schedule+0x92/0x180 [ 3006.697818] rwsem_down_read_failed+0x213/0x420 [ 3006.702615] ? __rwsem_down_read_failed_common.part.0+0x80/0x80 [ 3006.708791] ? rcuwait_wake_up+0x11d/0x230 [ 3006.713053] ? lock_downgrade+0x810/0x810 [ 3006.717205] call_rwsem_down_read_failed+0x18/0x30 [ 3006.722227] __percpu_down_read+0x8d/0xf0 [ 3006.726401] uprobe_start_dup_mmap+0xbf/0xe0 [ 3006.731088] copy_process.part.0+0x2b94/0x79a0 [ 3006.735675] ? debug_smp_processor_id+0x1c/0x20 [ 3006.740412] ? perf_trace_lock+0xeb/0x510 [ 3006.744599] ? zap_class+0x460/0x460 [ 3006.748392] ? __cleanup_sighand+0x70/0x70 [ 3006.752658] _do_fork+0x257/0xfe0 [ 3006.756119] ? fork_idle+0x1d0/0x1d0 [ 3006.759932] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3006.764704] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3006.769550] ? do_syscall_64+0x26/0x610 [ 3006.773549] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3006.779089] ? do_syscall_64+0x26/0x610 [ 3006.783089] __x64_sys_clone+0xbf/0x150 [ 3006.787080] do_syscall_64+0x103/0x610 [ 3006.791146] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3006.796351] RIP: 0033:0x4563fa [ 3006.799739] Code: Bad RIP value. [ 3006.803110] RSP: 002b:00007ffec9ec9bc0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 3006.810877] RAX: ffffffffffffffda RBX: 00007ffec9ec9bc0 RCX: 00000000004563fa [ 3006.818215] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 3006.825512] RBP: 00007ffec9ec9c00 R08: 0000000000000001 R09: 0000000001831940 [ 3006.832853] R10: 0000000001831c10 R11: 0000000000000246 R12: 0000000000000001 [ 3006.840190] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3006.847485] INFO: task syz-executor.1:7991 blocked for more than 140 seconds. [ 3006.855059] Not tainted 5.0.0-rc8+ #3 [ 3006.859435] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3006.867414] syz-executor.1 D24000 7991 1 0x00000004 [ 3006.873114] Call Trace: [ 3006.875734] __schedule+0x817/0x1cc0 [ 3006.879594] ? pci_mmcfg_check_reserved+0x170/0x170 [ 3006.884634] ? preempt_schedule+0x4b/0x60 [ 3006.888895] ? ___preempt_schedule+0x16/0x18 [ 3006.893315] schedule+0x92/0x180 [ 3006.896674] rwsem_down_read_failed+0x213/0x420 [ 3006.901453] ? __rwsem_down_read_failed_common.part.0+0x80/0x80 [ 3006.907521] ? rcuwait_wake_up+0x11d/0x230 [ 3006.911851] ? lock_downgrade+0x810/0x810 [ 3006.916013] call_rwsem_down_read_failed+0x18/0x30 [ 3006.921022] __percpu_down_read+0x8d/0xf0 [ 3006.925182] uprobe_start_dup_mmap+0xbf/0xe0 [ 3006.929671] copy_process.part.0+0x2b94/0x79a0 [ 3006.934265] ? debug_smp_processor_id+0x1c/0x20 [ 3006.939013] ? perf_trace_lock+0xeb/0x510 [ 3006.943188] ? zap_class+0x460/0x460 [ 3006.946919] ? __cleanup_sighand+0x70/0x70 [ 3006.951237] _do_fork+0x257/0xfe0 [ 3006.954705] ? fork_idle+0x1d0/0x1d0 [ 3006.958499] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3006.963273] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3006.968142] ? do_syscall_64+0x26/0x610 [ 3006.972137] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3006.977503] ? do_syscall_64+0x26/0x610 [ 3006.981584] __x64_sys_clone+0xbf/0x150 [ 3006.985577] do_syscall_64+0x103/0x610 [ 3006.989554] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3006.994755] RIP: 0033:0x4563fa [ 3006.997942] Code: Bad RIP value. [ 3007.001387] RSP: 002b:00007ffc781db9f0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 3007.009158] RAX: ffffffffffffffda RBX: 00007ffc781db9f0 RCX: 00000000004563fa [ 3007.016519] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 