[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 59.167133][ T27] audit: type=1800 audit(1574141003.647:25): pid=8775 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 59.188305][ T27] audit: type=1800 audit(1574141003.657:26): pid=8775 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 59.243426][ T27] audit: type=1800 audit(1574141003.657:27): pid=8775 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.45' (ECDSA) to the list of known hosts. 2019/11/19 05:23:33 fuzzer started 2019/11/19 05:23:35 dialing manager at 10.128.0.26:39077 2019/11/19 05:23:36 syscalls: 2566 2019/11/19 05:23:36 code coverage: enabled 2019/11/19 05:23:36 comparison tracing: enabled 2019/11/19 05:23:36 extra coverage: enabled 2019/11/19 05:23:36 setuid sandbox: enabled 2019/11/19 05:23:36 namespace sandbox: enabled 2019/11/19 05:23:36 Android sandbox: /sys/fs/selinux/policy does not exist 2019/11/19 05:23:36 fault injection: enabled 2019/11/19 05:23:36 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/11/19 05:23:36 net packet injection: enabled 2019/11/19 05:23:36 net device setup: enabled 2019/11/19 05:23:36 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/11/19 05:23:36 devlink PCI setup: PCI device 0000:00:10.0 is not available 05:25:47 executing program 0: 05:25:47 executing program 1: syzkaller login: [ 203.110695][ T8941] IPVS: ftp: loaded support on port[0] = 21 [ 203.260790][ T8941] chnl_net:caif_netlink_parms(): no params data found [ 203.310460][ T8944] IPVS: ftp: loaded support on port[0] = 21 05:25:47 executing program 2: [ 203.365369][ T8941] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.373338][ T8941] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.382991][ T8941] device bridge_slave_0 entered promiscuous mode [ 203.407766][ T8941] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.415786][ T8941] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.425637][ T8941] device bridge_slave_1 entered promiscuous mode [ 203.488291][ T8941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.528368][ T8941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.577630][ T8944] chnl_net:caif_netlink_parms(): no params data found [ 203.591738][ T8941] team0: Port device team_slave_0 added [ 203.603567][ T8941] team0: Port device team_slave_1 added [ 203.644741][ T8947] IPVS: ftp: loaded support on port[0] = 21 05:25:48 executing program 3: openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) prlimit64(r0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x3f, 0x3}, 0x0) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r2) close(0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000040)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @sint}]}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000000)={0x0, 0x10}) write$binfmt_elf32(r5, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) [ 203.713323][ T8941] device hsr_slave_0 entered promiscuous mode [ 203.751307][ T8941] device hsr_slave_1 entered promiscuous mode [ 203.796488][ T8944] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.811487][ T8944] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.831276][ T8944] device bridge_slave_0 entered promiscuous mode [ 203.880294][ T8944] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.887396][ T8944] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.911124][ T8944] device bridge_slave_1 entered promiscuous mode [ 203.955039][ T8949] IPVS: ftp: loaded support on port[0] = 21 05:25:48 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x550b, 0x0) [ 203.999331][ T8944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.016698][ T8944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.036652][ T8941] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 204.106861][ T8941] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 204.162720][ T8941] netdevsim netdevsim0 netdevsim2: renamed from eth2 05:25:48 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x141042, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x0, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, &(0x7f0000000000), 0x4) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) ioctl(r0, 0x1, &(0x7f0000000100)="814a") [ 204.297315][ T8944] team0: Port device team_slave_0 added [ 204.308063][ T8944] team0: Port device team_slave_1 added [ 204.316255][ T8941] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 204.417556][ T8947] chnl_net:caif_netlink_parms(): no params data found [ 204.468661][ T8951] IPVS: ftp: loaded support on port[0] = 21 [ 204.502348][ T8944] device hsr_slave_0 entered promiscuous mode [ 204.551027][ T8944] device hsr_slave_1 entered promiscuous mode [ 204.610401][ T8944] debugfs: Directory 'hsr0' with parent '/' already present! [ 204.653011][ T8947] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.661595][ T8947] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.663356][ T8953] IPVS: ftp: loaded support on port[0] = 21 [ 204.676102][ T8947] device bridge_slave_0 entered promiscuous mode [ 204.685900][ T8947] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.693879][ T8947] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.701997][ T8947] device bridge_slave_1 entered promiscuous mode [ 204.789872][ T8947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.828765][ T8944] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 204.903045][ T8947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.935779][ T8949] chnl_net:caif_netlink_parms(): no params data found [ 204.944847][ T8944] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 205.004106][ T8944] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 205.055713][ T8944] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 205.137382][ T8947] team0: Port device team_slave_0 added [ 205.145872][ T8947] team0: Port device team_slave_1 added [ 205.203781][ T8947] device hsr_slave_0 entered promiscuous mode [ 205.240639][ T8947] device hsr_slave_1 entered promiscuous mode [ 205.280217][ T8947] debugfs: Directory 'hsr0' with parent '/' already present! [ 205.407843][ T8941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.423428][ T8949] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.431117][ T8949] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.438829][ T8949] device bridge_slave_0 entered promiscuous mode [ 205.449540][ T8953] chnl_net:caif_netlink_parms(): no params data found [ 205.477151][ T8949] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.484653][ T8949] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.493711][ T8949] device bridge_slave_1 entered promiscuous mode [ 205.535622][ T8951] chnl_net:caif_netlink_parms(): no params data found [ 205.575982][ T8941] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.589746][ T8947] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 205.672132][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 205.684566][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 205.699893][ T8953] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.707619][ T8953] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.716838][ T8953] device bridge_slave_0 entered promiscuous mode [ 205.725118][ T8947] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 205.793401][ T8947] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 205.856385][ T8947] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 205.916289][ T8949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.929000][ T8949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.942816][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 205.951946][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 205.960628][ T3619] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.967830][ T3619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.976344][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 205.985324][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 205.996164][ T3619] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.003243][ T3619] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.011092][ T8953] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.018162][ T8953] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.026979][ T8953] device bridge_slave_1 entered promiscuous mode [ 206.048299][ T8953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.058795][ T8951] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.065983][ T8951] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.074382][ T8951] device bridge_slave_0 entered promiscuous mode [ 206.082583][ T8951] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.089626][ T8951] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.097860][ T8951] device bridge_slave_1 entered promiscuous mode [ 206.111278][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 206.124279][ T8953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.178381][ T8953] team0: Port device team_slave_0 added [ 206.186142][ T8953] team0: Port device team_slave_1 added [ 206.195596][ T8951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.210307][ T8951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.225176][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 206.235795][ T8949] team0: Port device team_slave_0 added [ 206.245124][ T8949] team0: Port device team_slave_1 added [ 206.313854][ T8953] device hsr_slave_0 entered promiscuous mode [ 206.382389][ T8953] device hsr_slave_1 entered promiscuous mode [ 206.421267][ T8953] debugfs: Directory 'hsr0' with parent '/' already present! [ 206.459893][ T8951] team0: Port device team_slave_0 added [ 206.472059][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 206.481166][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 206.489730][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 206.499564][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 206.508232][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 206.517528][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 206.526321][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 206.537536][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 206.566587][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 206.575876][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 206.653908][ T8949] device hsr_slave_0 entered promiscuous mode [ 206.700715][ T8949] device hsr_slave_1 entered promiscuous mode [ 206.760318][ T8949] debugfs: Directory 'hsr0' with parent '/' already present! [ 206.769393][ T8941] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 206.779145][ T8951] team0: Port device team_slave_1 added [ 206.872600][ T8951] device hsr_slave_0 entered promiscuous mode [ 206.922531][ T8951] device hsr_slave_1 entered promiscuous mode [ 206.960347][ T8951] debugfs: Directory 'hsr0' with parent '/' already present! [ 207.006602][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 207.014744][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 207.037702][ T8949] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 207.104500][ T8944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.118841][ T8941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.131454][ T8949] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 207.163388][ T8949] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 207.216348][ T8949] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 207.285437][ T8944] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.296720][ T8953] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 207.327677][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 207.338633][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 207.368836][ T8953] netdevsim netdevsim5 netdevsim1: renamed from eth1 05:25:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'nlmon\t\x00\x7f\xed\xb1[\xe5\xa3\xcd\xb6\x00'}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) pipe2$9p(&(0x7f0000000040), 0x4800) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 207.436048][ T8953] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 207.509356][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 207.547511][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 207.556660][ T8959] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.564142][ T8959] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.573084][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 207.582309][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 207.591372][ T8959] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.598826][ T8959] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.610549][ T8966] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 207.629173][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 207.638950][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 207.647392][ T8951] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 207.712760][ T8951] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 207.754212][ T8953] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 207.818914][ T8947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.841499][ T8951] netdevsim netdevsim4 netdevsim2: renamed from eth2 05:25:52 executing program 0: [ 207.882602][ T8951] netdevsim netdevsim4 netdevsim3: renamed from eth3 05:25:52 executing program 0: [ 207.996932][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 208.022513][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 208.032206][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 05:25:52 executing program 0: [ 208.044068][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 208.053447][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 208.062504][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 208.071629][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 208.085966][ T8947] 8021q: adding VLAN 0 to HW filter on device team0 05:25:52 executing program 0: [ 208.119970][ T8949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.140058][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 208.148671][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 208.165132][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 208.177089][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 208.188393][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 208.210666][ T8944] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 05:25:52 executing program 0: [ 208.242848][ T8949] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.252596][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 208.267844][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 208.278042][ T3619] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.285267][ T3619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.295351][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 208.304550][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 208.322216][ T3619] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.329388][ T3619] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.338124][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready 05:25:52 executing program 0: [ 208.346191][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 208.357321][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 208.421358][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 208.429498][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 208.454270][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 208.463403][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 208.472639][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 208.481853][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 208.490958][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 208.499973][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 208.508991][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.516154][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.547893][ T8944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.555902][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 208.566197][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 208.574645][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 208.582905][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 208.591604][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 208.601400][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 208.609782][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.616933][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.624881][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 208.633876][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 208.642380][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 208.659308][ T8953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.688436][ T8947] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 208.702489][ T8947] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 208.731345][ T8953] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.738247][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 208.753482][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 208.764822][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 208.775240][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 208.785071][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 208.796238][ T8951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.819456][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 208.837426][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 208.848171][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 208.857905][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 208.879469][ T8959] bridge0: port 1(bridge_slave_0) entered blocking state 05:25:53 executing program 1: [ 208.886665][ T8959] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.907717][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 208.917724][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 208.964853][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 208.982237][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 208.998222][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 209.006139][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 209.014437][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 209.023326][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 209.032163][ T3619] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.039227][ T3619] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.047891][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 209.057693][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 209.066117][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 209.074608][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 209.084117][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 209.093101][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 209.101852][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 209.115660][ T8947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.127879][ T8951] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.147305][ T8949] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 209.165648][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 209.216289][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 209.225604][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 209.240905][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 209.249756][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 05:25:53 executing program 2: [ 209.262794][ T2998] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.269897][ T2998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.279470][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 209.288955][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 209.298076][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 209.307843][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 209.320729][ T2998] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.327815][ T2998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.340061][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 209.348519][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 209.385604][ T8949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.397885][ T8953] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 209.409463][ T8953] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 209.426776][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 209.435755][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 209.444462][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 209.455436][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 209.464960][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 209.473989][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 209.482950][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 209.490735][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 209.498251][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 209.507111][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 209.516062][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 209.523883][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 209.551503][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 209.562092][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 209.573676][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 209.582561][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 209.591832][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 209.600851][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 209.611368][ T8951] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 209.630182][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 209.637698][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 209.669339][ T8953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.682504][ T8958] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 209.691453][ T8958] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 209.705266][ T8951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.980103][ C1] hrtimer: interrupt took 46542 ns [ 210.252214][ T9011] EXT4-fs warning (device sda1): ext4_block_to_path:105: block 1838172801 > max in inode 16541 05:25:54 executing program 1: 05:25:54 executing program 0: 05:25:54 executing program 2: 05:25:54 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x550b, 0x0) 05:25:54 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x141042, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x0, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, &(0x7f0000000000), 0x4) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) ioctl(r0, 0x1, &(0x7f0000000100)="814a") 05:25:54 executing program 3: openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) prlimit64(r0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x3f, 0x3}, 0x0) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r2) close(0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000040)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @sint}]}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000000)={0x0, 0x10}) write$binfmt_elf32(r5, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 05:25:55 executing program 2: openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) prlimit64(r0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x3f, 0x3}, 0x0) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r2) close(0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000040)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @sint}]}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000000)={0x0, 0x10}) write$binfmt_elf32(r5, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 05:25:55 executing program 1: openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) prlimit64(r0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x3f, 0x3}, 0x0) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r2) close(0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000040)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @sint}]}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000000)={0x0, 0x10}) write$binfmt_elf32(r5, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 05:25:55 executing program 4: 05:25:55 executing program 0: 05:25:55 executing program 0: 05:25:55 executing program 0: [ 211.095620][ T9031] EXT4-fs warning (device sda1): ext4_block_to_path:105: block 1838172801 > max in inode 16534 05:25:55 executing program 4: 05:25:55 executing program 0: 05:25:55 executing program 5: 05:25:56 executing program 4: 05:25:56 executing program 0: 05:25:56 executing program 3: 05:25:56 executing program 2: 05:25:56 executing program 1: 05:25:56 executing program 5: 05:25:56 executing program 4: 05:25:56 executing program 0: 05:25:56 executing program 3: 05:25:56 executing program 2: 05:25:56 executing program 4: 05:25:56 executing program 5: 05:25:56 executing program 1: 05:25:56 executing program 0: 05:25:56 executing program 3: 05:25:56 executing program 2: 05:25:56 executing program 4: 05:25:56 executing program 5: 05:25:56 executing program 3: 05:25:56 executing program 0: 05:25:56 executing program 1: 05:25:56 executing program 2: 05:25:56 executing program 4: 05:25:57 executing program 3: 05:25:57 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404d110}, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x8, 0x1a, [{0x4, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x400000000000000}, 0x0) 05:25:57 executing program 5: 05:25:57 executing program 0: 05:25:57 executing program 2: 05:25:57 executing program 3: 05:25:57 executing program 4: 05:25:57 executing program 0: 05:25:57 executing program 5: 05:25:57 executing program 2: 05:25:57 executing program 3: [ 212.942158][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 05:25:57 executing program 4: 05:25:57 executing program 0: [ 213.052300][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 213.122516][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 05:25:57 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404d110}, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x8, 0x1a, [{0x4, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x400000000000000}, 0x0) 05:25:57 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x30f, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000006f0081aee405e9a4000000000000c6ff07d8000b0300"/35, 0x23}], 0x1}, 0x0) 05:25:57 executing program 3: 05:25:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'nlmon\t\x00\x7f\xed\xb1[\xe5\xa3\xcd\xb6\x00'}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) pipe2$9p(&(0x7f0000000040), 0x4800) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000000)={0x2, 0x2, [@local, @random="1484883fd015"]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 05:25:57 executing program 4: 05:25:57 executing program 0: 05:25:57 executing program 3: 05:25:57 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000000802, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1b) write(r0, 0x0, 0x0) 05:25:57 executing program 0: msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000240)=""/253) 05:25:58 executing program 2: syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') 05:25:58 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000700)={'team0\x00\x00\x00\x00\x00\x00\x00\xf7\x00', @local}) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000700)={'team0\x00\x00\x00\x00\x00\x00\x00\xf7\x00', @broadcast}) [ 213.541150][ T9144] kvm: pic: non byte read [ 213.556537][ T9150] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 213.569597][ T9144] kvm: pic: non byte write [ 213.624164][ T9144] kvm: pic: non byte read [ 213.643851][ T9144] kvm: pic: non byte write [ 213.655647][ T9150] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 213.666194][ T9144] kvm: pic: non byte read 05:25:58 executing program 0: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x14, &(0x7f0000000200)=r1, 0x9cd) [ 213.673239][ T9150] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 213.706033][ T9144] kvm: pic: non byte write [ 213.732380][ T9144] kvm: pic: non byte read [ 213.745219][ T9144] kvm: pic: non byte write [ 213.766311][ T9144] kvm: pic: non byte read [ 213.784340][ T9144] kvm: pic: non byte write [ 213.797485][ T9144] kvm: pic: non byte read [ 213.807851][ T9144] kvm: pic: non byte write [ 213.817753][ T9144] kvm: pic: non byte read [ 213.827093][ T9144] kvm: pic: non byte write [ 213.836810][ T9144] kvm: pic: non byte read [ 213.841645][ T9144] kvm: pic: non byte write [ 213.846514][ T9144] kvm: pic: non byte read [ 213.851563][ T9144] kvm: pic: non byte write [ 213.856466][ T9144] kvm: pic: non byte read [ 213.861523][ T9144] kvm: pic: non byte write [ 213.884477][ T9144] kvm: pic: single mode not supported [ 213.884536][ T9144] kvm: pic: level sensitive irq not supported 05:25:58 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)}, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1dc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00', 0x1132}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000300)) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000680)={0x0, 0x7, 0xc}, 0xc) socket$kcm(0xa, 0x3, 0x11) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x7, &(0x7f0000000200), 0x9ebe5b9d47df9f2d) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00', 0x1132}) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000180)=@nl, 0x80, &(0x7f00000002c0)=[{&(0x7f00000003c0)}, {&(0x7f00000007c0)="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", 0xab2}, {0x0}, {&(0x7f0000000480)="4ad5342a83f8d8c683469bf7fa00b406531bb2377cd80e94b059feb0469141f32ffae522bb8e6c7e960611a21547151cf67e235d4da0be75e09b7c8cd1b7a4c5fb64d7e6e96c067b4fca2a1ef65158aba6e39a1b011fb0439b0abbe8b28eed77500a818367c91a2f1ae9de0efb9ece4045416a9ec6e223bb672a55fbdbb555598cb4d8d59b7c6764da8de2b45f4a33c94775a4696d3cd576a9f17a97069781ad75c9f8430fdad6d2ed74250d7bb51e957628a736698b2f4cfa", 0xb9}, {&(0x7f0000000540)="e53928f7fbd02018acc65875bb332f3fb8e5640e3cd764bb48eebabe4cb7693dc5846e0d00c75ffb8eb396a831425ea7b1515411ccbf0f3a8d47da3e10ca3970d6727b4dbfd593a5e1b148072a7ce95cbf9c6b5b984de7d285ec59ddb2e5183daa86dea7e2b1a8ad006b5fedf2b130e8894a5d3fe97829af4d581e21c2eb3a25c779c7bf9c6c3fe6353fd841d43dcc39", 0x90}, {0x0}], 0x6}, 