3007.023993] RBP: 00007ffc781dba30 R08: 0000000000000001 R09: 0000000000b50940 [ 3007.031338] R10: 0000000000b50c10 R11: 0000000000000246 R12: 0000000000000001 [ 3007.038698] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000001 [ 3007.046016] INFO: task syz-executor.4:8000 blocked for more than 140 seconds. [ 3007.053399] Not tainted 5.0.0-rc8+ #3 [ 3007.057730] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3007.065779] syz-executor.4 D24000 8000 1 0x00000004 [ 3007.071480] Call Trace: [ 3007.074072] __schedule+0x817/0x1cc0 [ 3007.077795] ? pci_mmcfg_check_reserved+0x170/0x170 [ 3007.082904] ? rwsem_down_read_failed+0x1db/0x420 [ 3007.087770] ? _raw_spin_unlock_irq+0x28/0x90 [ 3007.092359] ? lockdep_hardirqs_on+0x415/0x5d0 [ 3007.096956] schedule+0x92/0x180 [ 3007.100427] rwsem_down_read_failed+0x213/0x420 [ 3007.105120] ? __rwsem_down_read_failed_common.part.0+0x80/0x80 [ 3007.111275] ? rcuwait_wake_up+0x11d/0x230 [ 3007.115527] ? lock_downgrade+0x810/0x810 [ 3007.119783] call_rwsem_down_read_failed+0x18/0x30 [ 3007.124737] __percpu_down_read+0x8d/0xf0 [ 3007.129075] uprobe_start_dup_mmap+0xbf/0xe0 [ 3007.133510] copy_process.part.0+0x2b94/0x79a0 [ 3007.138297] ? debug_smp_processor_id+0x1c/0x20 [ 3007.142985] ? perf_trace_lock+0xeb/0x510 [ 3007.147137] ? zap_class+0x460/0x460 [ 3007.150932] ? __cleanup_sighand+0x70/0x70 [ 3007.155211] _do_fork+0x257/0xfe0 [ 3007.158759] ? fork_idle+0x1d0/0x1d0 [ 3007.162503] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3007.167270] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3007.172105] ? do_syscall_64+0x26/0x610 [ 3007.176089] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3007.181550] ? do_syscall_64+0x26/0x610 [ 3007.185558] __x64_sys_clone+0xbf/0x150 [ 3007.189629] do_syscall_64+0x103/0x610 [ 3007.193534] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3007.198861] RIP: 0033:0x4563fa [ 3007.202075] Code: Bad RIP value. [ 3007.205433] RSP: 002b:00007ffe8f1c2f80 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 3007.213227] RAX: ffffffffffffffda RBX: 00007ffe8f1c2f80 RCX: 00000000004563fa [ 3007.220564] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 3007.227840] RBP: 00007ffe8f1c2fc0 R08: 0000000000000001 R09: 00000000017ee940 [ 3007.235172] R10: 00000000017eec10 R11: 0000000000000246 R12: 0000000000000001 [ 3007.242532] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000004 [ 3007.249936] INFO: task udevd:8438 blocked for more than 140 seconds. [ 3007.256434] Not tainted 5.0.0-rc8+ #3 [ 3007.260832] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3007.268871] udevd D27200 8438 3867 0x00000000 [ 3007.274524] Call Trace: [ 3007.277119] __schedule+0x817/0x1cc0 [ 3007.280930] ? pci_mmcfg_check_reserved+0x170/0x170 [ 3007.285954] ? preempt_schedule+0x4b/0x60 [ 3007.290174] ? ___preempt_schedule+0x16/0x18 [ 3007.294768] schedule+0x92/0x180 [ 3007.298231] rwsem_down_read_failed+0x213/0x420 [ 3007.302925] ? __rwsem_down_read_failed_common.part.0+0x80/0x80 [ 3007.309081] ? rcuwait_wake_up+0x11d/0x230 [ 3007.313327] ? lock_downgrade+0x810/0x810 [ 3007.317477] call_rwsem_down_read_failed+0x18/0x30 [ 3007.322543] __percpu_down_read+0x8d/0xf0 [ 3007.326716] uprobe_start_dup_mmap+0xbf/0xe0 [ 3007.331202] copy_process.part.0+0x2b94/0x79a0 [ 3007.335796] ? debug_smp_processor_id+0x1c/0x20 [ 3007.340571] ? perf_trace_lock+0xeb/0x510 [ 3007.344741] ? __lock_is_held+0xb6/0x140 [ 3007.348898] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3007.354463] ? check_preemption_disabled+0x48/0x290 [ 3007.359597] ? zap_class+0x460/0x460 [ 3007.363357] ? __cleanup_sighand+0x70/0x70 [ 3007.367672] ? find_held_lock+0x35/0x130 [ 3007.373084] ? lock_downgrade+0x810/0x810 [ 3007.377328] _do_fork+0x257/0xfe0 [ 3007.380962] ? fork_idle+0x1d0/0x1d0 [ 3007.384698] ? fd_install+0x4d/0x60 [ 3007.388526] ? do_pipe2+0x9a/0x160 [ 3007.392078] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3007.396825] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3007.401770] ? do_syscall_64+0x26/0x610 [ 3007.405750] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3007.411318] ? do_syscall_64+0x26/0x610 [ 3007.415307] __x64_sys_clone+0xbf/0x150 [ 3007.419470] do_syscall_64+0x103/0x610 [ 3007.423403] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3007.428833] RIP: 0033:0x7f6b1dbd6f46 [ 3007.432562] Code: Bad RIP value. [ 3007.435915] RSP: 002b:00007ffe44911730 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 3007.443824] RAX: ffffffffffffffda RBX: 00007ffe44911730 RCX: 00007f6b1dbd6f46 [ 3007.451359] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 3007.458677] RBP: 00007ffe44911790 R08: 00000000000020f6 R09: 00000000000020f6 [ 3007.465935] R10: 00007f6b1e4f3a70 R11: 0000000000000246 R12: 0000000000000000 [ 3007.473232] R13: 00007ffe44911750 R14: 0000000000000005 R15: 0000000000000005 [ 3007.480624] INFO: task udevd:8445 blocked for more than 140 seconds. [ 3007.487129] Not tainted 5.0.0-rc8+ #3 [ 3007.491511] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3007.499551] udevd D27896 8445 3867 0x00000000 [ 3007.505203] Call Trace: [ 3007.507802] __schedule+0x817/0x1cc0 [ 3007.511592] ? pci_mmcfg_check_reserved+0x170/0x170 [ 3007.516613] ? rwsem_down_read_failed+0x1db/0x420 [ 3007.521533] ? _raw_spin_unlock_irq+0x28/0x90 [ 3007.526041] ? lockdep_hardirqs_on+0x415/0x5d0 [ 3007.530796] schedule+0x92/0x180 [ 3007.534163] rwsem_down_read_failed+0x213/0x420 [ 3007.538931] ? __rwsem_down_read_failed_common.part.0+0x80/0x80 [ 3007.545008] ? rcuwait_wake_up+0x11d/0x230 [ 3007.549329] ? lock_downgrade+0x810/0x810 [ 3007.553492] call_rwsem_down_read_failed+0x18/0x30 [ 3007.558517] __percpu_down_read+0x8d/0xf0 [ 3007.562688] uprobe_start_dup_mmap+0xbf/0xe0 [ 3007.567110] copy_process.part.0+0x2b94/0x79a0 [ 3007.571746] ? debug_smp_processor_id+0x1c/0x20 [ 3007.576426] ? perf_trace_lock+0xeb/0x510 [ 3007.580670] ? __lock_is_held+0xb6/0x140 [ 3007.584750] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3007.590350] ? check_preemption_disabled+0x48/0x290 [ 3007.595382] ? zap_class+0x460/0x460 [ 3007.599207] ? __cleanup_sighand+0x70/0x70 [ 3007.603469] ? find_held_lock+0x35/0x130 [ 3007.607548] ? lock_downgrade+0x810/0x810 [ 3007.611765] _do_fork+0x257/0xfe0 [ 3007.615246] ? fork_idle+0x1d0/0x1d0 [ 3007.619054] ? fd_install+0x4d/0x60 [ 3007.622701] ? do_pipe2+0x9a/0x160 [ 3007.626260] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3007.631077] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3007.635856] ? do_syscall_64+0x26/0x610 [ 3007.639904] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3007.645274] ? do_syscall_64+0x26/0x610 [ 3007.649346] __x64_sys_clone+0xbf/0x150 [ 3007.653335] do_syscall_64+0x103/0x610 [ 3007.657215] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3007.662481] RIP: 0033:0x7f6b1dbd6f46 [ 3007.666224] Code: Bad RIP value. [ 3007.669666] RSP: 002b:00007ffe44911730 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 3007.677393] RAX: ffffffffffffffda