0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00', 0x1132}) ioctl$TUNGETVNETHDRSZ(r3, 0x800454d7, &(0x7f0000000700)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x2c}, {0x6}]}) 05:25:58 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404d110}, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x8, 0x1a, [{0x4, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x400000000000000}, 0x0) 05:25:58 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r2 = gettid() tkill(r2, 0x10010000000035) 05:25:58 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@ccm_128={{0x304}, "21a32f57339067cd", "95eeffff64b26f000000000000c000", "c2d9d7b5", "0368d5bf12842bc1"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffff7f, 0x0, 0x0, 0x0) 05:25:58 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0}) [ 214.136097][ T9168] device team0 entered promiscuous mode [ 214.159810][ T9168] device team_slave_0 entered promiscuous mode [ 214.199331][ T9168] device team_slave_1 entered promiscuous mode [ 214.209903][ T9168] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.335579][ T9182] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 214.419244][ T9182] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 214.432936][ T9182] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 05:25:59 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@ccm_128={{0x304}, "21a32f57339067cd", "95eeffff64b26f000000000000c000", "c2d9d7b5", "0368d5bf12842bc1"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffff7f, 0x0, 0x0, 0x0) 05:25:59 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x23, &(0x7f0000000080)={@rand_addr="f2b4deefa010a59fe25bac80f36f805a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000}, 0x20) 05:25:59 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[@ANYRES32], 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r1, 0x104, 0x1, &(0x7f0000000100), 0x4) 05:25:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() lseek(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'nlmon\t\x00\x7f\xed\xb1[\xe5\xa3\xcd\xb6\x00'}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)={0x2, 0x1, [@local]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:25:59 executing program 1: unshare(0x2000400) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0xaf01, 0x0) r1 = dup(r0) ioctl$TIOCSTI(r1, 0x5412, 0xfffffffffffffff7) 05:25:59 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) dup2(r0, r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f0000000400)=ANY=[], 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000600)) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x5) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r3, r4, 0x0, 0x1) dup(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) dup(0xffffffffffffffff) 05:25:59 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x6609, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000c1c0)={0x16, 0x16, &(0x7f0000000a00)=ANY=[@ANYBLOB="86000000000000fbde50b472b79800b2165300000100000000008ac6c730d711295ef58a609fdc853ba0aa071904a4fcba08f11a9a958c1734a90b327e35a0fb91a0a1d9b9f461f68a0ce65723927cf8dbe77a0524937015ee61159fbfcf24f213014bd22a1a691b13e16659aa7339000749c62872d16af06cd3614e477ddf300bb299c09497a962ea58de122b5984cc1bc6406e47f1da1e18076aea11cc61794798165d64700e182c4c1cbf2084101ca2"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000c140)={0x6, 0x7}, 0x8, 0x10, 0x0}, 0x70) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="9506bb134702cec9c5c605da4be46c9cea26bfdbb788ab76e768ee67adc075cdf36a4eb2857407f66e3181a76b869e7be9f1d7e8000000009e55c32146e6f2f74c1fbf98eccbb2fe23a52714df42b3be580e6c0810c03c06b34f356ef9ca3fe5928ab8618de169707ce965e3725d5eea0ce8edd1a1e4aa"], &(0x7f0000000080)='GPL\x00', 0xfffffff8, 0xdc, &(0x7f00000002c0)=""/220, 0x40f00, 0x2, [], 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x7}, 0x8, 0x10, 0x0}, 0x70) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000500)=@hci={0x1f, 0x0, 0x2}, 0x80, 0x0, 0x0, 0x0, 0x13308726d82294c4}, 0x50000c0) socket$kcm(0xa, 0x2, 0x73) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000028c0)='cpu.stat\x00', 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) socket$kcm(0x29, 0x2, 0x0) openat$cgroup_ro(r1, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x2761, 0x0) socket$kcm(0x29, 0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x6000000000000, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000440)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') [ 214.888523][ T9223] kvm: pic: level sensitive irq not supported [ 214.889189][ T9223] kvm: pic: single mode not supported [ 214.895598][ T9223] kvm: pic: level sensitive irq not supported [ 215.053542][ T9241] BPF:hdr_len not found [ 215.161434][ T9238] device lo entered promiscuous mode 05:26:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x2, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:26:00 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80030, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x400000) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x400000) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={0xffffffffffffffff, r3, 0x29, 0x2}, 0x10) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.stet\x00', 0x26e1, 0x0) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x32600) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0)=r4, 0x161) sendmsg$kcm(r5, &(0x7f0000000540)={&(0x7f0000000380)=@in={0x2, 0x4e23, @rand_addr=0x7fffffff}, 0x80, 0x0}, 0xfd00) r7 = gettid() perf_event_open(0x0, r7, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140)=r7, 0x12) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000001800)='\\wlan1}lo(cgroup]\x00') write$cgroup_subtree(r5, &(0x7f0000000280)={[{0x0, 'memory'}]}, 0xfdef) r8 = socket$kcm(0x11, 0x2, 0x0) socket$kcm(0x29, 0x4, 0x0) r9 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r9, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x1, 0x1, "336ff3a0"}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r9, 0x107, 0x12, &(0x7f00000000c0)=r8, 0x10000007b) socket$kcm(0x2, 0x0, 0x0) 05:26:00 executing program 3: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x1, &(0x7f0000000100), 0x4) 05:26:00 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) dup2(r0, r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f0000000400)=ANY=[], 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000600)) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x5) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r3, r4, 0x0, 0x1) dup(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) dup(0xffffffffffffffff) 05:26:00 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x6609, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000c1c0)={0x16, 0x16, &(0x7f0000000a00)=ANY=[@ANYBLOB="86000000000000fbde50b472b79800b2165300000100000000008ac6c730d711295ef58a609fdc853ba0aa071904a4fcba08f11a9a958c1734a90b327e35a0fb91a0a1d9b9f461f68a0ce65723927cf8dbe77a0524937015ee61159fbfcf24f213014bd22a1a691b13e16659aa7339000749c62872d16af06cd3614e477ddf300bb299c09497a962ea58de122b5984cc1bc6406e47f1da1e18076aea11cc61794798165d64700e182c4c1cbf2084101ca2"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000c140)={0x6, 0x7}, 0x8, 0x10, 0x0}, 0x70) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="9506bb134702cec9c5c605da4be46c9cea26bfdbb788ab76e768ee67adc075cdf36a4eb2857407f66e3181a76b869e7be9f1d7e8000000009e55c32146e6f2f74c1fbf98eccbb2fe23a52714df42b3be580e6c0810c03c06b34f356ef9ca3fe5928ab8618de169707ce965e3725d5eea0ce8edd1a1e4aa"], &(0x7f0000000080)='GPL\x00', 0xfffffff8, 0xdc, &(0x7f00000002c0)=""/220, 0x40f00, 0x2, [], 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x7}, 0x8, 0x10, 0x0}, 0x70) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000500)=@hci={0x1f, 0x0, 0x2}, 0x80, 0x0, 0x0, 0x0, 0x13308726d82294c4}, 0x50000c0) socket$kcm(0xa, 0x2, 0x73) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000028c0)='cpu.stat\x00', 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) socket$kcm(0x29, 0x2, 0x0) openat$cgroup_ro(r1, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x2761, 0x0) socket$kcm(0x29, 0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x6000000000000, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000440)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') 05:26:00 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)}, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1dc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00', 0x1132}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000300)) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000680)={0x0, 0x7, 0xc}, 0xc) socket$kcm(0xa, 0x3, 0x11) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x7, &(0x7f0000000200), 0x9ebe5b9d47df9f2d) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00', 0x1132}) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000180)=@nl, 0x80, &(0x7f00000002c0)=[{&(0x7f00000003c0)}, {&(0x7f00000007c0)="e7bd4e771f31aa4c340a6cd87a64fd0b247cd142b295573d8aca99885930124c50ae35897414967a23369c79b970aefbacaf592f483a36dc0f02534fd71c1ecf3eba6d12ecaf0cbebe8c523673da70ab3335bf376e6e5d7debf1c3929503d5ec6f881ea81e428ec9381aaf35dc5813145ec195f863eb4e53db4a2b996a88ef269af0d97de68a9005d529e9d1329eb0f4725ab326977b0cb6052d853b45ac251c8abf6ee6fcd157d7b061d33fcec3ec0a78b3578fa071be4687a67c0532015e3bed63d43cb7fc104e3429831b3766337084d8360dc2d8a299840e1b1c0078e316307d6e8e21114955bf0a7b984b710bd5efcf5178129bc9b6950954727ba2d6d04142e9e161230ea4999c70b85086f033bb34d228edd3257eb4001c6aaacffef653038e232f38efcc96336a5a50e41ba01be75ababcfab742f827c19406bc25c328d25bbcefb74f7fe5dce539aa309fc2fd19322ff2195c503a53c4c2f1763df8e8d3c41ea7490a885a886af35f4904973d80b7950a495763deff8a15b7a104b5ae4a5ce3def0c06c80dbfeb990ac74df49824ab9d71439244d43e72cc773c71d2d8128bb9372d11b69d794ee9166d9c8b94af70957f27670b046fce8710e67472b6519a9fe11f10f4a0faaf93a8c2f0339de0955122d64d554adc2cd807cd97fe19509631821143bfd3f714eb4a8cecdb54afe7849434043ec32d22941081457c718f5679b7c5c343d5655ca46aadf3f8d8b96d93bb2115836ae2d135dc07dd63c3bad3c8c73139616ac00ec73dc605cefce14bb91626709232c37722601b277d1f14a423d0feae9701c5ae85963e65850c2df7459a03383934d865352601c87804c9151609c65915ba62b3f27ef826275ba1576b4fe879553f411c3247296554672092ba9a0c47a9a7b784386669db064077aa51e14cdd06ed42bd5d5af7cb39ab7943668e3d2f8b09f795b06371ffb53edb9972af0efbc0d2d6929f267524850d8f3164be6bcae8a607cd8418523c608c15e7c954c64cc5976a814822ab3caf3135cefdfa33339fe3e7ef46c31704cda94bca0df24d71a68837bb6fad9c4598d2430fa4aa01bf0a5c072a1ec2d138d0a1ea795d859c3e3dbba5b87cca4e6cca262c84dd54b014582baca6479903002af73496f152f0d98a532c8016457f291d95e5c36cddab827149ec483e432d7a247236a5cde07c680f2c48ed58a3034289b3aa440986845cc200305d7da4393d8bb52757e25851b19917811d50f26e5d66503dd45aea3ca1ec8be4e61a73f12b13ca02dc62661e3bca15b0f7f00ab29c583bfc3695c6d93b3ad540dd60575727acdcce68750c5340d4c75616ad2443007ce170b60e034784a457721c973f7fe90c8076dfd60a34a9bad1575337a453ad21164a43c6d56b8e4a8572f39c1f70afc4c3ecc330319c8807ce66a4668344f9ecd02504f13b14041f2fc720c1cd3a27ea4842d88edc011cc37a1a9e3b054743ef323c8a5a6ca690df285b39614fba720abacb7db7b392055f244874be153101197b8d76190296b0bd816807ca93324a8dbd8d6a57a0d1ea459e7c7068cf8899eba3d8b05d93a3b04d6478fd5806a6fc2b33113dff3a9c17c7b4d166297571ad013698f02f2391c31c5926484b17082d5a47abe6ea716aded4b003075635ab7e4a386e36ad6104a53d8fc4469e3e7037a8863341d0a90f1260034a7603622fcf2c75f1e4624b55690b477b5895a55a6a5c1e48ebf5f68c9cc3e563a453b094c4503d233179e241ee5162659fb9917f69ed98b0ac2503a2627b9d32d05e83daaa5b4e0743517d612781ff542717d8730a28b87997a3f036d4d6f5c2664736f1cf256989b786faa6e9c2cb47aea69d41b7dff51a05ef10b96c2839b9a35c0c7c59b33079b977eaf721e937139f47c519feaa65459b7856844d38e53cc7a566e8cb2cc0cd3204695fec365cc88b4339f8693bd61d2645f9c1e16be31cf5b7a673712247b7fe82af4ef433645b290f2c85ac9435cd8a432ffd1c1638e94c8dba4015c3300b08b495f3dc18c108315a73afcfe080de3c1729d903d1867d1cf99170f9fb42ca3cc86505d1129050b81a4cafab8453cdd43cc3fcfe808c54dc4af3f2b0ca89e293d632986928a8db8e2844dbb88e53099597882e0c04125a659a6c3dd7a5e9df5662fe4edd47cc6a9337b5bb878719a68c5fb4ce45eee816014b5ad8effba97e87aafb84db3c59025995b72ffe5fac496fb1cb9451cb1a1e7f430a3a62ce2a48e0db4aaef3f1ab3d45b2dcbc411d9003b9fb14630ef05feb7a129cbf06dedf7a46c68c5a936d0005fe94ef8ec3036f994c1e1576135650eb03808a8dd79b78607792ec8aa109c72c7e3572287e2bedc56fb224b4ae188be9193e302daf1821bbd68ce9d0baad7e40a3dfb004cdc340aa62a99680497a854160f0d30d9b73b9313bdfcada16785a73c523908d9c3d1c70c977547ccd85f4068a3d9bf9a0e22d43fcf7de970957b6d4aff353215d086670dd1531017d192bb021c3d3b325f0fc89b6f6ac3d5b8bc858f8941aa3d65dd92bb00f7210aee082327e055784d7fd78fe18c7b51dc99d6a30bbb6a5c5350e3485747e278858c0a00d660a3a8b703b72ddc341f3a9f5b430a9c810c274280b8ec66df48dbd2a91248b9bd99d77078f24e365276c3bf4fe547703528596e7bf48771e36fd6131992f664d3586aeb43c9d172036b4ff38deadff8190d2326ddcb57e4f884c58b2eac36a888aa1cbdbbea5a74d5aa9569de53c1b30de583ed8146dbd243d1127199fda35e61ab88b219e9082aecbf972c6a6331084aaf94c497180ef7725a1ac460985403b6b9701bfe3f51b0368b658b031e11d05b6c3388de6afa7971cf4eaad4230f3626a4368e48d136f3573191d2a4e215d0aa56393a3a6cf38a0d0cfb00ee1f8e5428a1504af191815e4150543234f413a5ccaa503193bcb5d3aecb4a3ae55f2468bbfb9568fcef0d85ba71690b0f1ac2e25bad5e319d34518754b6fffae081e9644345e9a1a01dae5396c336af4e70bc7b34195150e2135b13319e5a22add1465b25e3b7592812dd01209cbc89d8aab790c046584fe6075fcd8ebdb06ca52ed1d429bdb3500881596599a37404a5e18191d5546f2e97bb25f9251cda856fdc0a63dcd9d5f0da78ea473a097a49419a5d8dad5a98b9e9127dc90b4420cd9178146a11f38d0d7c1d1f88253a052a60d25f375ad84052d9db954cd381d64713c1afa4b45e46250bfa2863470edbf881b82e4d3127f112c35277608dbf36287bf8f825deda30f076cd80b086bbae6285955ce08e307b141cb99d18d4891d2d92745cb77e8b455e5368fb8550973be0b552a9239ded1066ee64fcded8cb883b9dca1cde1f97e0bd4066d0c0f1188cb8b7661073a5ee824f7e32d9ae4bb7cd24b772979dd1ac66d12871f5e78e837bf3f850dd01c68236073c706924e499214993d880183368fd5b0714e394ecc85c0cafafcb53e050ff3309f4e839ad74761d17ee9b3e2badc4e821e6f2786fe9dc2a6ab64d3f8b364850e561eaceb7111d94dc38ff30e51746db82bb8481355b38aeb770712d7735196ad9d401180deac533d7967ae8e27796fc3d344f6bf768ebb49ad575bd89374bc86be6cc6c345a7f74f6251790f8bad90afbcb7d642024eca08cac0142d5729fc70985c4f20ba07f0efada991299fe4c7a536d69d4a33914204ca345b823b21424c94de16c559f420f04c588d0c8d37c58372557540f6a9d2d1db39ac73559d21a2a34f1decdec197ad745ba3915f63874e0ff901aff9fea0218cb17644821ddfa8ddd45a3b2d9bd60521db898fc5bea33f64af624954da4316356bbdcc691999b90589b", 0xab2}, {0x0}, {&(0x7f0000000480)="4ad5342a83f8d8c683469bf7fa00b406531bb2377cd80e94b059feb0469141f32ffae522bb8e6c7e960611a21547151cf67e235d4da0be75e09b7c8cd1b7a4c5fb64d7e6e96c067b4fca2a1ef65158aba6e39a1b011fb0439b0abbe8b28eed77500a818367c91a2f1ae9de0efb9ece4045416a9ec6e223bb672a55fbdbb555598cb4d8d59b7c6764da8de2b45f4a33c94775a4696d3cd576a9f17a97069781ad75c9f8430fdad6d2ed74250d7bb51e957628a736698b2f4cfa", 0xb9}, {&(0x7f0000000540)="e53928f7fbd02018acc65875bb332f3fb8e5640e3cd764bb48eebabe4cb7693dc5846e0d00c75ffb8eb396a831425ea7b1515411ccbf0f3a8d47da3e10ca3970d6727b4dbfd593a5e1b148072a7ce95cbf9c6b5b984de7d285ec59ddb2e5183daa86dea7e2b1a8ad006b5fedf2b130e8894a5d3fe97829af4d581e21c2eb3a25c779c7bf9c6c3fe6353fd841d43dcc39", 0x90}, {0x0}], 0x6}, 0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00', 0x1132}) ioctl$TUNGETVNETHDRSZ(r3, 0x800454d7, &(0x7f0000000700)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x2c}, {0x6}]}) 05:26:00 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000040)) 05:26:00 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80030, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x400000) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x400000) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={0xffffffffffffffff, r2, 0x29, 0x2}, 0x10) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.stet\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001700)={&(0x7f0000000300)='./file0\x00'}, 0x10) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x161) sendmsg$kcm(r4, &(0x7f0000000540)={&(0x7f0000000380)=@in={0x2, 0x4e23, @rand_addr=0x7fffffff}, 0x80, 0x0}, 0xfd00) r5 = gettid() perf_event_open(0x0, r5, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140)=r5, 0x12) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000001800)='\\wlan1}lo(cgroup]\x00') write$cgroup_subtree(r4, &(0x7f0000000280)={[{0x0, 'memory'}]}, 0xfdef) r6 = socket$kcm(0x11, 0x2, 0x0) socket$kcm(0x29, 0x0, 0x0) r7 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r7, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x0, 0x1, "336ff3a0"}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0x12, &(0x7f00000000c0)=r6, 0x10000007b) socket$kcm(0x2, 0x0, 0x0) 05:26:01 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80030, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x400000) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x400000) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={0xffffffffffffffff, r3, 0x29, 0x2}, 0x10) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.stet\x00', 0x26e1, 0x0) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x32600) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0)=r4, 0x161) sendmsg$kcm(r5, &(0x7f0000000540)={&(0x7f0000000380)=@in={0x2, 0x4e23, @rand_addr=0x7fffffff}, 0x80, 0x0}, 0xfd00) r7 = gettid() perf_event_open(0x0, r7, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140)=r7, 0x12) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000001800)='\\wlan1}lo(cgroup]\x00') write$cgroup_subtree(r5, &(0x7f0000000280)={[{0x0, 'memory'}]}, 0xfdef) r8 = socket$kcm(0x11, 0x2, 0x0) socket$kcm(0x29, 0x4, 0x0) r9 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r9, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x1, 0x1, "336ff3a0"}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r9, 0x107, 0x12, &(0x7f00000000c0)=r8, 0x10000007b) socket$kcm(0x2, 0x0, 0x0) 05:26:01 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80030, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x400000) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x400000) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={0xffffffffffffffff, r3, 0x29, 0x2}, 0x10) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.stet\x00', 0x26e1, 0x0) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x32600) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0)=r4, 0x161) sendmsg$kcm(r5, &(0x7f0000000540)={&(0x7f0000000380)=@in={0x2, 0x4e23, @rand_addr=0x7fffffff}, 0x80, 0x0}, 0xfd00) r7 = gettid() perf_event_open(0x0, r7, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140)=r7, 0x12) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000001800)='\\wlan1}lo(cgroup]\x00') write$cgroup_subtree(r5, &(0x7f0000000280)={[{0x0, 'memory'}]}, 0xfdef) r8 = socket$kcm(0x11, 0x2, 0x0) socket$kcm(0x29, 0x4, 0x0) r9 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r9, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x1, 0x1, "336ff3a0"}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r9, 0x107, 0x12, &(0x7f00000000c0)=r8, 0x10000007b) socket$kcm(0x2, 0x0, 0x0) 05:26:01 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x373, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) pipe2(0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f00000000c0)="8174ae688e1800a01f16d921576a769f", 0x10) r0 = getpid() tkill(r0, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) 05:26:01 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, 0x0) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0xff00) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040), 0x10) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 05:26:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x2) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'nlmon\t\x00\x7f\xed\xb1[\xe5\xa3\xcd\xb6\x00'}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)={0x2, 0x2, [@local, @random="1484883fd015"]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:26:02 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x373, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) r0 = getpid() tkill(r0, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) 05:26:02 executing program 1: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x3ad, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x1}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f00000000c0)=0x3) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000006c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6\xf23F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0_\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\xa9\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&k\x80K\xd1>\xa6\xff(\xb1\x01\xe7\xa5\xce-A\xb0\xec\x190r-q\x83\xb3mN\x91\'\xc5\xf8\xfe\x18\x16\xb7R6\xa9R\xf4H\xa7\x84\x98\xfc\xf9\xa6\xd6\x8d\xa7\xd5_\xc0\x93\xde\x1f`\xff\xcf\xe1)N\x85&\x8b\x06I\xa2\x13\x02\x00\x00\x00\x00\x00\x00\x00[\xae5\x82}\xb7h!