RBX: 00007ffe44911730 RCX: 00007f6b1dbd6f46 [ 3007.684741] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 3007.692097] RBP: 00007ffe44911790 R08: 00000000000020fd R09: 00000000000020fd [ 3007.699463] R10: 00007f6b1e4f3a70 R11: 0000000000000246 R12: 0000000000000000 [ 3007.706788] R13: 00007ffe44911750 R14: 0000000000000005 R15: 0000000000000005 [ 3007.714327] INFO: task syz-executor.3:14769 blocked for more than 140 seconds. [ 3007.721744] Not tainted 5.0.0-rc8+ #3 [ 3007.726059] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3007.734068] syz-executor.3 D24000 14769 1 0x00000004 [ 3007.739776] Call Trace: [ 3007.742387] __schedule+0x817/0x1cc0 [ 3007.746107] ? pci_mmcfg_check_reserved+0x170/0x170 [ 3007.751173] ? preempt_schedule+0x4b/0x60 [ 3007.755331] ? ___preempt_schedule+0x16/0x18 [ 3007.759830] schedule+0x92/0x180 [ 3007.763221] rwsem_down_read_failed+0x213/0x420 [ 3007.767898] ? __rwsem_down_read_failed_common.part.0+0x80/0x80 [ 3007.774139] ? rcuwait_wake_up+0x11d/0x230 [ 3007.778497] ? lock_downgrade+0x810/0x810 [ 3007.782678] call_rwsem_down_read_failed+0x18/0x30 [ 3007.787644] __percpu_down_read+0x8d/0xf0 [ 3007.791880] uprobe_start_dup_mmap+0xbf/0xe0 [ 3007.796301] copy_process.part.0+0x2b94/0x79a0 [ 3007.800966] ? debug_smp_processor_id+0x1c/0x20 [ 3007.805645] ? perf_trace_lock+0xeb/0x510 [ 3007.809858] ? zap_class+0x460/0x460 [ 3007.813600] ? __cleanup_sighand+0x70/0x70 [ 3007.817841] _do_fork+0x257/0xfe0 [ 3007.821389] ? fork_idle+0x1d0/0x1d0 [ 3007.825138] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3007.829957] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3007.834722] ? do_syscall_64+0x26/0x610 [ 3007.838765] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3007.844144] ? do_syscall_64+0x26/0x610 [ 3007.848230] __x64_sys_clone+0xbf/0x150 [ 3007.852229] do_syscall_64+0x103/0x610 [ 3007.856120] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3007.861385] RIP: 0033:0x4563fa [ 3007.864605] Code: Bad RIP value. [ 3007.867966] RSP: 002b:00007ffc29e3c0e0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 3007.875760] RAX: ffffffffffffffda RBX: 00007ffc29e3c0e0 RCX: 00000000004563fa [ 3007.883105] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 3007.890435] RBP: 00007ffc29e3c120 R08: 0000000000000001 R09: 00000000019a6940 [ 3007.897723] R10: 00000000019a6c10 R11: 0000000000000246 R12: 0000000000000001 [ 3007.905065] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000003 [ 3007.912413] INFO: task syz-executor.5:18051 blocked for more than 140 seconds. [ 3007.919845] Not tainted 5.0.0-rc8+ #3 [ 3007.924171] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3007.932207] syz-executor.5 D26912 18051 8004 0x00000004 [ 3007.937857] Call Trace: [ 3007.940552] __schedule+0x817/0x1cc0 [ 3007.944300] ? pci_mmcfg_check_reserved+0x170/0x170 [ 3007.949405] ? percpu_down_write+0x6a/0x440 [ 3007.953749] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 3007.958849] schedule+0x92/0x180 [ 3007.962231] percpu_down_write+0x342/0x440 [ 3007.966477] ? perf_trace_lock+0xeb/0x510 [ 3007.970702] ? mark_held_locks+0x100/0x100 [ 3007.974947] ? __percpu_down_read+0xf0/0xf0 [ 3007.979356] ? should_fail+0x14d/0x85c [ 3007.983300] register_for_each_vma+0x8c/0xde0 [ 3007.987813] ? lock_downgrade+0x810/0x810 [ 3007.992049] ? set_orig_insn+0x60/0x60 [ 3007.995966] __uprobe_register+0x464/0x7d0 [ 3008.000300] uprobe_register+0x28/0x30 [ 3008.004285] probe_event_enable+0x474/0xc40 [ 