\xd9\xce\xe9\x06\b\rs^\x8d\x14\xc1\x97m@6\x1d\xfc\x92@-\xb6\xe5N\x84\xbc\xc0\x1f\xfbI\'M\xdd\xc6*\x06&\f\b\xa6\x92)D}\x87\x80\xea\xb9l\x80H\xea\x82o6\xfa)\x15\xdc@\xf4\x86\xd6_\xf9+/Q\xd5\x8a;\x8b\xe1\x1d\xd0\xec\x8ek\xdb\xa8\xf3Ir\xdb1`B&\xe8A\xd1\xea\xb4$5%aL\xc1\xbd\x91\xc3\x90\x06i <1\xaa\"\xd5\xbb\xe9\xc7SX\xbfm{>\xd4\xc3(E[\xb0J13\xbbG\x8a\xb4\x8aMs\x9f\xcf\xb8g\xab\x12\x8cj\x95}\xb1\bc\xc4u\xf4\xe2\x88\xfa\xde\xec\xdf\xb9\x98\x84\x028\xd9_n\x9f\x86\x88\xe6\x15b\x01]\x01a\xe7\xb9\xb0\xbdk\xaa\xa1\xc1') ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000d8, 0x0, 0x0, 0xfffffffffffffd6a) 05:26:02 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x5aeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0xaf01, 0x0) r1 = dup(r0) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f00000000c0)) [ 217.789386][ T9329] device nr0 entered promiscuous mode 05:26:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'nlmon\t\x00\x7f\xed\xb1[\xe5\xa3\xcd\xb6\x00'}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)={0x2, 0x1, [@local]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:26:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x2) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'nlmon\t\x00\x7f\xed\xb1[\xe5\xa3\xcd\xb6\x00'}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)={0x2, 0x1, [@local]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:26:02 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400000000}, 0x20) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xffc7}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0100000000000000280012000c0001007665746800000000ececfac5e025573fb5926c7ae92af81800020814a79f7488f611d01cb85041b7f809000000004600006df0840107d3c3bc1747ef4939dd822dafd6037136a70f304dbcdee66ed673df5c98c00033e06a14e3b513ef72364106b249dd59b35aafee80aa0a9b2e3bbfb4941d2ed7d7fc3c3dae0a3a354339e3572311b364ba77c4e343d199812b3862a78324fd19d159913729e3afec87ff2f99746c2aed6d90fff50cc840305b5f78eae0", @ANYRES32=0x0, @ANYBLOB="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"], 0x5}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68]}, @dev, @local}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000140)={@local, @rand_addr="6409c0b80e989ba29fb30dc012b97603", @ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400003}) 05:26:02 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x6, &(0x7f0000000080)={@rand_addr="f2b4deefa010a59fe25bac80f36f805a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000}, 0x20) 05:26:02 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x5aeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0xaf01, 0x0) r1 = dup(r0) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f00000000c0)) 05:26:02 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x6, &(0x7f0000000080)={@rand_addr="f2b4deefa010a59fe25bac80f36f805a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000}, 0x20) 05:26:03 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x6, &(0x7f0000000080)={@rand_addr="f2b4deefa010a59fe25bac80f36f805a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000}, 0x20) [ 218.557573][ T9342] picdev_read: 238 callbacks suppressed [ 218.557597][ T9342] kvm: pic: non byte read [ 218.570271][ T9342] kvm: pic: non byte read [ 218.575741][ T9342] picdev_write: 222 callbacks suppressed [ 218.575758][ T9342] kvm: pic: non byte write [ 218.588167][ T9342] kvm: pic: non byte read [ 218.604546][ T9342] kvm: pic: non byte write [ 218.616825][ T9342] kvm: pic: non byte read [ 218.628171][ T9342] kvm: pic: non byte write [ 218.647821][ T9342] kvm: pic: non byte read [ 218.653351][ T9342] kvm: pic: non byte write 05:26:03 executing program 2: [ 218.659707][ T9342] kvm: pic: non byte read [ 218.676494][ T9342] kvm: pic: non byte write [ 218.701231][ T9342] kvm: pic: non byte read 05:26:03 executing program 0: [ 218.735790][ T9342] kvm: pic: non byte write 05:26:03 executing program 3: [ 218.760395][ T9342] kvm: pic: non byte read [ 218.790953][ T9342] kvm: pic: non byte write [ 218.831148][ T9329] device nr0 entered promiscuous mode [ 218.848951][ T9342] kvm: pic: non byte read [ 218.862948][ T9342] kvm: pic: non byte write [ 218.888104][ T9342] kvm: pic: non byte read [ 218.904742][ T9342] kvm: pic: non byte write [ 218.919862][ T9342] kvm: pic: non byte write [ 218.998485][ T9342] kvm: pic: level sensitive irq not supported [ 219.004338][ T9342] kvm: pic: single mode not supported [ 219.011087][ T9342] kvm: pic: level sensitive irq not supported 05:26:04 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'nlmon\t\x00\x7f\xed\xb1[\xe5\xa3\xcd\xb6\x00'}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)={0x2, 0x1, [@local]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:26:04 executing program 2: 05:26:04 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x6, &(0x7f0000000080)={@rand_addr="f2b4deefa010a59fe25bac80f36f805a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000}, 0x20) 05:26:04 executing program 3: 05:26:04 executing program 0: 05:26:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'nlmon\t\x00\x7f\xed\xb1[\xe5\xa3\xcd\xb6\x00'}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)={0x2, 0x1, [@local]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:26:04 executing program 4: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000080)={@rand_addr="f2b4deefa010a59fe25bac80f36f805a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000}, 0x20) 05:26:04 executing program 0: 05:26:04 executing program 3: 05:26:04 executing program 2: 05:26:04 executing program 3: 05:26:04 executing program 4: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000080)={@rand_addr="f2b4deefa010a59fe25bac80f36f805a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000}, 0x20) 05:26:04 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'nlmon\t\x00\x7f\xed\xb1[\xe5\xa3\xcd\xb6\x00'}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)={0x2, 0x1, [@local]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:26:04 executing program 2: 05:26:04 executing program 0: 05:26:04 executing program 3: 05:26:04 executing program 4: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000080)={@rand_addr="f2b4deefa010a59fe25bac80f36f805a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000}, 0x20) [ 220.516111][ T9398] kvm: pic: level sensitive irq not supported [ 220.531573][ T9398] kvm: pic: single mode not supported [ 220.537919][ T9398] kvm: pic: level sensitive irq not supported 05:26:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'nlmon\t\x00\x7f\xed\xb1[\xe5\xa3\xcd\xb6\x00'}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)={0x2, 0x1, [@local]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:26:05 executing program 2: 05:26:05 executing program 0: 05:26:05 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x6, &(0x7f0000000080)={@rand_addr="f2b4deefa010a59fe25bac80f36f805a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000}, 0x20) 05:26:05 executing program 3: 05:26:05 executing program 3: 05:26:05 executing program 2: [ 221.293107][ T9436] kvm: pic: level sensitive irq not supported [ 221.295717][ T9436] kvm: pic: single mode not supported [ 221.302383][ T9436] kvm: pic: level sensitive irq not supported [ 221.303312][ T9448] kvm: pic: level sensitive irq not supported [ 221.318664][ T9448] kvm: pic: single mode not supported [ 221.328302][ T9448] kvm: pic: level sensitive irq not supported 05:26:06 executing program 1: 05:26:06 executing program 0: 05:26:06 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x6, &(0x7f0000000080)={@rand_addr="f2b4deefa010a59fe25bac80f36f805a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000}, 0x20) 05:26:06 executing program 2: 05:26:06 executing program 3: 05:26:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'nlmon\t\x00\x7f\xed\xb1[\xe5\xa3\xcd\xb6\x00'}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)={0x2, 0x1, [@local]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:26:06 executing program 3: 05:26:06 executing program 0: 05:26:06 executing program 2: 05:26:06 executing program 1: 05:26:06 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x6, &(0x7f0000000080)={@rand_addr="f2b4deefa010a59fe25bac80f36f805a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000}, 0x20) 05:26:06 executing program 3: 05:26:06 executing program 2: 05:26:06 executing program 1: 05:26:06 executing program 0: 05:26:06 executing program 1: 05:26:06 executing program 2: [ 222.744446][ T9483] kvm: pic: level sensitive irq not supported [ 222.745438][ T9483] kvm: pic: single mode not supported [ 222.764775][ T9483] kvm: pic: level sensitive irq not supported 05:26:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'nlmon\t\x00\x7f\xed\xb1[\xe5\xa3\xcd\xb6\x00'}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)={0x2, 0x1, [@local]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:26:07 executing program 3: 05:26:07 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x6, &(0x7f0000000080)={@rand_addr="f2b4deefa010a59fe25bac80f36f805a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000}, 0x20) 05:26:07 executing program 0: 05:26:07 executing program 1: 05:26:07 executing program 2: 05:26:08 executing program 2: 05:26:08 executing program 3: 05:26:08 executing program 0: 05:26:08 executing program 1: 05:26:08 