3008.008707] ? pcpu_balance_workfn+0x12a0/0x12a0 [ 3008.013487] ? traceprobe_set_print_fmt+0x3a/0xa0 [ 3008.018419] ? __uprobe_perf_filter.part.0+0x110/0x110 [ 3008.023722] trace_uprobe_register+0x4ba/0x960 [ 3008.028395] perf_trace_event_init+0x500/0x990 [ 3008.033014] perf_uprobe_init+0x1db/0x290 [ 3008.037397] perf_uprobe_event_init+0x106/0x1a0 [ 3008.042187] perf_try_init_event+0x137/0x2f0 [ 3008.046603] perf_event_alloc.part.0+0x1d08/0x2e00 [ 3008.051620] ? __perf_event_read+0xe10/0xe10 [ 3008.056049] ? kasan_check_read+0x11/0x20 [ 3008.060284] ? do_raw_spin_unlock+0x57/0x270 [ 3008.064727] __do_sys_perf_event_open+0x842/0x2690 [ 3008.069873] ? perf_event_set_output+0x4e0/0x4e0 [ 3008.074638] ? put_timespec64+0xda/0x140 [ 3008.078797] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3008.083571] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3008.088422] ? do_syscall_64+0x26/0x610 [ 3008.092421] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3008.097802] ? do_syscall_64+0x26/0x610 [ 3008.101863] __x64_sys_perf_event_open+0xbe/0x150 [ 3008.106716] do_syscall_64+0x103/0x610 [ 3008.110663] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3008.115860] RIP: 0033:0x457e29 [ 3008.119115] Code: Bad RIP value. [ 3008.122493] RSP: 002b:00007f4fc93d5c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 3008.130286] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000457e29 [ 3008.137560] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 3008.144884] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3008.152203] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007f4fc93d66d4 [ 3008.159573] R13: 00000000004c4491 R14: 00000000004d7bf8 R15: 00000000ffffffff [ 3008.166871] INFO: task syz-executor.2:18060 blocked for more than 140 seconds. [ 3008.174281] Not tainted 5.0.0-rc8+ #3 [ 3008.178654] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3008.186618] syz-executor.2 D28544 18060 7993 0x00000004 [ 3008.192322] Call Trace: [ 3008.194921] __schedule+0x817/0x1cc0 [ 3008.198715] ? __mutex_lock+0x721/0x1310 [ 3008.202800] ? pci_mmcfg_check_reserved+0x170/0x170 [ 3008.207836] schedule+0x92/0x180 [ 3008.211297] schedule_preempt_disabled+0x13/0x20 [ 3008.216064] __mutex_lock+0x726/0x1310 [ 3008.220036] ? perf_trace_init+0x58/0x250 [ 3008.224215] ? mutex_trylock+0x1e0/0x1e0 [ 3008.228353] ? perf_trace_lock+0xeb/0x510 [ 3008.232506] ? mark_held_locks+0x100/0x100 [ 3008.236732] ? zap_class+0x460/0x460 [ 3008.240544] ? perf_event_alloc.part.0+0xef1/0x2e00 [ 3008.245570] ? find_held_lock+0x35/0x130 [ 3008.250013] mutex_lock_nested+0x16/0x20 [ 3008.254085] ? mutex_lock_nested+0x16/0x20 [ 3008.258390] perf_trace_init+0x58/0x250 [ 3008.262391] perf_tp_event_init+0xa6/0x120 [ 3008.266627] perf_try_init_event+0x137/0x2f0 [ 3008.271098] perf_event_alloc.part.0+0xf98/0x2e00 [ 3008.275957] ? __perf_event_read+0xe10/0xe10 [ 3008.280451] ? kasan_check_read+0x11/0x20 [ 3008.284610] ? do_raw_spin_unlock+0x57/0x270 [ 3008.289101] __do_sys_perf_event_open+0x842/0x2690 [ 3008.294068] ? perf_event_set_output+0x4e0/0x4e0 [ 3008.298911] ? put_timespec64+0xda/0x140 [ 3008.303041] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3008.307796] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3008.312630] ? do_syscall_64+0x26/0x610 [ 3008.316617] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3008.322066] ? do_syscall_64+0x26/0x610 [ 3008.326052] __x64_sys_perf_event_open+0xbe/0x150 [ 3008.331094] do_syscall_64+0x103/0x610 [ 3008.334984] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3008.340253] RIP: 0033:0x457e29 [ 3008.343484] Code: Bad RIP value. [ 3008.346847] RSP: 002b:00007f5d8cd55c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 3008.354622] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000457e29 [ 3008.361969] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000204e7000 [ 3008.369325] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3008.376606] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007f5d8cd566d4 [ 3008.383948] R13: 00000000004c4491 R14: 00000000004d7bf8 R15: 00000000ffffffff [ 3008.391323] [ 3008.391323] Showing all locks held in the system: [ 3008.397641] 1 lock held by khungtaskd/1040: [ 3008.402026] #0: 000000004047c408 (rcu_read_lock){....}, at: debug_show_all_locks+0x5f/0x27e [ 3008.410842] 3 locks held by rs:main Q:Reg/7823: [ 3008.415504] #0: 00000000f0a3193a (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xee/0x110 [ 3008.423471] #1: 000000004047c408 (rcu_read_lock){....}, at: perf_iterate_sb+0x0/0xa10 [ 3008.431557] #2: 0000000007153c34 (&sb->s_type->i_mutex_key#9){++++}, at: __generic_file_fsync+0xb5/0x200 [ 3008.441351] 1 lock held by rsyslogd/7825: [ 3008.445498] #0: 00000000baf8ff10 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xee/0x110 [ 3008.453456] 2 locks held by getty/7947: [ 3008.457437] #0: 000000009dda43ee (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 3008.465748] #1: 00000000e81a6639 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 3008.474768] 2 locks held by getty/7948: [ 3008.478797] #0: 0000000058e8b541 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 3008.487063] #1: 00000000e8bdaa34 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 3008.496984] 2 locks held by getty/7949: [ 3008.501066] #0: 000000008a55a202 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 3008.509829] #1: 00000000c9a01c0b (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 3008.518797] 2 locks held by getty/7950: [ 3008.522778] #0: 000000008241efa5 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 3008.531113] #1: 000000000c73b476 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 3008.540032] 2 locks held by getty/7951: [ 3008.544004] #0: 00000000fa6defda (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 3008.552300] #1: 000000008fa04b10 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 3008.561210] 2 locks held by getty/7952: [ 3008.565171] #0: 000000005fbe27d7 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 3008.573457] #1: 0000000005caba87 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 3008.582327] 2 locks held by getty/7953: [ 3008.586283] #0: 00000000425bf679 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 3008.594562] #1: 000000008b5ed664 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 3008.603458] 1 lock held by syz-executor.0/7988: [ 3008.608162] #0: 000000009b45241c (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2b94/0x79a0 [ 3008.616929] 1 lock held by syz-executor.1/7991: [ 3008.621668] #0: 000000009b45241c (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2b94/0x79a0 [ 3008.630533] 1 lock held by syz-executor.4/8000: [ 3008.635202] #0: 000000009b45241c (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2b94/0x79a0 [ 3008.644058] 1 lock held by udevd/8438: [ 3008.647941] #0: 000000009b45241c (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2b94/0x79a0 [ 3008.656763] 1 lock held by udevd/8445: [ 3008.660706] #0: 000000009b45241c (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2b94/0x79a0 [ 3008.669615] 1 lock held by syz-executor.5/26499: [ 3008.674371] #0: 000000008a3f1a40 (event_mutex){+.