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x6, &(0x7f0000000080)={@rand_addr="f2b4deefa010a59fe25bac80f36f805a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000}, 0x20) 05:26:08 executing program 3: 05:26:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'nlmon\t\x00\x7f\xed\xb1[\xe5\xa3\xcd\xb6\x00'}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)={0x2, 0x1, [@local]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:26:08 executing program 3: 05:26:08 executing program 1: 05:26:08 executing program 0: 05:26:08 executing program 2: 05:26:08 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x6, &(0x7f0000000080)={@rand_addr="f2b4deefa010a59fe25bac80f36f805a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000}, 0x20) 05:26:08 executing program 3: 05:26:08 executing program 2: 05:26:08 executing program 1: 05:26:08 executing program 0: 05:26:08 executing program 4: socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000080)={@rand_addr="f2b4deefa010a59fe25bac80f36f805a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000}, 0x20) 05:26:08 executing program 3: 05:26:09 executing program 2: 05:26:09 executing program 1: 05:26:09 executing program 0: 05:26:09 executing program 3: 05:26:09 executing program 4: socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000080)={@rand_addr="f2b4deefa010a59fe25bac80f36f805a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000}, 0x20) 05:26:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'nlmon\t\x00\x7f\xed\xb1[\xe5\xa3\xcd\xb6\x00'}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)={0x2, 0x1, [@local]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:26:09 executing program 3: 05:26:09 executing program 1: 05:26:09 executing program 2: 05:26:09 executing program 0: 05:26:09 executing program 4: socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000080)={@rand_addr="f2b4deefa010a59fe25bac80f36f805a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000}, 0x20) 05:26:09 executing program 3: 05:26:09 executing program 2: 05:26:09 executing program 1: 05:26:09 executing program 0: 05:26:09 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x6, 0x0, 0x0) 05:26:09 executing program 2: 05:26:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'nlmon\t\x00\x7f\xed\xb1[\xe5\xa3\xcd\xb6\x00'}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)={0x2, 0x1, [@local]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:26:09 executing program 3: 05:26:09 executing program 1: 05:26:09 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x6, 0x0, 0x0) 05:26:09 executing program 2: 05:26:09 executing program 0: 05:26:09 executing program 3: 05:26:09 executing program 1: 05:26:09 executing program 0: 05:26:10 executing program 2: 05:26:10 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x6, 0x0, 0x0) 05:26:10 executing program 3: 05:26:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'nlmon\t\x00\x7f\xed\xb1[\xe5\xa3\xcd\xb6\x00'}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)={0x2, 0x1, [@local]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:26:10 executing program 1: 05:26:10 executing program 4: 05:26:10 executing program 3: 05:26:10 executing program 2: 05:26:10 executing program 0: 05:26:10 executing program 3: 05:26:10 executing program 1: 05:26:10 executing program 4: 05:26:10 executing program 2: 05:26:10 executing program 0: 05:26:10 executing program 1: 05:26:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'nlmon\t\x00\x7f\xed\xb1[\xe5\xa3\xcd\xb6\x00'}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)={0x2, 0x1, [@local]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:26:10 executing program 4: 05:26:10 executing program 2: 05:26:10 executing program 3: 05:26:10 executing program 1: 05:26:10 executing program 0: 05:26:11 executing program 3: 05:26:11 executing program 2: 05:26:11 executing program 4: 05:26:11 executing program 1: 05:26:11 executing program 0: 05:26:11 executing program 2: 05:26:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'nlmon\t\x00\x7f\xed\xb1[\xe5\xa3\xcd\xb6\x00'}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)={0x2, 0x1, [@local]}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:26:11 executing program 3: 05:26:11 executing program 1: 05:26:11 executing program 4: 05:26:11 executing program 0: 05:26:11 executing program 2: 05:26:11 executing program 3: 05:26:11 executing program 4: 05:26:11 executing program 0: 05:26:11 executing program 1: 05:26:11 executing program 3: 05:26:11 executing program 2: 05:26:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'nlmon\t\x00\x7f\xed\xb1[\xe5\xa3\xcd\xb6\x00'}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)={0x2, 0x1, [@local]}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:26:11 executing program 4: 05:26:11 executing program 1: 05:26:11 executing program 0: 05:26:11 executing program 3: 05:26:11 executing program 2: 05:26:12 executing program 0: 05:26:12 executing program 4: 05:26:12 executing program 1: 05:26:12 executing program 2: 05:26:12 executing program 3: 05:26:12 executing program 0: 05:26:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'nlmon\t\x00\x7f\xed\xb1[\xe5\xa3\xcd\xb6\x00'}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)={0x2, 0x1, [@local]}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:26:12 executing program 4: 05:26:12 executing program 1: 05:26:12 executing program 3: 05:26:12 executing program 2: 05:26:12 executing program 0: 05:26:12 executing program 1: 05:26:12 executing program 3: 05:26:12 executing program 2: 05:26:12 executing program 4: 05:26:12 executing program 0: 05:26:12 executing program 4: 05:26:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'nlmon\t\x00\x7f\xed\xb1[\xe5\xa3\xcd\xb6\x00'}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:26:13 executing program 2: 05:26:13 executing program 0: 05:26:13 executing program 3: 05:26:13 executing program 1: 05:26:13 executing program 4: 05:26:13 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c07) 05:26:13 executing program 4: socket(0x0, 0x80002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x800000000007, 0x0) semtimedop(r0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="448a84011be2ff00c43119312172705e4e555c400d7b08d97609f6bb"], 0x1}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000740)={0x3, 0x0, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x1f004}) ioctl$KVM_RUN(r3, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) semctl$SETALL(0x0, 0x0, 0x11, 0x0) syz_open_procfs(0x0, 0x0) 05:26:13 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='stack\x00') sendfile(r2, r3, 0x0, 0x1000000000e6) 05:26:13 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, 0x0) 05:26:13 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x0, 0x0, 0x389}}], 0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@dev={0xfe, 0x80, [], 0x25}}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r1, &(0x7f00000017c0), 0x3a8, 0x4000) 05:26:13 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x3, 0x11) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e0000002300817ee45de087185082cf0400b0eb04000e00160011000586f9835b3f0a009148790003f85acc7c45", 0x2e}], 0x1}, 0x0) recvmsg(r1, &(0x7f00000003c0)={&(0x7f0000000340)=@can={0x1d, 0x0}, 0x80, &(0x7f0000001c00)=[{&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000000100)=""/20, 0x14}, {&(0x7f0000000840)=""/114, 0xfc}, {&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001a40)=""/136, 0x88}, {&(0x7f0000001b00)=""/82, 0x52}, {&(0x7f0000001b80)=""/126, 0x7e}], 0x1000000000000208, &(0x7f0000001c80)=""/228, 0xe4}, 0x40000102) sendmsg$kcm(r0, &(0x7f00000027c0)={&(0x7f0000002200)=@can={0x1d, r2}, 0x80, 0x0, 0x0, 0x0, 0x2e4}, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x22) recvmsg(r0, &(0x7f0000007ac0)={&(0x7f00000002c0)=@xdp={0x2c, 0x0, 0x0}, 0x2a3, &(0x7f0000000400)=[{&(0x7f0000000900)=""/171, 0xab}], 0x231, &(0x7f0000007a00)=""/129, 0xffffffffffffffe6}, 0x100) r4 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000000)=@in6, 0x80, 0x0}, 0x200008c4) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xa, 0x2, &(0x7f0000000240)=ANY=[@ANYRESHEX=r4], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, [], r3, 0x6, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)=@xdp={0x2c, 0x7, r3, 0x11}, 0x80, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="50000000000000000155808c0700000027fe2f530ad98348afcb58e52c4b84321a2de77f787b6db593c2369dc0186a63fd7e1ec6ef23c19d10ac7df1c9de43ff3df83208c4950e346e0da5f38200000060000000000000003202000000000000f3944b03db88c69c0fc1ce0ffd024ac00c90b95b7e400ac6262b6d18361a760b4076c6d13dfdd4a1b2e02dfcd00483e90bf7be472ba84122085dd859f3028e0294c3a67e77ba1d5c6500000000000000980000000000000001010000fe0500007d3669587a851feb852e0883e83256dc46f818119520223552e26eaa4f00167397fe71867dbcf2947c9642b9b4c645f3b7b8cbf267d61846dde3dc88798cdee78fc6c933310c10ea41f867af64cfd46989c2c32b2a54cfd212201e65e85fc9a8475fa243a8b455a2f47cc954bb83d5f7201de013de9997a048350b71aac438570ba671bd0000000058000000000000009300000000000000dcdcf6d780e0de59ed954c1e1007b12d265d99fd8cc0d6db8b16e418dfd9df5c4fdade0732bbc3162d57f3c655228bbfd86c7efbb82785dd1c38d288c0633ef11149833cc4000000600000001e0000000000000001000000ac8ee381946376908d26d889e7da460ed931c8cf24da3fc3057bbab2dad083c1b821b9e00e60d381450956ecfe2a7f6fa957e725be7e18711b049c818acf5694b49c5c754cd96522dd4444000000000020000000000000000801000006000000b79ff14b822a5276b72981a60e0000003000000000000000452001ce0500000006f3affa211ad25f0e6d6b52771fcbd5d5eac579bada42000000000000000000"], 0x250}, 0x40000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) close(r5) ioctl$SIOCSIFHWADDR(r5, 0x541b, &(0x7f0000000100)={'batadv0\x00\x80\x01\xa0\xff\xff\xff\xff\x00', @random="0100040c0b10"}) ioctl$TUNGETVNETHDRSZ(r5, 0x800454d7, &(0x7f0000000440)) r6 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r6, 0x29, 0x24, &(0x7f00000000c0), 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x4, 0xffffffff, 0x3, 0x0, 0x100, 0x1, 0x80000001, [], r2, 0xffffffffffffffff, 0x5, 0x2}, 0x3c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000480)={r7, &(0x7f0000000440)}, 0x20) r8 = getpid() perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x10, 0x5, 0x2, 0x2, 0x0, 0x2000000c, 0x4354, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x5, 0x10000000000, 0x3, 0x4, 0x1ff, 0x4, 0x8001}, r8, 0xe, 0xffffffffffffffff, 0xa6f54f15e4426119) perf_event_open(&(0x7f0000000540)={0x3, 0x70, 0x6, 0x7, 0x1f, 0x81, 0x0, 0x8, 0x80510, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xbd, 0x6}, 0x4410, 0x4, 0x3, 0x7, 0xea45, 0x5, 0x3ff}, r8, 0x10, r6, 0x0) socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f0000000180)="f4001100002b2c25e994efd18498d66205baa68754a3f5ffffff02000000000000000000000000002100000000000000c0010001", 0x34}], 0x1}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0) write$cgroup_pid(r9, &(0x7f0000000100), 0xda4fff08) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r9, 0x660c, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r9, 0x4008240b, &(0x7f0000001d80)={0x5, 0x70, 0x3, 0x6, 0x27, 0x1, 0x0, 0x8001, 0xe224, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x3}, 0x3a428, 0x4, 0x80000001, 0x4, 0xffffffffffff0001, 0x5, 0x3f}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) [ 229.014379][ T9781] picdev_read: 383 callbacks suppressed [ 229.014397][ T9781] kvm: pic: non byte read [ 229.044203][ T9781] picdev_write: 282 callbacks suppressed [ 229.044221][ T9781] kvm: pic: non byte write 05:26:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'nlmon\t\x00\x7f\xed\xb1[\xe5\xa3\xcd\xb6\x00'}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:26:13 executing program 2: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1dc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x7, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00', 0x1132}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x28}, {0x6}]}) 05:26:13 executing program 0: r0 = socket$inet6(0x10, 0x802, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x10b, &(0x7f0000000100)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a280930206000100000001020b00000a000f003502280014000000090005407f0180000022de1338d50400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d41d", 0x55}], 0x1}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 05:26:13 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(0x0, 0x8001141042, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000240)=@req3={0x10000, 0x100000001, 0x0, 0x1}, 0x1c) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xe, 0x0, 0x0) write(r1, &(0x7f0000000000), 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpu.stat\x00', 0x0, 0x0) ioctl$VT_RESIZE(r2, 0x5609, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x62a, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) lstat(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6(0xa, 0x49c68e0740a3058b, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000580)={{{@in=@multicast1, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4e20, 0x0, 0x0, 0x2, 0xa, 0x0, 0x80, 0x33, 0x0, r3}, {0x3fde27fc, 0x7fffffff, 0x0, 0x0, 0x5, 0x7, 0x0, 0x1}, {0x0, 0x3, 0x7ff, 0x5}, 0x0, 0x6e6bb8, 0x6, 0x1, 0x0, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x10}, 0x4d5}, 0xa, @in6=@mcast1, 0x0, 0x0, 0x0, 0xb8, 0x0, 0x4e9}}, 0xe8) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x807f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200}, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x2000) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f0000000680)) fchdir(r4) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) [ 229.343802][ T9816] netlink: 'syz-executor.0': attribute type 15 has an invalid length. [ 229.359140][ T9816] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 229.394314][ T9816] netlink: 33 bytes leftover after parsing attributes in process `syz-executor.0'. [ 229.535468][ T9816] netlink: 'syz-executor.0': attribute type 15 has an invalid length. [ 229.580411][ T9816] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 229.624777][ T9816] netlink: 33 bytes leftover after parsing attributes in process `syz-executor.0'. 05:26:14 executing program 0: set_mempolicy(0x4001, &(0x7f0000000040)=0x6c554818, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x3c) [ 229.862264][ T9823] kvm: pic: non byte read [ 229.896089][ T9823] kvm: pic: non byte write 05:26:14 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) 05:26:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'nlmon\t\x00\x7f\xed\xb1[\xe5\xa3\xcd\xb6\x00'}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 230.683938][ T9847] kvm: pic: non byte read [ 230.706948][ T9847] kvm: pic: non byte write 05:26:15 executing program 4: socket(0x0, 0x80002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x800000000007, 0x0) semtimedop(r0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="448a84011be2ff00c43119312172705e4e555c400d7b08d97609f6bb"], 0x1}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000740)={0x3, 0x0, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x1f004}) ioctl$KVM_RUN(r3, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) semctl$SETALL(0x0, 0x0, 0x11, 0x0) syz_open_procfs(0x0, 0x0) 05:26:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'nlmon\t\x00\x7f\xed\xb1[\xe5\xa3\xcd\xb6\x00'}) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)={0x2, 0x1, [@local]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 05:26:15 executing program 0: socket(0x0, 0x80002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x800000000007, 0x0) semtimedop(r0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="448a84011be2ff00c43119312172705e4e555c400d7b08d97609f6bb"], 0x1}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000740)={0x3, 0x0, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x1f004}) ioctl$KVM_RUN(r3, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) semctl$SETALL(0x0, 0x0, 0x11, 0x0) syz_open_procfs(0x0, 0x0) 05:26:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'nlmon\t\x00\x7f\xed\xb1[\xe5\xa3\xcd\xb6\x00'}) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)={0x2, 0x1, [@local]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 338.650079][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 338.656927][ C1] rcu: 1-....: (10560 ticks this GP) idle=c8a/1/0x4000000000000002 softirq=16250/16252 fqs=5249 [ 338.667667][ C1] (t=10502 jiffies g=13085 q=979) [ 338.672777][ C1] NMI backtrace for cpu 1 [ 338.677105][ C1] CPU: 1 PID: 9825 Comm: syz-executor.3 Not tainted 5.4.0-rc7-next-20191115 #0 [ 338.686011][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 338.696194][ C1] Call Trace: [ 338.699653][ C1] [ 338.702508][ C1] dump_stack+0x197/0x210 [ 338.706826][ C1] nmi_cpu_backtrace.cold+0x70/0xb2 [ 338.712190][ C1] ? lapic_can_unplug_cpu.cold+0x3a/0x3a [ 338.717835][ C1] nmi_trigger_cpumask_backtrace+0x23b/0x28b [ 338.724156][ C1] arch_trigger_cpumask_backtrace+0x14/0x20 [ 338.730044][ C1] rcu_dump_cpu_stacks+0x183/0x1cf [ 338.735154][ C1] ? find_next_bit+0x107/0x130 [ 338.739940][ C1] rcu_sched_clock_irq.cold+0x509/0xc02 [ 338.745478][ C1] ? raise_softirq+0x138/0x340 [ 338.750330][ C1] update_process_times+0x2d/0x70 [ 338.755354][ C1] tick_sched_handle+0xa2/0x190 [ 338.760201][ C1] tick_sched_timer+0x53/0x140 [ 338.764956][ C1] __hrtimer_run_queues+0x364/0xe40 [ 338.770316][ C1] ? tick_sched_do_timer+0x1b0/0x1b0 [ 338.775636][ C1] ? hrtimer_init+0x330/0x330 [ 338.780302][ C1] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 338.786036][ C1] ? ktime_get_update_offsets_now+0x2ce/0x430 [ 338.792112][ C1] hrtimer_interrupt+0x314/0x770 [ 338.797065][ C1] smp_apic_timer_interrupt+0x160/0x610 [ 338.802600][ C1] apic_timer_interrupt+0xf/0x20 [ 338.807528][ C1] [ 338.810462][ C1] RIP: 0010:irq_work_sync+0xd3/0x1d0 [ 338.815801][ C1] Code: f5 ff 4d 89 e6 4d 89 e5 48 b8 00 00 00 00 00 fc ff df 49 c1 ee 03 41 83 e5 07 49 01 c6 41 83 c5 03 eb 07 e8 7f 87 f5 ff f3 90 78 87 f5 ff be 04 00 00 00 4c 89 e7 e8 ab a6 31 00 41 0f b6 06 [ 338.835411][ C1] RSP: 0018:ffff888059f4fc08 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13 [ 338.843897][ C1] RAX: ffff88805c570040 RBX: 0000000000000002 RCX: ffffffff817e51f6 [ 338.851875][ C1] RDX: 0000000000000000 RSI: ffffffff817e51c1 RDI: 0000000000000005 [ 338.859864][ C1] RBP: ffff888059f4fc28 R08: ffff88805c570040 R09: ffffed10140bae82 [ 338.867882][ C1] R10: ffffed10140bae81 R11: ffff8880a05d740b R12: ffff8880a05d7408 [ 338.875845][ C1] R13: 0000000000000003 R14: ffffed10140bae81 R15: ffff888059f4fcc8 [ 338.883853][ C1] ? irq_work_sync+0x106/0x1d0 [ 338.888647][ C1] ? irq_work_sync+0xd1/0x1d0 [ 338.893317][ C1] ? irq_work_sync+0xd1/0x1d0 [ 338.897988][ C1] _free_event+0x89/0x13b0 [ 338.902422][ C1] ? __kasan_check_write+0x14/0x20 [ 338.907551][ C1] ? __mutex_unlock_slowpath+0xf0/0x6a0 [ 338.913095][ C1] ? mark_held_locks+0xa4/0xf0 [ 338.917854][ C1] ? ring_buffer_attach+0x650/0x650 [ 338.923078][ C1] ? wait_for_completion+0x440/0x440 [ 338.928379][ C1] put_event+0x47/0x60 [ 338.932475][ C1] perf_event_release_kernel+0x6d5/0xd70 [ 338.938245][ C1] ? __perf_event_exit_context+0x170/0x170 [ 338.944054][ C1] ? fasync_helper+0x6e/0xb2 [ 338.948663][ C1] perf_release+0x37/0x50 [ 338.953003][ C1] __fput+0x2ff/0x890 [ 338.956985][ C1] ? perf_event_release_kernel+0xd70/0xd70 [ 338.962790][ C1] ____fput+0x16/0x20 [ 338.966765][ C1] task_work_run+0x145/0x1c0 [ 338.971348][ C1] exit_to_usermode_loop+0x316/0x380 [ 338.976651][ C1] do_syscall_64+0x676/0x790 [ 338.981282][ C1] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 338.987206][ C1] RIP: 0033:0x4141d1 [ 338.991114][ C1] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 339.010796][ C1] RSP: 002b:00007fffb0a1d610 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 339.019237][ C1] RAX: 0000000000000000 RBX: 0000000000000007 RCX: 00000000004141d1 [ 339.027192][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 339.035144][ C1] RBP: 0000000000000001 R08: 0000000034194edd R09: 0000000034194ee1 [ 339.043108][ C1] R10: 00007fffb0a1d6f0 R11: 0000000000000293 R12: 000000000075c9a0 [ 339.051079][ C1] R13: 000000000075c9a0 R14: 0000000000762c38 R15: 000000000075bfd4