+.}, at: perf_trace_destroy+0x28/0x100 [ 3008.682825] 1 lock held by syz-executor.5/6295: [ 3008.687496] #0: 000000008a3f1a40 (event_mutex){+.+.}, at: perf_trace_destroy+0x28/0x100 [ 3008.695815] 1 lock held by syz-executor.3/14769: [ 3008.700639] #0: 000000009b45241c (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2b94/0x79a0 [ 3008.709511] 1 lock held by syz-executor.0/17612: [ 3008.714274] #0: 000000009b45241c (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2b94/0x79a0 [ 3008.723235] 5 locks held by syz-executor.5/18051: [ 3008.728233] #0: 000000001d8d7dd8 (&sig->cred_guard_mutex){+.+.}, at: __do_sys_perf_event_open+0x6e1/0x2690 [ 3008.738403] #1: 00000000361360a6 (&pmus_srcu){....}, at: perf_event_alloc.part.0+0xd56/0x2e00 [ 3008.747193] #2: 000000008a3f1a40 (event_mutex){+.+.}, at: perf_uprobe_init+0x1d0/0x290 [ 3008.755433] #3: 00000000d07c0cd7 (&uprobe->register_rwsem){+.+.}, at: __uprobe_register+0x3d3/0x7d0 [ 3008.764792] #4: 000000009b45241c (&dup_mmap_sem){++++}, at: percpu_down_write+0x6a/0x440 [ 3008.773197] 3 locks held by syz-executor.2/18060: [ 3008.778087] #0: 00000000b559c3ce (&sig->cred_guard_mutex){+.+.}, at: __do_sys_perf_event_open+0x6e1/0x2690 [ 3008.788078] #1: 00000000361360a6 (&pmus_srcu){....}, at: perf_event_alloc.part.0+0xd56/0x2e00 [ 3008.796865] #2: 000000008a3f1a40 (event_mutex){+.+.}, at: perf_trace_init+0x58/0x250 [ 3008.804941] [ 3008.806583] ============================================= [ 3008.806583] [ 3008.813804] NMI backtrace for cpu 0 [ 3008.817433] CPU: 0 PID: 1040 Comm: khungtaskd Not tainted 5.0.0-rc8+ #3 [ 3008.824178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3008.833519] Call Trace: [ 3008.836100] dump_stack+0x172/0x1f0 [ 3008.839731] nmi_cpu_backtrace.cold+0x63/0xa4 [ 3008.844341] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 3008.849286] nmi_trigger_cpumask_backtrace+0x1be/0x236 [ 3008.854566] arch_trigger_cpumask_backtrace+0x14/0x20 [ 3008.859760] watchdog+0x9df/0xee0 [ 3008.863217] kthread+0x357/0x430 [ 3008.866570] ? reset_hung_task_detector+0x30/0x30 [ 3008.871400] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 3008.876923] ret_from_fork+0x3a/0x50 [ 3008.880776] Sending NMI from CPU 0 to CPUs 1: [ 3008.885430] NMI backtrace for cpu 1 skipped: idling at native_safe_halt+0x2/0x10 [ 3008.886364] Kernel panic - not syncing: hung_task: blocked tasks [ 3008.899139] CPU: 0 PID: 1040 Comm: khungtaskd Not tainted 5.0.0-rc8+ #3 [ 3008.905884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3008.915228] Call Trace: [ 3008.917807] dump_stack+0x172/0x1f0 [ 3008.921451] panic+0x2cb/0x65c [ 3008.924655] ? __warn_printk+0xf3/0xf3 [ 3008.928550] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 3008.933728] ? printk_safe_flush+0xf2/0x140 [ 3008.938047] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3008.943575] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 3008.948491] ? nmi_trigger_cpumask_backtrace+0x1a7/0x236 [ 3008.953926] ? nmi_trigger_cpumask_backtrace+0x19e/0x236 [ 3008.959372] watchdog+0x9f0/0xee0 [ 3008.962823] kthread+0x357/0x430 [ 3008.966181] ? reset_hung_task_detector+0x30/0x30 [ 3008.971075] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 3008.976628] ret_from_fork+0x3a/0x50 [ 3008.981522] Kernel Offset: disabled [ 3008.985161] Rebooting in 86400 seconds..